Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/AzqrWDne1T1SSyhrD22-t0IxQSE.roa
File: AzqrWDne1T1SSyhrD22-t0IxQSE.roa (raw, json)
Hash identifier: t0+H3J2GwBdGtNGhazDK+jZ3YHg4oBONkRTAMFvIbbY=
Subject key identifier: 03:3A:AB:58:39:DE:D5:3D:52:4B:28:6B:0F:6D:BE:B7:42:31:41:21
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 018570D53E915B52030C74E26FC628664D4B
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/AzqrWDne1T1SSyhrD22-t0IxQSE.roa
Signing time: Mon 02 Jan 2023 04:55:01 +0000
ROA not before: Mon 02 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43108
IP address blocks: 185.242.184.0/24 maxlen: 24
2a13:6000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:3e:91:5b:52:03:0c:74:e2:6f:c6:28:66:4d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Jan 2 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=033aab5839ded53d524b286b0f6dbeb742314121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:a0:9e:ae:9e:3b:30:0b:34:fb:5e:a5:a0:
cf:62:37:70:dd:b1:cc:9e:7a:29:cc:03:eb:5c:d3:
11:8e:56:72:c2:c6:e6:6d:c1:57:10:cd:2f:ad:ab:
2b:53:bc:07:88:dc:70:6c:b7:83:08:11:dc:5b:32:
6d:15:7c:3d:e6:bb:6b:6a:91:3d:b0:22:44:4c:9e:
cf:81:69:aa:71:46:55:79:54:60:f9:24:cf:ec:a6:
35:6c:8b:85:76:b6:69:8c:d3:1d:c4:3e:0b:f8:c6:
00:b2:7a:6c:51:d0:db:07:9c:fc:8a:33:6d:51:33:
bc:ae:44:65:4a:4f:54:a0:1a:8d:6d:bc:f3:c5:e4:
b3:38:82:0c:a6:55:32:8d:ae:c8:b7:cd:4a:65:95:
21:95:87:48:af:40:43:e8:e5:b7:c5:83:df:04:bd:
84:3c:bc:07:b8:fa:23:85:f9:09:40:90:60:2e:bd:
68:95:91:f6:c5:69:6c:bb:45:f3:f0:2b:a6:74:b3:
99:bf:98:d7:f9:a9:01:b3:4a:52:3c:68:6c:be:93:
57:ed:a4:c5:fb:de:77:18:51:01:64:c3:dc:0c:6d:
11:a6:ad:2d:d7:04:1b:8e:ed:2c:4d:4d:8d:7d:2f:
27:ac:3d:1f:1b:7e:43:d0:3f:e3:d8:45:13:a9:da:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:AB:58:39:DE:D5:3D:52:4B:28:6B:0F:6D:BE:B7:42:31:41:21
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/AzqrWDne1T1SSyhrD22-t0IxQSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.184.0/24
IPv6:
2a13:6000::/29
Signature Algorithm: sha256WithRSAEncryption
af:e7:10:4b:4c:ee:4d:7a:7e:d1:9d:12:18:72:93:8c:ae:9a:
1a:5c:b3:70:01:b9:77:f8:0d:ec:ec:61:c0:00:b5:ad:cb:3e:
59:69:ba:66:f8:5a:c6:14:8b:03:1b:25:dc:ee:8a:bd:92:2d:
c0:40:6e:da:c3:d9:83:9d:42:5d:b2:cd:39:f7:c9:54:f7:96:
5d:94:b4:10:47:80:34:07:91:f4:78:28:f4:dc:b9:5e:75:6a:
f4:2c:70:2d:71:47:06:f9:7e:fd:ec:be:88:e4:8b:f9:af:d6:
29:a6:76:50:9b:d6:19:81:0a:38:da:67:1e:34:57:f1:12:d5:
8a:72:7c:90:90:37:bc:ad:57:57:73:af:0b:80:b3:df:a2:56:
e7:27:ce:c4:a6:b9:0e:91:76:62:75:eb:f7:5f:49:e5:bb:de:
82:28:46:c3:d7:69:98:53:b9:28:d7:0b:29:bf:13:5e:67:9f:
9b:3b:f4:b4:52:b6:79:06:27:24:2f:0e:a6:fa:ce:6d:33:8a:
71:21:25:c4:4d:c0:43:d5:75:db:ab:95:53:d7:73:72:de:10:
02:91:ae:b8:3e:62:eb:24:65:d6:07:dc:7e:87:91:bf:d9:82:
ee:1b:c1:45:72:d0:53:51:07:6d:29:c2:a6:df:ec:72:dc:c3:
30:7a:eb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:11 2025 by rpki-client