Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/1-5pmo23mNV77BdbjhSzIr936uno.roa
File: 1-5pmo23mNV77BdbjhSzIr936uno.roa (raw, json)
Hash identifier: TSfsEvO5fMUl439V3GsNP5l2dBj6jyLHaajQTmmU8W8=
Subject key identifier: FB:9A:66:A3:6D:E6:35:5E:FB:05:D6:E3:85:2C:C8:AF:DD:FA:BA:7A
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 131CDB7B
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/1-5pmo23mNV77BdbjhSzIr936uno.roa
Signing time: Sun 01 May 2022 09:30:58 +0000
ROA not before: Sun 01 May 2022 09:30:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48359
IP address blocks: 185.129.198.0/24 maxlen: 24
185.129.201.0/24 maxlen: 24
185.129.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320658299 (0x131cdb7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: May 1 09:30:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb9a66a36de6355efb05d6e3852cc8afddfaba7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d8:6b:df:f1:1e:21:fe:8e:9f:1c:bb:0f:e6:
95:1d:ae:06:61:48:98:b9:fb:17:d2:9b:08:73:a6:
e4:5b:65:f1:82:75:f1:81:1e:23:ea:e5:d1:38:62:
e2:eb:47:8b:10:cd:11:d3:5f:25:7c:98:f7:62:22:
bb:ab:4d:f8:92:93:eb:e1:88:d5:80:f6:a5:9e:61:
05:f9:e5:c6:c5:1a:01:b5:31:49:6a:53:22:d7:15:
db:22:0b:82:42:5d:52:24:a8:39:d4:4a:9e:91:67:
57:cf:d6:57:90:b3:92:8c:f7:ca:4f:76:8a:95:70:
0d:fd:18:a2:cc:36:ad:53:4e:67:8f:57:4d:4a:f5:
5b:66:81:b7:6d:58:af:3b:ec:03:c3:b1:55:ae:b5:
da:60:3e:d1:c0:ee:3b:d5:89:95:1a:93:40:03:2c:
43:83:f2:4e:36:01:d7:ba:e7:2a:5e:f5:45:77:63:
4f:3e:ae:90:a3:5a:e1:04:d4:aa:0c:93:11:2b:4c:
54:23:66:d6:6b:2c:cd:6a:1c:6f:19:7f:94:8c:2e:
36:7a:bb:42:90:db:f5:0f:ea:61:f2:76:6d:6d:b9:
01:52:39:39:cb:6d:65:e1:1c:e0:54:53:6d:b7:78:
cc:67:79:c5:cf:d2:d3:2c:64:d4:46:d0:cc:a4:96:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:66:A3:6D:E6:35:5E:FB:05:D6:E3:85:2C:C8:AF:DD:FA:BA:7A
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/1-5pmo23mNV77BdbjhSzIr936uno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.198.0/24
185.129.201.0/24
185.129.212.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fd:3e:f7:58:e0:79:b3:bd:91:c1:fc:94:c9:b9:dc:08:b8:
1f:38:a2:69:51:7f:0f:30:40:89:61:5c:56:da:b5:68:61:26:
a5:47:de:6b:5f:f5:dd:c7:7d:12:80:a6:0d:0c:74:a9:8f:05:
6f:6a:2f:d5:c5:af:20:ac:8d:c2:87:0c:b5:25:17:2b:de:81:
9d:f7:d6:68:8c:66:6f:48:c6:34:19:83:06:ea:76:90:77:72:
0b:08:23:ce:87:1f:3e:be:0c:d2:91:fd:ec:7f:6e:28:2f:40:
1a:3d:30:84:58:e3:e8:b1:aa:7b:37:51:8d:6d:3f:1c:32:b8:
7c:56:7d:01:43:a3:3e:0b:c5:14:12:0f:44:45:1d:97:ec:d1:
e4:b7:d9:bc:0d:03:63:f2:02:36:e5:9a:da:4c:87:2f:ed:e8:
08:8d:62:5a:76:77:3e:46:3b:35:26:41:0b:f5:1c:d0:75:4f:
36:c6:6c:c2:62:68:8f:03:43:86:ea:c4:19:c7:d2:e1:ef:78:
a3:cf:39:4e:f2:bd:bb:c2:01:33:66:d8:24:92:ea:3c:e3:5b:
02:fc:f1:98:a3:03:2e:1f:42:e4:39:05:1f:f9:36:c6:1e:6e:
87:f4:2f:ec:51:4c:d1:1b:11:f2:1e:f4:a4:51:ff:a4:e7:f3:
57:52:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:05 2025 by rpki-client