Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/4ZOdvdbGz9jgaTBQtlkTgdWzQNs.roa
File: 4ZOdvdbGz9jgaTBQtlkTgdWzQNs.roa (raw, json)
Hash identifier: DGjWRwGkqwlJV7oX2FDMDn38txoD2VyM4YWbJFDOZnY=
Subject key identifier: E1:93:9D:BD:D6:C6:CF:D8:E0:69:30:50:B6:59:13:81:D5:B3:40:DB
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01857082C59A073E9AF239D9A12792BBE0DB
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/4ZOdvdbGz9jgaTBQtlkTgdWzQNs.roa
Signing time: Mon 02 Jan 2023 03:24:56 +0000
ROA not before: Mon 02 Jan 2023 03:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39120
IP address blocks: 185.197.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c5:9a:07:3e:9a:f2:39:d9:a1:27:92:bb:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 2 03:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1939dbdd6c6cfd8e0693050b6591381d5b340db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:f7:b8:ed:81:bd:7d:df:ad:6e:a2:cb:c8:
33:0d:30:f9:59:7f:77:14:a1:47:ad:61:33:6f:5f:
9a:4c:3f:fc:f8:e0:b0:81:e4:d1:64:11:3e:41:6e:
fa:6c:3d:d1:5c:ab:27:37:74:ed:16:d0:02:b0:d5:
a8:1d:24:47:11:95:97:b1:34:d7:02:c4:9c:80:32:
23:e4:86:64:66:ca:ec:66:11:52:23:b4:1c:fd:8b:
b7:b7:88:d6:10:d5:34:7a:25:8f:f7:47:51:be:e5:
df:84:7d:f0:af:27:72:23:97:56:19:27:c0:33:86:
a6:46:b9:74:1e:1a:5b:ab:69:83:90:e6:99:2c:3d:
73:bf:5b:e8:d2:d6:2c:ab:78:d6:b2:07:93:25:12:
30:61:4e:12:37:e3:48:53:31:77:4e:a7:3f:55:1a:
ae:80:a3:f4:65:38:5e:63:08:cf:1e:1d:15:6f:15:
f6:e8:b0:db:d4:1e:ff:d1:3b:20:b6:42:fe:bd:55:
70:43:d2:68:47:5f:85:84:df:0b:9a:1a:bd:1c:4a:
c2:ce:77:80:b6:18:8a:01:a7:6c:df:92:58:4d:00:
05:87:d9:53:5d:0e:13:4c:b7:27:f5:cd:bb:1d:32:
70:84:f1:4a:62:4f:68:21:4e:1b:0e:8f:12:a2:30:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:93:9D:BD:D6:C6:CF:D8:E0:69:30:50:B6:59:13:81:D5:B3:40:DB
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/4ZOdvdbGz9jgaTBQtlkTgdWzQNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.142.0/24
Signature Algorithm: sha256WithRSAEncryption
55:72:b6:ac:58:a2:3c:9d:60:8e:99:7d:e2:08:bb:95:f2:cf:
a0:72:f3:be:42:bd:56:fd:4d:3f:d7:36:74:db:ba:8d:b6:c4:
b4:24:0f:ef:fa:88:96:bf:c1:32:f2:41:e3:3b:eb:54:ce:04:
76:ba:36:22:66:e5:51:9d:98:e7:6e:b5:f5:eb:c4:40:40:40:
4c:66:7a:d8:4f:69:08:6b:04:25:63:55:08:5b:7f:77:09:a1:
0e:ba:93:46:2b:e5:3b:4a:c7:59:1b:ce:6f:1e:0d:e8:4a:40:
25:6f:d3:9a:00:05:a6:76:c1:61:5e:af:09:ef:8e:9d:00:9a:
bd:ca:56:95:c2:15:b1:46:a5:4d:2f:2a:9e:5f:1c:68:54:84:
20:5a:44:a0:f2:65:a3:1b:0d:f9:b4:a5:ef:0b:14:54:84:a9:
28:27:2c:3c:f8:b0:5c:4b:db:97:8b:cf:50:40:7b:e0:4a:90:
2c:43:e5:3f:fe:80:bf:d2:52:56:54:bb:1e:3f:9c:ca:12:68:
75:f4:80:7c:69:8e:bd:91:f7:0d:82:04:f5:a2:12:80:ff:0a:
cb:4c:80:72:14:e0:69:fa:3c:39:66:cb:8e:5c:ed:2e:51:f5:
89:85:b0:c1:42:49:79:49:87:41:e6:b1:b5:92:4a:cc:cb:40:
04:d9:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:52 2025 by rpki-client