Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/IS89c8kyarAOd0Pl_qma3VzndAE.roa
File: IS89c8kyarAOd0Pl_qma3VzndAE.roa (raw, json)
Hash identifier: X0k2eZYhMil5e541gJrygag99tudaPqRZgimqu1S63k=
Subject key identifier: 21:2F:3D:73:C9:32:6A:B0:0E:77:43:E5:FE:A9:9A:DD:5C:E7:74:01
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 01856C6F1D38D249C1C0B9DDEAB355D29326
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/IS89c8kyarAOd0Pl_qma3VzndAE.roa
Signing time: Sun 01 Jan 2023 08:24:59 +0000
ROA not before: Sun 01 Jan 2023 08:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204834
IP address blocks: 185.129.240.0/24 maxlen: 24
185.129.240.0/22 maxlen: 22
185.129.241.0/24 maxlen: 24
185.129.242.0/24 maxlen: 24
185.129.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:1d:38:d2:49:c1:c0:b9:dd:ea:b3:55:d2:93:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 1 08:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=212f3d73c9326ab00e7743e5fea99add5ce77401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:52:67:97:f0:1a:b0:c6:f8:62:40:b1:32:67:
d1:70:2a:f1:5f:1f:a7:5d:e0:0f:bc:d4:cf:79:02:
25:9e:f6:91:94:2b:d8:5e:8b:6f:84:4f:58:ac:5e:
32:e3:12:b5:df:84:c6:7b:a1:78:35:ff:03:bf:77:
05:3e:c8:76:28:b9:56:c1:1a:63:d9:a2:f0:11:9e:
47:d0:2a:bf:81:ce:e9:a2:f8:01:88:5f:99:cf:21:
14:b9:e8:da:3e:f1:7f:ec:12:5e:89:2b:0f:94:cf:
66:eb:2f:b9:79:c1:c4:1f:fd:4b:3e:90:94:5f:a1:
63:81:35:13:7e:9b:66:bd:92:d0:52:a8:9e:73:78:
73:37:d5:8f:ab:be:d4:da:6e:5a:b5:48:72:da:f6:
2e:93:45:77:e0:13:5a:50:ca:5f:8f:ad:c5:05:b6:
25:84:6a:7a:a2:75:18:a3:38:cb:ef:89:5b:5a:cd:
01:7a:00:15:a8:57:6a:29:05:db:72:88:c4:fb:2f:
ff:9c:3b:be:e1:1a:ba:bb:5d:66:50:7b:39:28:ec:
bd:0d:ef:20:56:0b:80:99:c6:41:ae:ea:2c:d6:7b:
10:7a:6a:54:94:ec:b0:28:b6:a3:7c:be:9a:c8:14:
03:bf:fc:90:3b:9a:80:6f:da:4d:04:68:24:78:97:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2F:3D:73:C9:32:6A:B0:0E:77:43:E5:FE:A9:9A:DD:5C:E7:74:01
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/IS89c8kyarAOd0Pl_qma3VzndAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:56:cf:76:82:ea:fd:35:b8:d3:8e:6a:a9:eb:b9:51:7b:3f:
5a:8e:0b:12:a7:2e:c0:13:a1:4b:25:7e:12:9b:4d:83:8c:84:
1a:79:20:fd:b4:44:9d:79:13:8c:8d:0d:57:9d:7c:fb:ca:f4:
f9:20:21:59:92:9e:67:ad:77:e4:b5:b9:f0:3a:86:64:bb:6b:
5c:20:96:4c:ec:76:ac:79:89:d4:2b:1c:b1:b1:70:96:d5:95:
b7:f8:91:c6:e5:9a:ea:bb:7f:57:66:9d:14:ea:12:28:83:7f:
0c:48:91:63:e6:67:9a:f4:8f:c3:5c:31:ba:48:e2:b3:5c:3a:
52:0b:01:4a:fc:8e:11:43:8b:8b:fe:a1:77:8c:4d:63:d3:46:
7e:22:a6:e6:da:00:6e:a7:2e:7d:72:82:e3:98:9f:85:ce:33:
a3:e8:05:75:65:06:c8:53:c1:4d:91:e0:28:bf:a5:cd:a2:ef:
64:0a:44:2f:7f:7a:1a:01:79:5e:76:cd:19:49:54:01:8b:4b:
22:57:e1:18:6d:36:9e:3a:e2:d8:42:28:ba:76:19:00:86:8d:
32:2e:3f:8d:f7:02:81:95:2c:2d:12:8d:d2:06:bc:0e:ea:e0:
59:71:07:c1:3c:1b:33:40:22:e9:96:d8:8f:6f:87:d2:d9:03:
3f:11:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:06 2025 by rpki-client