Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/RLhrRCSslu6yF2ROUMoIOir4PSk.roa
File: RLhrRCSslu6yF2ROUMoIOir4PSk.roa (raw, json)
Hash identifier: ZhFXRp6y/D2zSk4OZXFZQ5z6tM0QOo0uOfTAJcrPkd8=
Subject key identifier: 44:B8:6B:44:24:AC:96:EE:B2:17:64:4E:50:CA:08:3A:2A:F8:3D:29
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 0F3CA461
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/RLhrRCSslu6yF2ROUMoIOir4PSk.roa
Signing time: Sat 01 Jan 2022 02:57:49 +0000
ROA not before: Sat 01 Jan 2022 02:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59989
IP address blocks: 185.111.6.0/24 maxlen: 24
185.111.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255632481 (0xf3ca461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jan 1 02:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44b86b4424ac96eeb217644e50ca083a2af83d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:ea:15:59:50:3d:35:18:90:ee:14:d3:26:
84:61:94:d1:f5:c0:dc:01:63:7d:e8:5a:37:d7:47:
d1:64:97:e0:38:a8:f7:b6:b6:20:1c:76:87:b3:e8:
dd:fc:8d:89:5b:2a:e2:7f:95:3c:05:f5:44:45:42:
f6:e6:6f:6e:d0:4a:f8:b9:83:b1:50:4a:55:0c:b4:
80:ac:82:3c:83:ee:61:b4:a8:5e:8f:1f:2d:bd:30:
12:ef:e0:f0:78:ca:06:8a:68:5d:c2:e8:77:7d:cd:
2f:d1:0d:d5:47:c0:52:29:47:22:ff:1e:03:d7:c2:
95:87:5b:c4:12:05:bf:fb:f4:8b:3d:51:a7:15:0f:
ae:de:e4:1e:d2:ec:cf:5c:1e:32:53:fb:c3:ca:2b:
46:78:c3:19:0d:4c:f4:f8:e5:f7:65:7e:0c:84:11:
3c:e9:70:34:11:3f:09:31:20:da:99:33:c3:96:cf:
c6:c2:9b:45:66:6a:a5:45:67:dd:cd:84:25:80:aa:
3b:e7:69:d6:17:94:6c:7e:52:81:e2:1b:6e:b8:9f:
48:fb:b6:ca:8c:c5:26:2d:92:21:92:3b:99:e8:04:
f6:e0:0f:45:6d:19:60:bd:6d:e6:7a:f9:ca:f9:49:
ae:c7:fe:32:9b:34:a7:ef:02:02:30:80:14:46:34:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:6B:44:24:AC:96:EE:B2:17:64:4E:50:CA:08:3A:2A:F8:3D:29
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/RLhrRCSslu6yF2ROUMoIOir4PSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.5.0-185.111.6.255
Signature Algorithm: sha256WithRSAEncryption
46:24:e5:43:b4:18:fd:13:46:38:4a:c3:7f:01:02:79:bf:78:
ff:0b:20:5b:f0:58:ad:98:ec:eb:b2:c3:08:19:87:da:4d:8c:
a7:c4:33:ab:69:86:6c:46:84:03:8c:21:f3:ea:08:f9:31:a2:
f3:20:9d:78:bb:e8:a1:5c:b1:b9:3a:4d:73:fb:35:4f:da:5b:
73:87:9f:bf:9f:ab:13:ce:7c:60:9e:dc:ba:fa:e8:0d:c7:59:
34:72:f5:50:ac:19:f9:be:36:85:3b:04:70:5d:aa:b7:e3:c1:
3d:d0:65:62:63:30:8d:98:42:92:77:16:52:86:ac:9b:44:e9:
68:84:b2:a2:b2:96:8e:e7:c6:71:87:fd:7f:e1:3c:85:90:03:
ea:fd:53:83:cc:78:75:0c:58:ed:72:95:6d:23:b8:3b:8d:71:
33:c4:81:3a:33:b8:ff:4a:e7:f7:33:13:bf:50:a3:a0:f2:1c:
cb:11:d8:39:36:27:cf:65:17:2d:c9:8d:59:47:70:ee:0f:af:
27:b1:37:d1:56:fc:b0:c0:e4:b5:bb:e7:96:30:99:eb:92:94:
be:06:56:30:31:9f:45:61:14:0d:37:dd:3e:86:17:a4:9f:78:
a1:07:7d:da:9d:28:ca:f1:40:42:13:d7:f8:9c:3a:bd:2f:2f:
d9:22:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:57 2025 by rpki-client