Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/k_RReDq6V0tFpEYg3HsFfehrS8k.roa
File: k_RReDq6V0tFpEYg3HsFfehrS8k.roa (raw, json)
Hash identifier: XI7t7po8MtyPlbOHkUltWvnmfVma0vASpWNjP4rB/48=
Subject key identifier: 93:F4:51:78:3A:BA:57:4B:45:A4:46:20:DC:7B:05:7D:E8:6B:4B:C9
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 01831CBB0B4A21D483ACE6AE33FDE53268F6
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/k_RReDq6V0tFpEYg3HsFfehrS8k.roa
Signing time: Thu 08 Sep 2022 10:52:43 +0000
ROA not before: Thu 08 Sep 2022 10:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203109
IP address blocks: 185.144.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:bb:0b:4a:21:d4:83:ac:e6:ae:33:fd:e5:32:68:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Sep 8 10:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93f451783aba574b45a44620dc7b057de86b4bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:84:fd:a7:ee:e6:f6:b5:45:ca:05:4c:a3:
e8:e0:8b:a8:5c:08:37:4a:fa:3a:ae:45:53:9b:a6:
7e:36:f4:a7:5c:32:73:69:71:9a:02:fd:39:dd:61:
0f:8d:36:cb:f2:91:3f:b7:d3:4f:86:8e:a1:a0:4d:
63:6e:69:25:fa:80:55:57:76:16:ba:f5:41:67:f2:
0a:48:d0:0a:f7:04:d0:c7:50:cc:bf:cf:60:87:3e:
2d:54:3f:2f:a7:bc:f2:95:a0:5d:e5:6a:56:91:c0:
03:5d:77:c5:70:14:55:15:34:55:cf:93:79:0e:ce:
c9:5f:28:31:bc:47:f3:bf:ca:58:59:63:c0:72:09:
11:c6:64:3c:bb:f2:41:82:45:fe:30:19:49:34:81:
d9:4e:f7:f7:6d:40:d0:c4:cc:72:f2:b7:2c:63:1f:
ad:80:b1:0b:4b:a0:ae:16:8d:2a:ab:ad:cc:73:0b:
28:6a:0e:60:d2:60:be:d3:12:4b:11:04:a0:1a:36:
56:1a:ab:42:c0:b9:0e:be:c5:20:c4:cb:ff:e9:ff:
0b:aa:4e:38:54:b7:ab:89:f0:0d:a7:87:87:3e:d0:
15:f0:b0:b4:5e:b1:e3:d9:fc:68:78:f1:87:7c:e1:
9f:d6:00:07:53:aa:3d:ab:1e:db:41:9d:28:a0:44:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:51:78:3A:BA:57:4B:45:A4:46:20:DC:7B:05:7D:E8:6B:4B:C9
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/k_RReDq6V0tFpEYg3HsFfehrS8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:d3:7b:50:94:91:87:14:d7:16:49:41:e0:b6:5b:6e:ad:d3:
3e:b8:f3:8b:d3:57:df:1c:ba:c3:91:26:d5:98:1e:6f:34:ae:
e6:4f:2c:90:f5:e7:89:22:0f:da:18:57:71:24:12:88:e9:da:
e4:99:6a:ed:74:97:70:cd:0e:f9:0f:4f:68:53:8f:7b:ed:ec:
52:42:c8:43:16:6f:e7:07:a5:8f:bd:f0:3e:0f:97:6d:84:0f:
d2:43:b8:26:66:b5:a6:a4:91:9b:24:d9:7d:0e:7c:f5:7d:de:
95:57:91:d5:ea:61:0a:55:57:da:09:81:1d:ad:37:ca:77:4a:
7c:9f:c6:54:d4:ad:13:e9:d5:92:f8:db:a8:bb:dc:75:af:1f:
6a:97:f8:95:02:de:d5:be:e2:14:10:a6:50:3e:7b:30:b4:a1:
79:d3:1f:d8:c0:45:7e:9f:f0:fa:cb:0b:ad:a8:ee:7e:64:83:
87:55:1a:4b:93:1c:e1:cc:8f:18:51:33:57:37:8f:13:20:62:
43:56:b2:99:40:c9:02:0b:fa:e9:86:4a:76:2f:07:11:b6:65:
77:49:72:94:60:2c:e9:f0:f9:26:7a:61:53:f3:b6:ed:7d:c7:
67:e4:fb:a5:70:6b:59:d3:23:53:77:24:a9:7d:a3:d6:d0:36:
10:af:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:25 2025 by rpki-client