Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/RF8XRRJwSmeGtEgYH5H2W14nNuY.roa
File: RF8XRRJwSmeGtEgYH5H2W14nNuY.roa (raw, json)
Hash identifier: c8+8iY4Qiu4Co73Yi9QXTafJrwj1qW10nRiO/CjhJcg=
Subject key identifier: 44:5F:17:45:12:70:4A:67:86:B4:48:18:1F:91:F6:5B:5E:27:36:E6
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 01857227F94BB39AB3E013888BB421A2796C
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/RF8XRRJwSmeGtEgYH5H2W14nNuY.roa
Signing time: Mon 02 Jan 2023 11:05:00 +0000
ROA not before: Mon 02 Jan 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211850
IP address blocks: 185.235.207.0/24 maxlen: 24
2a10:86c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f9:4b:b3:9a:b3:e0:13:88:8b:b4:21:a2:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Jan 2 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445f174512704a6786b448181f91f65b5e2736e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:1f:d7:85:4c:eb:7e:5a:db:6f:09:5a:91:
96:0b:e8:7d:63:2d:30:bd:f3:8b:14:9e:fc:61:61:
9a:57:af:ef:e1:ca:33:fd:5b:0a:79:d4:05:71:7a:
dd:68:10:1b:e0:2f:12:8b:36:9d:a4:51:ee:6b:2a:
dd:4c:d7:69:86:cf:44:9a:7b:df:f4:fd:ed:24:15:
31:c4:7e:ef:aa:be:77:d2:3c:de:26:1d:31:30:0d:
84:e1:27:35:03:cd:96:e2:09:67:b4:8f:e7:35:fc:
d5:47:38:75:ca:17:37:45:0f:f9:91:18:02:9d:11:
25:d7:ac:42:a1:67:db:76:4f:59:d0:15:81:37:5b:
00:db:60:a8:b6:3c:bc:f0:1c:e0:0c:68:71:68:9f:
90:82:85:0e:84:a7:4c:ef:6e:04:77:cf:37:74:53:
7c:d7:28:06:7f:e6:2b:3e:53:05:b4:6c:f5:a1:95:
9d:19:4a:8b:07:1a:3d:74:ba:a2:6a:5e:4b:4a:0c:
d1:ef:5a:8f:1a:e2:72:97:61:e5:0c:fd:e3:27:ac:
a7:02:97:8b:78:26:88:f2:b0:ec:63:57:10:ca:96:
df:10:df:e5:e9:51:85:35:9f:1c:3d:b0:e1:0a:75:
42:d7:60:80:13:7f:af:66:1f:2b:ef:d9:9d:68:9e:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:17:45:12:70:4A:67:86:B4:48:18:1F:91:F6:5B:5E:27:36:E6
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/RF8XRRJwSmeGtEgYH5H2W14nNuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.207.0/24
IPv6:
2a10:86c0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:71:8d:12:ca:6e:3d:d4:7c:5c:51:cf:38:0b:78:c9:70:95:
f3:36:09:48:17:bf:98:e9:cf:0c:2a:af:a8:de:d0:8d:a9:47:
88:f7:ae:8b:92:0b:12:2a:ac:a6:78:ef:30:98:1d:5c:46:73:
80:a8:21:f0:b4:c8:32:61:39:a2:8b:4f:cd:7b:89:51:87:68:
4e:b8:14:a6:8a:db:3d:ec:68:b2:e5:80:5e:28:b4:2f:af:f0:
9d:d3:ab:c2:ae:6f:3b:c5:95:7f:3e:e1:ea:ba:2a:05:78:40:
9d:82:7f:8d:7d:a9:d0:19:4b:7e:04:41:4d:b5:9f:b3:ad:b1:
18:ab:1b:02:25:c4:e5:4e:ea:d2:d0:cc:b7:0f:9e:3f:32:29:
47:a0:10:e1:6f:be:ed:16:13:9f:9c:21:fc:12:28:42:f1:c6:
00:d5:44:1d:94:6f:73:61:1c:1d:ea:7c:6a:98:fa:4b:e4:a1:
c5:80:dd:e9:d7:d7:89:aa:2e:25:ad:4d:ca:53:72:fe:38:de:
a1:f6:16:dd:4f:7d:f8:89:26:d8:e6:06:81:8a:8f:a7:d8:0b:
67:ca:d3:2c:db:1b:be:ff:27:ed:88:92:52:5c:3a:e4:8b:37:
9e:a3:f5:88:f6:27:21:fb:7f:c3:49:92:ca:72:4e:5e:41:e0:
e8:f3:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:51:23 2025 by rpki-client