Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/sBL_VRWoictaqwLcEtDOXGRy7-g.roa
File: sBL_VRWoictaqwLcEtDOXGRy7-g.roa (raw, json)
Hash identifier: 5o8QVUc6cgoFeu6FULw7WCJcMPncRansisobNm9j5GY=
Subject key identifier: B0:12:FF:55:15:A8:89:CB:5A:AB:02:DC:12:D0:CE:5C:64:72:EF:E8
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 018572DF052CFE140AD4BF0140652DA37D1D
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/sBL_VRWoictaqwLcEtDOXGRy7-g.roa
Signing time: Mon 02 Jan 2023 14:24:56 +0000
ROA not before: Mon 02 Jan 2023 14:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41881
IP address blocks: 185.192.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:05:2c:fe:14:0a:d4:bf:01:40:65:2d:a3:7d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jan 2 14:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b012ff5515a889cb5aab02dc12d0ce5c6472efe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:ab:62:78:56:93:15:8e:f3:31:85:b2:9b:
2d:33:64:48:dc:2f:9e:1b:4d:dc:52:0c:e7:6b:5e:
d2:b4:ae:08:30:ba:6d:83:5d:ea:b5:d2:c9:fa:8c:
57:46:97:4b:89:47:00:58:ba:8a:58:74:b1:e7:c9:
d2:f4:5e:ce:63:fa:18:f3:d4:76:e6:b3:65:58:54:
94:de:13:a3:04:a8:85:03:52:b0:db:c3:92:01:21:
3e:3e:7d:2f:83:cf:1d:34:48:a2:cd:12:5c:84:c2:
c1:10:f8:17:e9:8d:b6:31:29:f3:6b:ca:90:b8:a6:
f8:a8:47:b3:08:e4:ac:82:74:2c:13:20:6a:74:2c:
c3:d6:7f:22:b2:51:ec:f4:df:17:67:45:dd:5b:2a:
47:a3:f9:24:14:58:bd:d7:63:22:4e:9b:8c:6d:46:
5f:75:d5:ec:d2:9b:eb:60:26:8f:9e:c4:1c:ce:cc:
f5:66:5a:09:57:45:0d:c3:11:87:ed:8a:67:06:ea:
d7:ae:5a:c1:a0:e0:f2:70:89:2d:2d:ff:83:a2:09:
c5:eb:48:73:2c:fe:2d:7d:46:01:cd:c2:a3:cd:0b:
28:90:55:56:c7:fe:7b:6a:94:6e:78:68:3d:d3:0e:
5f:ed:ac:24:d3:31:02:fe:db:a5:f4:51:3e:d4:62:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:FF:55:15:A8:89:CB:5A:AB:02:DC:12:D0:CE:5C:64:72:EF:E8
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/sBL_VRWoictaqwLcEtDOXGRy7-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.113.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ba:b1:84:2e:03:60:06:1f:2f:d3:42:df:86:a3:d3:a4:f4:
23:e2:7b:97:cd:a7:a6:cd:85:f7:72:c6:92:9d:39:db:41:0f:
3b:db:4c:f2:0b:bc:94:db:78:16:63:15:a0:64:d6:85:a9:5b:
09:0c:0a:b9:ac:4f:5e:3a:f1:de:a8:72:20:08:9e:44:de:7c:
49:65:ee:0d:df:aa:21:70:1e:32:43:a3:25:79:b8:6e:a5:19:
25:65:f4:6b:f8:71:20:07:70:5a:7f:ff:d7:a3:0e:24:67:13:
34:a3:ab:ca:e2:b7:42:24:07:ef:40:e2:a3:26:99:a8:d1:1b:
72:26:a0:fc:5f:a7:ee:c0:fb:37:f8:0e:80:5d:93:bf:26:10:
eb:93:51:86:a2:a0:8d:22:85:e1:fc:01:0f:ba:92:be:e4:68:
95:0e:87:d2:43:11:f9:01:c9:2c:40:33:b2:f2:53:aa:b2:81:
03:b8:0a:f4:37:48:6e:a7:c3:d3:62:23:6c:fe:d4:b9:9f:a7:
8c:2a:72:bc:84:a6:50:41:85:d6:78:81:b6:0c:87:26:09:ad:
75:61:67:7e:91:26:22:5e:f2:e9:de:10:8e:2b:cd:ee:4e:94:
bf:d9:f1:cd:c3:9a:cd:5c:c4:99:0e:00:3f:ff:da:88:09:f5:
bb:fa:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:32 2025 by rpki-client