Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/15gbUVR9WxJZupLFTqBFtJ9o9rA.roa
File: 15gbUVR9WxJZupLFTqBFtJ9o9rA.roa (raw, json)
Hash identifier: BPm0YY+5OzB+peKEgJYLo7hT4wrUebA11ehqZd6PcCc=
Subject key identifier: D7:98:1B:51:54:7D:5B:12:59:BA:92:C5:4E:A0:45:B4:9F:68:F6:B0
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 01856ECB6717A4488E110C1F922C6F65E39F
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/15gbUVR9WxJZupLFTqBFtJ9o9rA.roa
Signing time: Sun 01 Jan 2023 19:25:02 +0000
ROA not before: Sun 01 Jan 2023 19:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198947
IP address blocks: 185.22.180.0/22 maxlen: 22
2a00:65e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:67:17:a4:48:8e:11:0c:1f:92:2c:6f:65:e3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 1 19:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7981b51547d5b1259ba92c54ea045b49f68f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:f0:8e:04:60:1e:b3:9a:4f:c8:4f:97:bb:
f9:93:4f:e5:99:48:e0:25:f6:40:b8:c3:83:0c:fa:
00:a7:4d:86:3f:ba:99:76:4d:a8:de:8b:5a:e0:2d:
28:f7:e2:86:92:1d:a8:13:43:31:40:dd:80:ef:9a:
14:fa:17:e6:3c:5d:d5:4a:81:3c:f2:56:7b:98:85:
0b:a2:da:07:25:41:cb:5e:66:3b:9b:dd:32:51:2c:
56:61:03:f6:90:8b:8b:6f:45:a9:a2:d9:65:88:43:
89:bf:7c:dd:1f:f4:d1:53:ec:1d:07:4f:85:26:5f:
91:98:5e:35:38:d3:93:ae:31:8c:08:45:da:0b:65:
bf:37:42:46:6f:30:83:7e:de:9d:b5:d4:3b:4c:78:
47:45:4e:6a:49:c5:c5:cf:1b:0a:cc:fa:87:b4:8e:
70:f1:52:7b:7b:a9:34:c0:45:0b:07:c2:5e:c6:8b:
4d:b6:eb:8f:3b:34:bd:df:d0:c5:83:f5:ad:f7:c5:
a2:81:30:c5:c2:26:4c:a1:e5:f0:ef:cf:5a:db:42:
68:9e:60:ac:0b:bc:76:47:66:1a:cd:a4:61:b4:93:
51:b6:45:61:ce:67:bd:99:a3:f6:92:94:4e:3f:03:
80:0b:47:bf:6e:af:96:76:16:31:6a:ec:21:3c:55:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:1B:51:54:7D:5B:12:59:BA:92:C5:4E:A0:45:B4:9F:68:F6:B0
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/15gbUVR9WxJZupLFTqBFtJ9o9rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.180.0/22
IPv6:
2a00:65e0::/32
Signature Algorithm: sha256WithRSAEncryption
15:cf:7b:16:82:20:e6:da:7f:6e:37:27:fe:15:e4:8b:d3:e4:
68:d4:9d:bb:d4:8e:17:78:f7:ff:9e:b0:74:62:ee:81:6f:df:
be:ca:d2:89:4e:ba:3b:7a:c2:7c:80:18:4d:ca:57:bd:e1:90:
14:d0:d1:22:a5:7f:f3:a9:73:b8:d8:52:08:7a:14:89:7c:01:
ce:57:8e:26:e1:0d:34:6e:4e:d8:88:d5:7c:0a:ca:a6:5e:42:
fb:61:3d:33:15:ec:c6:d7:42:9f:d3:b8:b2:cf:27:da:b8:85:
82:0c:ab:9d:68:bb:36:4f:24:c0:44:e9:99:98:1a:66:4c:c3:
7f:17:f4:5a:2d:4b:71:d1:92:99:3c:d7:bf:29:f3:ae:75:3a:
a6:af:24:81:de:9a:97:ba:dd:0f:97:b2:87:75:3c:bc:18:6d:
8b:f4:d7:26:69:27:26:07:1e:3b:49:94:60:42:f2:aa:33:27:
67:e4:b0:e3:61:3e:71:29:e3:ec:d7:a9:cc:b8:da:97:cf:ae:
31:8d:dc:8b:f2:7f:0b:cc:90:bc:71:ac:f1:7c:e8:e9:3e:1e:
f0:c7:61:26:ac:37:bb:85:bf:d2:fe:2f:c8:88:a1:69:61:3c:
ae:c5:3e:a7:91:ca:ae:e5:34:bc:4d:9f:79:01:08:4b:31:11:
28:2f:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:47 2025 by rpki-client