Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/f1VQbgNmYMlgtEj9Sgtxl8PBf-M.roa
File: f1VQbgNmYMlgtEj9Sgtxl8PBf-M.roa (raw, json)
Hash identifier: FtDBgfwcYaXpXq8TpLBH952x9mR389BX8C2ff97H/qI=
Subject key identifier: 7F:55:50:6E:03:66:60:C9:60:B4:48:FD:4A:0B:71:97:C3:C1:7F:E3
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 01857139CE88D1AFBE3711B4E453C324F84A
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/f1VQbgNmYMlgtEj9Sgtxl8PBf-M.roa
Signing time: Mon 02 Jan 2023 06:44:51 +0000
ROA not before: Mon 02 Jan 2023 06:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201027
IP address blocks: 185.238.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ce:88:d1:af:be:37:11:b4:e4:53:c3:24:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 06:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f55506e036660c960b448fd4a0b7197c3c17fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:78:7b:91:b9:77:6e:d7:91:23:77:bb:36:
c5:9b:e5:78:46:d8:9c:54:43:6c:1b:8a:87:7f:f5:
c3:92:8e:a8:ef:47:e8:7d:24:95:8b:3b:fb:0a:cb:
b0:59:36:69:47:b2:4f:86:81:74:a2:b2:50:65:ce:
4d:82:a6:42:ec:3b:c9:e7:5a:ff:03:46:f4:af:eb:
52:ba:12:60:a1:4c:30:f4:e4:c7:3a:e6:c9:4d:ec:
04:91:fa:77:b1:c1:44:1e:d6:e6:c7:0a:10:78:b7:
57:c3:a9:48:e4:a2:26:21:ea:9a:68:0e:50:00:69:
49:3f:83:53:6b:95:06:db:26:7f:b5:0a:e1:3a:09:
3f:e4:2c:5d:02:8a:e4:c0:3c:63:76:98:5d:94:7a:
c5:6f:99:db:49:e2:2f:d5:75:e5:63:fd:62:db:dd:
52:11:37:b5:d4:cd:35:4f:48:a9:98:0e:b2:7f:2a:
36:8a:dc:ef:c2:d2:35:cc:ae:60:20:b3:cd:d7:3c:
4e:40:ed:75:4e:c5:16:2d:04:fc:8c:74:ee:7d:b1:
62:5e:29:53:1b:f2:9f:49:b9:75:3a:9a:88:95:d1:
df:cf:88:0a:b9:b7:cb:0f:7b:42:ec:6c:bb:32:76:
c7:d0:0c:55:bc:fa:30:62:4a:12:be:92:a1:22:fa:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:50:6E:03:66:60:C9:60:B4:48:FD:4A:0B:71:97:C3:C1:7F:E3
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/f1VQbgNmYMlgtEj9Sgtxl8PBf-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:66:ed:78:3b:0f:34:2a:42:70:29:ce:e7:94:42:20:74:5b:
32:bc:be:16:97:da:e0:95:68:a8:ad:f5:de:21:48:c3:f2:a3:
7d:d8:30:a0:66:88:17:f5:67:3a:9d:40:c8:58:a8:07:c8:b9:
b1:98:43:d9:a3:6d:08:94:38:cc:e1:3a:1d:2b:8d:64:e2:2a:
c0:fd:88:8c:7b:d9:1a:df:72:79:56:75:8f:3c:b3:c9:01:ab:
27:03:e0:db:d9:85:8c:ff:0a:64:86:a4:c0:3e:69:7f:7d:5f:
d2:f2:22:39:96:7c:03:95:bd:b7:df:1a:05:a4:a9:b9:69:0a:
20:6c:f0:4a:0e:4f:9c:44:db:3b:51:26:7e:cb:0d:5b:43:71:
d6:e3:e8:2d:6a:80:46:b4:3c:7b:49:b2:e2:ab:54:f9:8f:84:
36:f0:41:c5:37:6f:2d:51:ce:f4:8e:2d:bc:9d:eb:97:6f:f6:
06:a6:3c:5b:72:45:bb:ef:f7:da:d0:9f:3b:7f:2a:3f:09:13:
ea:0d:ce:0c:80:fb:54:de:56:d4:93:02:e7:fd:48:4b:af:db:
48:2a:cf:f5:0f:6f:8b:9e:64:6a:aa:d2:aa:a2:c1:d7:d2:d2:
77:b0:8f:8e:af:82:a2:70:15:22:d8:1e:be:2c:74:4b:ee:14:
ad:c1:a0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:04 2025 by rpki-client