Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/b8_hBozyK8IYcmX_-8gZueFi40s.roa
File: b8_hBozyK8IYcmX_-8gZueFi40s.roa (raw, json)
Hash identifier: +5tOBko2Tb8SDd6zTWS3uw79BlfWLmHfEwCX3qZ6W8Y=
Subject key identifier: 6F:CF:E1:06:8C:F2:2B:C2:18:72:65:FF:FB:C8:19:B9:E1:62:E3:4B
Certificate issuer: /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial: 0184B9A681AD2D2C1685FA2DE2D9A6C659AF
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/b8_hBozyK8IYcmX_-8gZueFi40s.roa
Signing time: Sun 27 Nov 2022 15:13:27 +0000
ROA not before: Sun 27 Nov 2022 15:13:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204741
IP address blocks: 185.242.24.0/22 maxlen: 22
185.242.24.0/24 maxlen: 24
185.242.27.0/24 maxlen: 24
185.242.25.0/24 maxlen: 24
2a0c:ba80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b9:a6:81:ad:2d:2c:16:85:fa:2d:e2:d9:a6:c6:59:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Validity
Not Before: Nov 27 15:13:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fcfe1068cf22bc2187265fffbc819b9e162e34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:3c:0f:03:d8:7e:51:6a:c0:74:1a:44:33:
6d:2a:e7:09:d2:c2:63:75:8b:aa:e8:00:3d:aa:4d:
7b:0b:d8:a7:bc:e3:72:97:dd:09:94:6f:1b:75:ae:
e4:e7:ba:40:40:e9:9e:78:ea:bd:f1:e7:fb:99:77:
00:a8:4a:f7:23:8a:b3:72:f0:b0:cf:f8:9e:a6:2a:
5e:cd:7b:e2:34:e7:4f:2d:80:30:1b:8d:5e:75:50:
3e:7b:bc:d3:89:53:84:e4:fd:a2:8d:91:ec:53:ee:
bd:78:ee:22:f7:1c:05:35:57:bf:ae:87:e4:a1:85:
65:7e:ec:54:ab:d3:e7:7a:8e:73:c3:48:8e:37:71:
55:29:9a:f0:e4:f2:89:15:8f:84:2d:19:05:7b:a4:
e0:3c:29:70:3e:58:77:49:9b:e3:32:86:56:29:d3:
06:da:9d:a9:39:3f:3d:c3:c6:f8:96:62:b5:93:72:
f5:be:b7:e1:24:84:03:1c:2c:13:99:0e:6c:90:31:
c8:e5:76:20:c5:d6:57:48:e3:f4:38:53:0c:b2:87:
09:d8:ad:c7:f2:b2:97:b6:c6:a8:f9:04:e9:03:3a:
36:55:de:a9:cb:e1:ec:b7:de:bf:a4:25:96:07:9d:
58:0c:76:9d:30:f7:7e:7e:bb:32:4c:4f:1b:9a:bb:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CF:E1:06:8C:F2:2B:C2:18:72:65:FF:FB:C8:19:B9:E1:62:E3:4B
X509v3 Authority Key Identifier:
keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/b8_hBozyK8IYcmX_-8gZueFi40s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.24.0/22
IPv6:
2a0c:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:9f:6f:60:66:44:0a:87:d1:bb:db:21:a0:50:95:f9:e0:74:
e3:f9:79:97:6f:8e:af:ed:b8:db:18:58:82:27:fc:7a:b2:0e:
e8:32:a5:a3:a2:f1:cc:53:02:5b:b3:88:f8:ba:99:db:72:80:
fb:e2:3e:6b:eb:3a:92:d7:5e:2b:4d:a8:29:1d:1d:6e:04:9e:
e9:0d:8e:a6:cd:3e:49:ac:55:13:e6:94:ed:13:6f:65:94:a9:
ed:48:a5:e2:f6:d2:48:14:40:96:b4:60:ad:04:24:67:67:0e:
b6:2a:b0:1f:36:93:8d:50:1e:fe:d4:d9:c5:12:8e:67:8f:eb:
82:ad:6d:55:e2:58:5f:76:38:b7:4f:bd:e6:7a:e7:1d:b1:1a:
02:65:c4:11:cb:c4:7b:85:01:44:6f:f9:15:dc:5d:62:ce:58:
af:8b:8c:53:e8:44:d7:12:4c:42:2e:9c:54:7b:d3:14:6a:cc:
de:80:51:2d:ae:37:85:76:4f:8f:1e:ae:bd:f8:cb:7e:b7:98:
fb:8a:11:19:f2:f7:7e:6b:b7:f2:d5:88:3b:c7:32:c8:31:8b:
ee:1a:d7:1b:8c:4e:ad:7f:dd:0e:ea:02:7d:36:d6:13:37:f9:
99:b2:a8:ae:3e:bb:f0:e7:83:09:9b:80:ad:9c:e5:1c:98:4f:
f0:4c:48:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:09:05 2025 by rpki-client