Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/41KJOtrYhuZAx8gEexeVJmUWko0.roa
File: 41KJOtrYhuZAx8gEexeVJmUWko0.roa (raw, json)
Hash identifier: Lk1Plh27cPupfxD5RFC8STBgYaNWJSo7h3SpoIuRS+Q=
Subject key identifier: E3:52:89:3A:DA:D8:86:E6:40:C7:C8:04:7B:17:95:26:65:16:92:8D
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 018C360A50EC7D79B186C4AB1AFD90112A3D
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/41KJOtrYhuZAx8gEexeVJmUWko0.roa
Signing time: Mon 04 Dec 2023 18:14:54 +0000
ROA not before: Mon 04 Dec 2023 18:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206250
IP address blocks: 185.42.84.0/22 maxlen: 22
2a01:62a0::/32 maxlen: 32
2a01:62a0:b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:36:0a:50:ec:7d:79:b1:86:c4:ab:1a:fd:90:11:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Dec 4 18:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e352893adad886e640c7c8047b1795266516928d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:85:f7:0e:6d:99:0e:71:21:0a:a2:cc:08:
c8:f3:f2:d5:da:7d:eb:1d:f4:75:e5:15:29:55:84:
a1:eb:22:54:f8:47:e5:85:6e:ac:36:b2:02:c3:f2:
7d:be:a4:7e:a2:bf:7a:36:ab:71:42:98:38:ae:f2:
11:48:90:f9:a7:3a:9e:0c:fd:80:f2:e3:e4:24:ec:
ca:f7:b6:81:48:67:ce:2a:07:4d:7f:32:10:9b:4b:
f5:79:87:50:0b:d2:6a:05:49:42:89:d3:b2:bd:15:
e5:26:bb:b3:a6:a6:23:fe:97:e5:df:1f:36:f7:11:
41:e2:11:cb:94:c2:82:d3:82:2a:a6:30:44:1f:73:
e2:0b:62:d6:2a:1d:13:1f:1b:a5:64:d8:48:f7:da:
4e:ff:ec:03:67:f3:11:90:e0:88:aa:44:85:23:9d:
0e:d1:d6:e0:8e:17:05:e4:9d:7a:93:e6:47:6a:f8:
e8:a4:f8:b7:e1:f2:63:8e:b4:0a:03:78:5d:7b:8e:
80:b9:e8:a7:d1:75:ef:77:02:a6:8d:c1:89:d8:4e:
56:8e:f4:62:c0:b2:2b:3e:ab:b0:38:8f:ff:13:9c:
fe:eb:92:f3:9b:98:28:f1:64:33:0c:78:6c:86:f4:
12:c4:ca:9f:fd:6e:9d:7d:2c:7e:55:11:cf:bb:96:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:89:3A:DA:D8:86:E6:40:C7:C8:04:7B:17:95:26:65:16:92:8D
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/41KJOtrYhuZAx8gEexeVJmUWko0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.84.0/22
IPv6:
2a01:62a0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:58:18:79:58:c2:9e:f9:fd:27:04:3b:f1:7e:90:06:a0:23:
51:e7:d3:52:9d:05:96:ba:f5:95:83:71:9b:69:00:45:65:b5:
0a:74:b0:14:a3:dc:0e:ea:0f:40:02:93:69:7f:33:a7:4e:f2:
fe:25:34:d9:97:77:ef:cc:44:ca:f4:48:38:aa:1a:d9:86:22:
97:42:29:23:b1:5a:f1:cb:35:1d:7d:9d:de:fa:7b:0a:32:9e:
a1:65:36:c6:99:65:df:87:72:42:51:fb:71:74:f5:02:37:3a:
8f:41:e6:3b:41:30:74:d3:ff:9d:d0:c9:48:18:af:a0:03:78:
42:ed:c5:eb:08:36:3a:2e:63:be:44:97:59:a9:d2:57:4e:c3:
e5:e7:db:1c:ff:8c:17:0d:81:82:11:e2:5d:79:cf:b8:bb:4d:
cd:f9:e6:07:0c:f3:43:5c:a0:44:81:51:61:e1:c1:38:36:0a:
56:98:52:0b:76:a0:5b:3a:3e:14:f2:fe:fc:61:89:ad:d4:89:
fa:6a:d7:8a:9e:15:0a:4e:01:71:ba:e5:23:94:07:cf:92:d9:
3f:23:7b:3d:92:a1:72:4a:3d:6e:eb:7a:5d:bb:44:13:8a:f5:
94:1a:8f:6a:80:ba:0c:36:01:00:05:63:e1:74:1c:8c:ea:91:
0e:bf:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:06 2025 by rpki-client