Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/fhcgmkpRHuwEjA7zywDVVXO0WtE.roa
File: fhcgmkpRHuwEjA7zywDVVXO0WtE.roa (raw, json)
Hash identifier: JJ6ttbWzyA2HR+TNmb0MDd1Iw+64r2UQ8EjyEBiRU8Y=
Subject key identifier: 7E:17:20:9A:4A:51:1E:EC:04:8C:0E:F3:CB:00:D5:55:73:B4:5A:D1
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 1AFDE2E4
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/fhcgmkpRHuwEjA7zywDVVXO0WtE.roa
Signing time: Sat 01 Jan 2022 09:54:53 +0000
ROA not before: Sat 01 Jan 2022 09:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13127
IP address blocks: 185.36.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452846308 (0x1afde2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Jan 1 09:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e17209a4a511eec048c0ef3cb00d55573b45ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:7c:c9:95:b3:18:50:f2:85:3a:d2:91:85:
b2:5b:26:48:04:97:e2:3e:2c:41:2f:9c:82:2e:40:
32:e0:93:5b:e5:66:d0:64:a3:6d:26:97:8b:9b:d4:
4b:44:a5:50:7a:f2:ec:98:1a:4f:78:1e:34:83:25:
2c:0a:83:8c:4d:ca:19:71:b2:76:fd:22:12:dd:21:
2e:48:24:85:b7:87:28:75:fd:0b:1f:79:bb:5f:3e:
4c:88:0c:c3:45:87:53:63:2b:90:91:c1:9e:74:d3:
5e:5c:a3:49:6d:7a:93:c3:5a:eb:a0:5c:b5:06:9e:
c6:b2:dd:38:5a:4f:57:a0:dc:b2:c0:d5:70:08:45:
25:fb:ab:1a:af:da:6c:33:32:20:73:3f:66:39:1a:
ef:2e:33:d4:54:f9:1f:26:dc:1d:bd:70:be:bc:f8:
e8:fa:51:22:08:87:a4:a5:56:b6:71:d0:60:e2:66:
65:22:44:fb:e4:b3:0e:20:b2:3a:75:24:36:a7:57:
7d:5d:25:1c:e3:78:11:35:d0:62:5a:e8:43:08:8b:
1e:90:73:52:1d:bc:ca:71:91:66:a4:0b:ab:a3:9f:
ec:be:b7:61:92:7d:1e:35:16:89:8c:d9:f6:c1:a3:
90:cb:09:da:9c:22:16:25:4e:42:1a:d6:48:14:81:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:17:20:9A:4A:51:1E:EC:04:8C:0E:F3:CB:00:D5:55:73:B4:5A:D1
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/fhcgmkpRHuwEjA7zywDVVXO0WtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.41.0/24
Signature Algorithm: sha256WithRSAEncryption
84:2b:63:5b:d9:08:dc:d0:40:6e:73:45:9d:34:64:16:22:7f:
04:f4:3a:eb:56:ce:e3:94:40:4d:25:4f:32:2a:34:64:15:5c:
7b:d5:d0:2d:ef:b9:7d:36:c4:96:af:ae:4d:c8:41:52:72:a4:
d0:91:f6:07:72:77:51:bd:53:d9:05:2e:67:90:a4:b6:4e:31:
f0:be:24:3c:93:62:b4:7d:1a:d0:81:e0:73:83:7e:3d:0f:2d:
98:9c:23:76:0a:35:34:1e:90:7a:e3:57:6a:dc:7a:78:66:21:
20:91:d7:fa:db:85:78:c5:ab:70:bb:db:17:40:47:d2:2d:15:
05:b0:53:94:40:9b:be:dd:f0:67:7b:4e:67:64:e6:78:e2:da:
4f:b1:38:4a:f0:af:5b:08:4a:5c:5c:c6:29:c6:ce:1a:98:72:
39:5a:ca:f1:75:52:86:7a:31:1d:18:dc:95:1b:7f:ec:7e:5a:
38:4e:e5:ae:33:c5:13:82:70:ad:f2:06:95:1e:46:bf:33:f8:
c7:3e:b0:75:df:33:2f:53:d4:c8:35:41:da:67:82:db:09:04:
66:de:d3:3b:56:ba:e9:78:99:ad:85:a5:58:26:94:a2:2e:39:
f2:7c:ed:47:02:d4:52:3f:d6:47:d9:7a:45:80:52:b7:0d:67:
1b:98:b7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:39 2025 by rpki-client