Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/aKgV5SV6wbGR44lfwmekm3oaI0Y.roa
File: aKgV5SV6wbGR44lfwmekm3oaI0Y.roa (raw, json)
Hash identifier: 1a11+xdY09Fwz0oABCdlr32LKVOCl6CsVSYHU6hTOnQ=
Subject key identifier: 68:A8:15:E5:25:7A:C1:B1:91:E3:89:5F:C2:67:A4:9B:7A:1A:23:46
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 01856EB8EDCDD9B5A8D917F74B92F7E04CB1
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/aKgV5SV6wbGR44lfwmekm3oaI0Y.roa
Signing time: Sun 01 Jan 2023 19:04:51 +0000
ROA not before: Sun 01 Jan 2023 19:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35104
IP address blocks: 185.48.149.0/24 maxlen: 24
185.48.148.0/24 maxlen: 24
185.48.148.0/23 maxlen: 23
185.48.151.0/24 maxlen: 24
185.48.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:ed:cd:d9:b5:a8:d9:17:f7:4b:92:f7:e0:4c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jan 1 19:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68a815e5257ac1b191e3895fc267a49b7a1a2346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:8a:55:88:7a:9d:d1:d4:ad:43:52:39:c9:
ee:80:b6:44:56:8d:88:fd:7a:73:2b:0d:2d:28:62:
16:57:0f:85:8a:fd:80:ce:40:d3:a5:ce:25:dc:87:
7f:8b:23:46:44:22:a1:78:9a:4d:55:26:15:32:24:
08:5a:1f:0a:21:b3:83:d6:b2:d0:60:58:06:8b:08:
78:9c:39:04:1b:76:50:b4:cf:30:80:3e:48:aa:43:
75:7c:d5:44:5b:ba:bb:44:04:d6:b0:27:f9:06:da:
3a:b0:59:9d:4c:49:67:c8:83:c8:b1:27:98:68:25:
45:6b:1a:d9:af:48:f8:3a:ef:de:29:87:8e:bf:2a:
d9:ad:37:00:33:92:a0:5f:ae:80:a4:65:d7:81:b2:
47:0d:22:51:08:d4:d5:97:eb:12:d8:98:76:dd:7b:
29:a3:94:77:e1:d8:16:03:d0:bf:e2:10:14:81:34:
45:b9:ef:a8:11:c6:b3:02:23:b9:48:f0:05:0c:bd:
91:a1:86:86:61:94:e6:46:47:51:fe:7e:ff:0e:7b:
50:31:2d:d2:83:2d:d8:5c:f5:55:fa:74:d7:02:29:
f4:00:de:20:f9:13:0d:ad:35:cd:a4:12:17:e7:3b:
06:6e:0b:fa:01:ae:51:b1:40:0c:9d:43:37:2d:ba:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:15:E5:25:7A:C1:B1:91:E3:89:5F:C2:67:A4:9B:7A:1A:23:46
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/aKgV5SV6wbGR44lfwmekm3oaI0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.148.0/22
Signature Algorithm: sha256WithRSAEncryption
67:ae:96:6f:69:8a:b3:7c:7b:83:4d:44:ae:5c:bb:62:56:0d:
15:d0:a8:b4:6e:2f:ff:af:8b:95:69:f9:5f:ce:2a:f8:8c:73:
cc:46:c3:f7:19:1a:59:f7:35:f4:8c:f7:39:99:07:e0:11:10:
6a:09:39:b2:2c:2c:16:23:1d:03:c6:25:27:63:8f:98:62:4c:
6e:6c:59:b6:23:cc:5c:3f:80:e3:5b:e4:b6:30:10:98:4e:28:
9b:1f:5a:12:f6:04:50:22:55:2d:d2:8d:e8:e5:03:27:9a:8a:
cc:f1:ba:21:fa:44:ef:9f:3a:18:28:df:69:6e:c2:0f:32:40:
8c:3d:9e:ce:19:5c:e4:13:9e:ed:35:79:07:04:d9:8e:87:0e:
3f:ba:63:9b:19:e7:68:c7:96:42:89:0a:39:b1:5a:b5:a5:f5:
03:21:e5:2c:18:33:5b:6a:9f:88:98:d9:05:72:91:35:b4:31:
4c:60:9c:61:fc:43:81:1f:7b:f4:90:77:e7:6d:7a:1d:df:c4:
c7:ed:1a:9a:67:db:40:f6:5f:24:ac:90:71:88:1e:e2:69:c7:
25:c9:09:78:ed:2b:93:da:6e:55:8b:7c:f2:10:d1:1c:f9:8e:
1f:ef:32:88:13:e4:e5:2b:aa:c2:2f:0a:9f:9d:74:e1:9d:b3:
2f:24:4d:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuO3N2bWo2Rf3S5L34EyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm
YmQ0ZDUwHhcNMjMwMTAxMTkwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGE4MTVlNTI1N2FjMWIxOTFlMzg5NWZjMjY3YTQ5YjdhMWEyMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZSKVYh6ndHUrUNSOcnugLZEVo2I
/XpzKw0tKGIWVw+Fiv2AzkDTpc4l3Id/iyNGRCKheJpNVSYVMiQIWh8KIbOD1rLQ
YFgGiwh4nDkEG3ZQtM8wgD5IqkN1fNVEW7q7RATWsCf5Bto6sFmdTElnyIPIsSeY
aCVFaxrZr0j4Ou/eKYeOvyrZrTcAM5KgX66ApGXXgbJHDSJRCNTVl+sS2Jh23Xsp
o5R34dgWA9C/4hAUgTRFue+oEcazAiO5SPAFDL2RoYaGYZTmRkdR/n7/DntQMS3S
gy3YXPVV+nTXAin0AN4g+RMNrTXNpBIX5zsGbgv6Aa5RsUAMnUM3LbqiIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGioFeUlesGxkeOJX8JnpJt6GiNGMB8GA1UdIwQY
MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt
MzVlMDI3ODM2YmEzLzEvYUtnVjVTVjZ3YkdSNDRsZndtZWttM29hSTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz
LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTCUMA0G
CSqGSIb3DQEBCwUAA4IBAQBnrpZvaYqzfHuDTUSuXLtiVg0V0Ki0bi//r4uVaflf
zir4jHPMRsP3GRpZ9zX0jPc5mQfgERBqCTmyLCwWIx0DxiUnY4+YYkxubFm2I8xc
P4DjW+S2MBCYTiibH1oS9gRQIlUt0o3o5QMnmorM8boh+kTvnzoYKN9pbsIPMkCM
PZ7OGVzkE57tNXkHBNmOhw4/umObGedox5ZCiQo5sVq1pfUDIeUsGDNbap+ImNkF
cpE1tDFMYJxh/EOBH3v0kHfnbXod38TH7RqaZ9tA9l8krJBxiB7iacclyQl47SuT
2m5Vi3zyENEc+Y4f7zKIE+TlK6rCLwqfnXThnbMvJE1C
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:01 2025 by rpki-client