Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/x60S-ZjufWVJKexaHJbHFicJktU.roa
File: x60S-ZjufWVJKexaHJbHFicJktU.roa (raw, json)
Hash identifier: PdPXz/iGsjlz+nhqtMEsxnSG1HpN6JF58DNghs69f0o=
Subject key identifier: C7:AD:12:F9:98:EE:7D:65:49:29:EC:5A:1C:96:C7:16:27:09:92:D5
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 018A224B64EA15CD045ACF0B22E824CEEBBD
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/x60S-ZjufWVJKexaHJbHFicJktU.roa
Signing time: Wed 23 Aug 2023 12:08:00 +0000
ROA not before: Wed 23 Aug 2023 12:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56443
IP address blocks: 185.105.58.0/24 maxlen: 24
185.128.132.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:4b:64:ea:15:cd:04:5a:cf:0b:22:e8:24:ce:eb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Aug 23 12:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7ad12f998ee7d654929ec5a1c96c716270992d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:33:70:19:8d:60:18:15:75:43:a2:46:aa:
95:ba:a8:fb:e0:17:d4:36:41:c5:20:cd:7e:eb:39:
be:0c:3e:48:d7:57:f0:af:a7:d0:cb:b2:4f:ee:63:
cd:66:49:85:fd:73:a0:19:c2:1c:bb:90:2f:0c:b2:
c0:7d:ba:00:cd:9c:53:b3:ed:cc:2e:0b:3e:d6:3c:
5d:f4:94:02:0a:7e:1c:ae:43:04:1d:10:5b:68:81:
4d:7c:af:d4:94:97:11:4c:d0:ae:01:2a:50:fa:38:
08:09:8e:63:0c:d7:99:9e:6b:7b:87:bb:86:7f:c5:
03:5e:97:40:03:43:7c:6c:05:6a:11:ef:a5:d7:b9:
df:a9:26:71:7c:68:33:fb:a9:c4:bd:6c:50:3a:25:
22:2a:29:14:ef:5d:5b:98:90:4e:04:f7:2f:40:d9:
3c:2b:82:d4:e7:94:f2:58:52:c3:63:04:49:48:d8:
a5:13:20:b0:cb:c8:da:31:6d:a8:c5:90:5b:43:de:
89:08:ab:00:91:3d:17:78:fb:a2:0c:87:28:e0:d9:
2c:92:33:bd:33:69:02:a7:e0:af:88:44:4d:7f:99:
ea:ed:5b:87:21:5d:85:a5:ab:64:ab:27:66:3c:2d:
a1:02:43:bd:90:bc:17:60:6e:68:eb:34:60:fc:b0:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:12:F9:98:EE:7D:65:49:29:EC:5A:1C:96:C7:16:27:09:92:D5
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/x60S-ZjufWVJKexaHJbHFicJktU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.58.0/24
185.128.132.0/23
Signature Algorithm: sha256WithRSAEncryption
17:05:7e:3d:6e:01:3d:a6:47:b9:6e:33:53:45:7b:ce:9f:78:
19:d3:c9:c2:b8:1f:66:d0:4e:cf:a6:53:f3:4b:d4:80:85:8a:
e6:ba:51:01:dc:80:d7:7f:97:2b:d5:77:97:ef:e9:19:b6:0d:
2a:cf:dc:9c:a9:16:e8:44:6d:43:9f:ba:35:7d:f7:91:a9:6f:
61:10:fe:06:6e:4e:8c:a2:93:eb:e6:d0:e1:e2:71:7e:0a:ff:
ff:ac:e2:2d:8b:67:2f:5d:65:b5:a5:f7:f1:ee:a2:14:4d:b6:
16:36:a1:28:3c:1c:d1:55:5b:58:bb:0f:d7:45:85:28:ed:65:
39:f5:29:54:1f:20:95:53:49:c7:85:96:11:9e:fb:b8:a9:7b:
d9:6a:b4:56:5c:90:e5:ac:be:77:a4:65:1e:70:a9:66:db:58:
3b:06:86:44:58:45:3d:50:49:f3:02:90:dd:e1:f4:ce:fc:35:
b4:1f:a0:da:94:cd:22:44:fb:69:4b:33:92:3e:1a:6a:63:a7:
b5:a3:80:3b:8f:d7:64:54:2f:b8:ba:58:65:4b:17:c0:df:8c:
3c:ef:f1:e5:53:dd:af:af:86:5d:e6:59:19:e5:ce:fb:de:78:
40:e4:f7:e8:7a:31:45:f4:f6:8e:2e:ed:6b:27:5c:66:82:0a:
9e:60:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:46:47 2025 by rpki-client