Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/JlFHPh-YwM9h3B5wlFRmDE3P_KU.roa
File: JlFHPh-YwM9h3B5wlFRmDE3P_KU.roa (raw, json)
Hash identifier: kLL9i+wX2AD+Y7mKC/8NkDC7a7gFiXYdwokntTwEAgM=
Subject key identifier: 26:51:47:3E:1F:98:C0:CF:61:DC:1E:70:94:54:66:0C:4D:CF:FC:A5
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 05959D17
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/JlFHPh-YwM9h3B5wlFRmDE3P_KU.roa
Signing time: Sat 01 Jan 2022 05:52:23 +0000
ROA not before: Sat 01 Jan 2022 05:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 185.145.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93691159 (0x5959d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Jan 1 05:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2651473e1f98c0cf61dc1e709454660c4dcffca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:0a:0e:0a:c3:03:e0:ba:da:2c:75:07:bb:
6a:84:05:f8:f1:c9:59:02:10:76:5a:07:cb:2f:f9:
1e:b7:60:e6:22:f4:08:45:40:28:3e:84:7b:f4:52:
ab:9c:26:4a:25:1c:2e:f0:94:5a:af:9a:6e:69:37:
1a:43:5c:2a:79:07:ab:6d:06:42:43:93:80:30:02:
99:88:0e:bd:41:31:fd:f9:4e:77:8b:26:ad:5f:f7:
d6:68:67:a1:40:d8:25:b1:07:a2:f8:cd:17:8d:47:
e2:23:f0:2d:24:5e:0a:d0:86:3e:e9:14:b9:a3:5d:
a2:f4:bc:5d:f0:c9:14:92:21:6f:59:97:0d:dd:e0:
8c:2a:bf:1e:6e:c9:54:ca:37:3b:36:5e:6a:8f:05:
ca:0c:cf:01:84:a5:fb:e6:65:16:01:55:76:f7:3a:
58:27:24:89:49:26:6b:72:d2:86:85:8b:df:02:81:
c5:8c:ab:3f:92:45:96:d3:f7:18:03:83:04:16:de:
f4:90:e4:41:46:02:aa:1f:79:c8:8f:1c:be:39:dc:
6a:01:2b:9b:6f:8b:4e:c6:f9:1e:a0:6e:eb:fa:6d:
1e:40:d1:04:96:d3:f7:ca:62:6f:d7:36:b9:57:43:
38:f0:c5:23:05:bb:11:e5:17:dc:d5:38:68:96:c3:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:47:3E:1F:98:C0:CF:61:DC:1E:70:94:54:66:0C:4D:CF:FC:A5
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/JlFHPh-YwM9h3B5wlFRmDE3P_KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.247.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5c:e7:1a:51:12:35:f8:fa:e7:db:53:dc:cf:a8:e2:ca:02:
eb:f1:f2:2a:57:9e:4e:dc:c2:6a:15:e3:be:46:16:15:63:4e:
97:68:88:a9:d4:61:19:e3:90:28:31:c9:55:41:2e:fd:ae:bb:
1a:c0:49:b7:e2:73:a2:ef:35:6d:41:c8:49:77:b2:d9:05:8d:
47:aa:81:1d:7f:7b:6f:bb:68:87:23:70:a9:40:11:af:55:17:
29:be:61:c3:c1:dc:f8:07:1d:c3:82:f4:6e:07:c8:bc:ca:a4:
64:68:f7:a1:68:ed:e9:c8:4a:5b:2a:27:73:7a:9d:73:8e:f0:
76:0b:49:89:01:a1:7e:73:0a:19:7b:49:04:65:a8:f0:6e:64:
cb:f0:9a:b8:79:ea:eb:7a:14:0b:1a:ef:73:af:c0:91:e1:a7:
a7:70:4a:89:21:e1:02:35:a0:4e:f8:0f:18:0a:2e:54:ef:bf:
10:73:4a:d1:2b:b9:8b:4a:72:f0:b7:08:aa:98:e9:17:e5:01:
78:4f:63:10:0a:ad:cc:a2:5c:1d:5c:67:09:f7:74:3c:b3:bc:
1b:71:ff:7a:b2:ad:85:fa:d8:66:af:e4:a1:00:54:c4:5e:00:
e4:e5:87:a1:f3:e6:65:31:c0:89:3b:9b:b3:ce:39:bf:b5:61:
5f:7d:99:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:32 2025 by rpki-client