Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/X76-qlj37Tf9rYnMjbYkLYGteVA.roa
File: X76-qlj37Tf9rYnMjbYkLYGteVA.roa (raw, json)
Hash identifier: vXrEC5dtOTgEOe3KybfEGn6y44NqvytnZvA+5puvZZk=
Subject key identifier: 5F:BE:BE:AA:58:F7:ED:37:FD:AD:89:CC:8D:B6:24:2D:81:AD:79:50
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 0185729EE0AF71E676E8260E5747B53FD29E
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/X76-qlj37Tf9rYnMjbYkLYGteVA.roa
Signing time: Mon 02 Jan 2023 13:14:52 +0000
ROA not before: Mon 02 Jan 2023 13:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16171
IP address blocks: 185.144.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e0:af:71:e6:76:e8:26:0e:57:47:b5:3f:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Jan 2 13:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fbebeaa58f7ed37fdad89cc8db6242d81ad7950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:04:c7:43:1c:1d:c8:1f:1b:1b:54:17:c3:
00:e8:e6:60:82:55:f3:8c:e8:5a:a0:36:70:04:ad:
13:90:7e:15:37:80:b7:0e:c2:64:9c:4e:46:55:9a:
78:5b:da:9a:e3:67:9f:2d:5d:6d:7e:72:b5:00:1a:
3d:86:ae:8c:e0:22:7c:b5:2a:96:a2:b4:3a:d2:05:
65:ef:af:e8:89:1a:28:4f:64:ba:a7:11:65:f1:57:
4d:3f:5c:50:b1:26:d6:78:a3:60:75:73:c4:fe:86:
f3:b2:53:c3:c5:23:93:b4:68:e8:06:70:38:63:ca:
7b:7c:05:d8:2e:c4:26:cb:2b:e8:ab:d9:17:b9:47:
e6:c9:76:7f:35:71:1c:a8:d1:7b:bc:b2:8c:ca:4c:
a4:1a:74:ed:c8:55:74:38:01:a2:31:a4:c3:b2:10:
f5:52:af:e8:73:72:d7:ee:ba:a6:ac:66:1c:a5:89:
91:9a:1b:b9:5f:b2:30:73:4f:6e:7c:8a:8c:92:96:
26:43:a8:01:8e:7d:4a:ec:8e:f6:5b:62:67:26:6a:
fd:52:c0:c2:57:ca:0f:b8:b2:e4:35:70:c8:79:95:
f4:ec:ef:8f:d1:00:69:13:52:68:07:8a:92:a2:63:
9e:e5:c1:31:df:9e:4e:7d:91:4d:49:69:7f:70:e5:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:BE:AA:58:F7:ED:37:FD:AD:89:CC:8D:B6:24:2D:81:AD:79:50
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/X76-qlj37Tf9rYnMjbYkLYGteVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.124.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b8:c2:c6:13:55:f9:48:da:8f:13:e5:a0:d0:42:9e:87:cf:
17:1b:26:36:d8:11:1a:3a:28:56:01:1f:d3:a6:91:f7:31:19:
7f:85:66:cf:bd:bd:8a:0d:5d:27:18:33:ba:5e:53:fc:78:42:
01:11:e6:66:ce:fe:c8:8b:38:b1:82:37:5c:14:39:4d:8d:f2:
90:a4:7f:ba:fb:35:10:ea:3f:aa:19:9c:61:e9:e6:3e:58:71:
e0:3e:58:71:db:d9:eb:d5:2e:7f:28:3e:5a:6d:2c:93:51:7b:
d8:86:e5:f6:b6:a3:c0:ac:3b:c1:1e:f1:60:6b:1c:5d:8b:28:
19:8a:e8:d6:25:2b:58:7b:9b:f0:32:f9:3a:91:69:09:b7:24:
69:f6:c1:f1:e1:5e:d0:43:13:74:c5:5a:3b:ea:c0:85:c3:fa:
76:a9:7c:4d:9f:d4:91:13:39:d1:b8:ae:3e:32:0c:54:06:51:
76:89:37:37:49:18:80:6a:ee:d4:3e:56:8a:61:ce:1e:d4:95:
32:3f:7a:94:44:7b:9a:ef:6d:ee:db:23:6b:48:a2:cf:fb:f6:
87:9d:61:b7:5f:48:82:8d:b1:00:a5:cb:43:73:4f:56:5e:e6:
e5:67:08:e3:b7:86:57:aa:1e:50:91:7d:2f:84:ed:94:ee:c8:
29:98:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:16 2025 by rpki-client