Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/tMLrRUkvg3EnQduqIq6q-076K64.roa
File: tMLrRUkvg3EnQduqIq6q-076K64.roa (raw, json)
Hash identifier: kjx0i9eje8cHixQGaKLRdXxuVhRDQYmB+BDwtwxkbPw=
Subject key identifier: B4:C2:EB:45:49:2F:83:71:27:41:DB:AA:22:AE:AA:FB:4E:FA:2B:AE
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 0184A501DEA6754BA6165236CEE25C0C4E34
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/tMLrRUkvg3EnQduqIq6q-076K64.roa
Signing time: Wed 23 Nov 2022 15:01:13 +0000
ROA not before: Wed 23 Nov 2022 15:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62050
IP address blocks: 185.51.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:01:de:a6:75:4b:a6:16:52:36:ce:e2:5c:0c:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Nov 23 15:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4c2eb45492f83712741dbaa22aeaafb4efa2bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:48:b2:eb:3f:e7:ff:dd:e3:65:0f:e8:15:
5d:e5:e3:ab:c0:91:0b:96:d3:83:86:75:05:4a:47:
87:66:b6:b0:d1:8c:78:71:29:f8:96:56:d9:6b:22:
ce:b4:5a:ea:75:2c:28:1f:54:69:ac:f4:5f:40:20:
11:85:6a:5e:d3:97:b8:66:b0:77:ba:26:ab:51:b8:
a2:01:de:d5:dc:ec:23:d9:75:ba:c1:f3:42:dc:02:
b7:48:f7:3c:b6:3a:d4:81:c1:1b:29:eb:7f:98:80:
ea:27:9b:80:38:b0:20:09:e9:2a:8f:8c:18:eb:12:
f2:25:2c:26:f3:77:01:4b:d9:af:87:2f:e1:89:47:
55:77:9f:52:3b:a2:4a:db:45:e8:c9:82:14:78:a0:
71:5b:8b:45:05:d0:b9:7b:d6:4d:ae:f5:d4:1d:b5:
40:ab:72:88:13:2c:05:63:e0:89:db:78:56:2d:9b:
92:c2:3f:b4:7d:e5:62:61:f2:2d:02:1e:dc:a8:58:
3d:84:d9:f2:c8:93:55:e3:72:cc:ea:c9:dd:48:71:
f1:e8:79:39:8a:43:a0:da:df:e6:96:83:5d:cd:d6:
8c:59:d9:f3:02:6b:f1:22:7d:eb:d2:13:f7:68:72:
b2:7b:30:6d:b3:92:d5:c2:f3:de:b8:62:5e:dd:83:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C2:EB:45:49:2F:83:71:27:41:DB:AA:22:AE:AA:FB:4E:FA:2B:AE
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/tMLrRUkvg3EnQduqIq6q-076K64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.116.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5e:ee:3e:cb:64:dd:3f:aa:cf:8e:89:3e:0e:03:e6:6c:82:
50:30:d8:76:78:15:10:93:41:8a:eb:f7:ff:07:92:7c:f9:da:
6c:42:89:ab:db:72:e9:cd:3b:0a:ac:72:e0:09:9a:85:ad:27:
d2:1b:4d:1f:03:ff:54:6b:2a:fe:38:19:f1:7e:41:b8:a8:ec:
d5:9e:6c:32:1f:36:5c:e3:d1:71:83:ab:bd:07:38:91:27:81:
34:9a:54:f0:1c:30:8e:a5:a1:d2:ee:2f:21:47:e3:8f:6f:c6:
2b:f8:21:de:46:3f:11:f8:5d:e1:94:69:a6:b9:b0:fa:7f:01:
52:0e:25:c4:50:71:b7:57:49:9c:22:87:ad:1d:69:92:ae:a7:
5e:90:cf:12:b8:15:6f:ae:48:ab:c2:0c:ba:e6:f8:ac:27:9c:
07:05:ce:52:c5:24:00:fd:95:22:eb:9e:f1:a2:02:f7:71:00:
a0:c4:fd:08:1b:b9:39:1e:df:72:a4:5f:35:17:f1:20:53:1a:
bf:38:d6:4d:f8:ce:a5:77:24:5f:ac:5d:56:63:b5:3b:f3:c7:
65:dd:4e:bb:c3:e3:16:b9:59:7e:9b:bf:a2:84:9a:da:24:b2:
45:7e:48:61:d0:5c:28:04:ca:60:e2:04:06:20:4e:40:4b:62:
5d:24:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:18 2025 by rpki-client