Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/1rtkyOaf6fZRB-Z8Q1A0YjMF4pQ.roa
File: 1rtkyOaf6fZRB-Z8Q1A0YjMF4pQ.roa (raw, json)
Hash identifier: k71Q0Jt796591vnMJlVh975CWhHu/33XpoMcly3XBVQ=
Subject key identifier: D6:BB:64:C8:E6:9F:E9:F6:51:07:E6:7C:43:50:34:62:33:05:E2:94
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 070B39BF
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/1rtkyOaf6fZRB-Z8Q1A0YjMF4pQ.roa
Signing time: Sat 01 Jan 2022 15:01:14 +0000
ROA not before: Sat 01 Jan 2022 15:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204356
IP address blocks: 185.252.103.0/24 maxlen: 24
185.252.100.0/24 maxlen: 24
185.252.101.0/24 maxlen: 24
185.252.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118176191 (0x70b39bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jan 1 15:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6bb64c8e69fe9f65107e67c435034623305e294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:e9:76:3e:8c:22:8d:5a:22:58:f2:10:56:
0f:55:48:ba:a3:ea:1c:70:02:4d:22:30:f3:ad:40:
4e:b2:02:f2:8f:b8:e4:f6:16:c4:07:e1:13:14:5e:
a4:dc:52:22:f9:07:67:54:8d:e6:2b:1d:cf:41:4a:
e9:85:1b:cf:37:ae:9e:4d:81:28:b7:50:e2:d1:d9:
65:56:38:b4:f3:a6:57:fb:b6:b0:88:f9:e9:d3:d6:
e3:22:1c:e4:c3:d4:b6:76:45:aa:ac:de:18:86:f3:
b3:dc:59:7d:8d:6d:d8:68:4d:20:80:10:ab:0a:d7:
e5:27:3c:05:38:8c:bc:f8:08:79:53:36:38:8f:f4:
79:80:a8:d2:71:cf:c3:13:6a:5e:a7:cd:9e:ae:c5:
d6:cc:68:da:fc:4d:9c:e9:20:59:dd:d5:00:ce:7f:
02:b8:dd:7f:eb:a9:c8:7f:80:b9:6c:18:f1:eb:e3:
64:8a:4e:bc:94:4d:fa:6b:ba:39:dd:f5:04:cc:ee:
cf:11:d9:80:d6:91:bb:35:93:0d:be:15:ff:8b:77:
97:68:d5:ac:85:5c:d6:79:29:fe:e1:12:ad:07:43:
a3:f7:85:d4:6e:e3:c1:73:77:c0:82:f7:75:ad:93:
a0:c4:1b:48:eb:3b:c6:83:30:6f:d8:17:58:b9:41:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:64:C8:E6:9F:E9:F6:51:07:E6:7C:43:50:34:62:33:05:E2:94
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/1rtkyOaf6fZRB-Z8Q1A0YjMF4pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:74:c9:07:d6:b4:1e:fa:38:77:d3:df:72:e3:c2:7e:5d:fc:
47:3b:10:7a:77:a7:c0:9e:3a:3a:c7:1d:38:4b:83:28:72:6b:
48:b8:d5:90:92:c7:22:b1:2c:d8:c1:b4:19:78:ef:b9:1d:06:
6d:36:c9:4e:60:17:2c:a1:26:93:51:ca:8f:1d:0e:e9:74:11:
67:5f:ad:70:d4:d8:f1:ab:7a:ae:7d:c5:03:1f:0b:2e:d2:27:
6a:f7:7f:bf:52:06:52:6c:75:9d:5a:7e:27:f2:ef:16:76:a6:
5c:16:46:89:72:3f:83:60:36:ff:ba:50:32:b3:3f:77:56:df:
31:c0:52:0c:da:5c:35:e8:51:c9:be:c9:6f:29:9a:5f:23:26:
ee:c8:72:00:ae:61:da:68:da:78:ba:5c:56:f8:5e:97:35:d6:
06:0a:ae:c6:9b:7b:eb:4e:6d:23:2a:06:1c:eb:c6:37:1f:c0:
86:43:90:21:23:d8:dd:9a:8b:bb:74:42:b5:f3:1d:4a:f7:56:
16:76:ee:f0:f3:dc:91:9d:28:1d:2e:3f:49:a2:f9:c7:31:50:
8a:86:4c:11:f0:4a:32:9b:2b:3c:ae:19:c6:81:68:81:06:fe:
be:bd:80:37:e0:67:ba:c0:2a:1c:49:90:d9:de:85:11:02:33:
e6:76:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:45:00 2025 by rpki-client