Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/t_YRqu6DcXxNS7jzPI_-5NEbqOI.roa
File: t_YRqu6DcXxNS7jzPI_-5NEbqOI.roa (raw, json)
Hash identifier: JJ7NbB3jj3fhN/O/T/v2Z+iRxqj+pNPrwMRpIdF/Fxs=
Subject key identifier: B7:F6:11:AA:EE:83:71:7C:4D:4B:B8:F3:3C:8F:FE:E4:D1:1B:A8:E2
Certificate issuer: /CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Certificate serial: 018A6F1CD23DB053A30BBB548B0569CACA10
Authority key identifier: 1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/t_YRqu6DcXxNS7jzPI_-5NEbqOI.roa
Signing time: Thu 07 Sep 2023 10:07:54 +0000
ROA not before: Thu 07 Sep 2023 10:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206429
IP address blocks: 185.186.196.0/22 maxlen: 22
185.252.152.0/22 maxlen: 22
2a0b:8580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:1c:d2:3d:b0:53:a3:0b:bb:54:8b:05:69:ca:ca:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0bb51a7b532be4d44ba604ae6e063f063f37d4
Validity
Not Before: Sep 7 10:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f611aaee83717c4d4bb8f33c8ffee4d11ba8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:89:00:ec:73:c3:05:88:56:69:29:a7:3c:
8b:f2:00:aa:3e:96:75:c7:eb:7f:a8:a5:b7:03:4f:
a8:64:b0:64:3b:a1:bf:fa:ee:60:a8:9d:b2:08:d6:
e8:ad:f3:43:39:58:eb:94:fe:e5:78:95:aa:84:58:
ae:93:a9:53:d2:5b:2a:c2:17:21:57:8c:06:f0:93:
bc:1d:39:5d:4a:44:4b:b7:f6:c1:f5:b0:9d:c0:d5:
0d:e9:f9:42:81:f6:d5:a2:1d:70:ba:89:5d:9f:5b:
1c:61:6d:b7:43:11:ff:28:38:c9:cd:3f:c5:dc:45:
83:5f:a4:e7:a2:00:fc:06:7f:b8:30:16:09:7a:5b:
be:6e:47:e6:a2:3b:a2:12:31:ec:ba:b8:31:29:bb:
6a:dc:39:86:5b:f3:39:25:47:e3:7f:2f:73:a3:ab:
cb:50:52:d8:63:80:13:8d:f0:25:3f:0b:8a:0a:44:
63:e9:a4:49:a8:c7:cf:07:8b:3d:83:f5:f4:f9:58:
8d:62:48:fe:36:41:52:d9:4b:b4:73:b6:bc:19:df:
b8:fc:0a:5c:26:44:36:f4:23:3a:a4:25:b5:ab:62:
cc:52:a1:65:51:f6:8b:57:f4:09:79:0e:d3:75:d9:
26:ea:fa:18:c8:36:e8:96:df:83:e7:df:4b:a6:5c:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:11:AA:EE:83:71:7C:4D:4B:B8:F3:3C:8F:FE:E4:D1:1B:A8:E2
X509v3 Authority Key Identifier:
keyid:1B:0B:B5:1A:7B:53:2B:E4:D4:4B:A6:04:AE:6E:06:3F:06:3F:37:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwu1GntTK-TUS6YErm4GPwY_N9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/t_YRqu6DcXxNS7jzPI_-5NEbqOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5e6a8f-0b79-4894-b91c-eecee893c527/1/Gwu1GntTK-TUS6YErm4GPwY_N9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.196.0/22
185.252.152.0/22
IPv6:
2a0b:8580::/29
Signature Algorithm: sha256WithRSAEncryption
27:24:68:9b:77:9c:b5:48:7b:3b:cf:7b:21:cc:96:0e:c3:e3:
13:26:12:f3:6f:eb:19:75:9d:4b:12:6a:b7:53:c6:3d:c8:cb:
a1:df:c3:bc:a0:5e:23:9a:29:9c:98:eb:dc:3b:08:ac:62:5a:
ca:25:45:4e:55:75:39:01:51:d4:83:2e:c8:c0:0b:af:92:42:
e4:26:05:17:ef:6a:02:aa:da:2e:20:f9:68:93:7b:9f:12:88:
8d:f0:8e:d8:9c:38:61:e7:44:8e:14:f4:3c:96:4b:78:a3:f0:
78:a2:f3:39:89:51:07:73:98:af:c8:dd:7a:6d:7b:af:08:43:
a5:3f:2a:47:6b:a3:cf:9e:7f:b4:71:9c:5e:46:04:45:46:93:
3f:8e:0d:38:57:a9:77:d1:ec:4e:6a:72:b3:53:c3:12:50:ef:
c1:66:59:32:d4:a3:61:de:11:fd:2b:37:48:56:b7:ad:00:c5:
cc:97:0e:6c:ff:d3:65:5c:26:d5:28:3b:5c:18:c6:1f:e0:7c:
c9:c9:93:5f:1d:46:52:c3:c6:c6:92:a4:c2:f1:86:92:ff:0f:
5b:c5:df:43:42:4a:29:73:2e:be:31:7d:01:cc:ae:c3:f6:8e:
99:31:40:b9:5c:fa:42:84:18:52:98:1f:11:49:5c:e6:f7:0b:
f6:92:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:40 2025 by rpki-client