Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/CVcwwLonzbAYGO8EAl80kny3JTs.roa
File: CVcwwLonzbAYGO8EAl80kny3JTs.roa (raw, json)
Hash identifier: y5/PI96FMWtLjOqJM4xOwQ9PHBclejINQRBYoGLiBR0=
Subject key identifier: 09:57:30:C0:BA:27:CD:B0:18:18:EF:04:02:5F:34:92:7C:B7:25:3B
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 018BCA329FA1ABF651A383A97F0A602BF26A
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/CVcwwLonzbAYGO8EAl80kny3JTs.roa
Signing time: Mon 13 Nov 2023 19:39:57 +0000
ROA not before: Mon 13 Nov 2023 19:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34224
IP address blocks: 185.252.22.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:32:9f:a1:ab:f6:51:a3:83:a9:7f:0a:60:2b:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Nov 13 19:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=095730c0ba27cdb01818ef04025f34927cb7253b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:92:83:c3:19:4c:5f:5e:f9:20:69:6f:5d:
fe:f6:2b:01:68:30:93:76:46:13:6a:50:df:e7:c0:
4a:90:7e:05:8b:db:0f:75:e8:79:35:78:2f:0e:b0:
96:43:39:e8:91:86:ee:09:b9:34:81:62:2c:c9:84:
36:9a:6e:58:87:db:71:1d:d3:e9:33:81:f6:7a:a7:
42:22:2c:32:59:4b:bf:ca:b5:33:ec:19:76:91:aa:
c7:6c:02:36:ac:d4:dc:93:bf:e8:2b:4c:b2:bb:ab:
9b:2e:db:e4:49:50:76:a7:d2:c7:7e:8b:87:93:b3:
f7:54:0c:f7:12:a1:10:ac:fc:8e:97:c7:be:1f:9c:
4b:6d:fd:9f:b8:fd:46:0f:06:74:2e:67:ec:0f:f8:
a0:57:9a:3d:1a:6a:11:ef:5a:8a:7c:be:2d:ff:87:
81:2a:5c:cb:2c:b7:0f:27:88:6f:65:8f:e6:b1:85:
79:16:c9:1f:fa:b5:b7:ef:1c:42:ca:61:c0:ae:a7:
75:bc:73:4d:0c:33:40:60:31:ab:0d:89:07:34:a3:
55:69:12:f0:12:f7:3b:2d:00:de:af:bb:f4:7e:a9:
b5:9d:be:a8:61:03:dd:37:af:c2:cc:14:94:b1:59:
dd:20:ae:cb:be:75:de:30:6b:30:da:fd:95:cd:3d:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:30:C0:BA:27:CD:B0:18:18:EF:04:02:5F:34:92:7C:B7:25:3B
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/CVcwwLonzbAYGO8EAl80kny3JTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.22.0/23
Signature Algorithm: sha256WithRSAEncryption
32:e1:48:91:9c:6b:8d:d6:f8:a4:bf:53:0c:17:ce:6b:b2:b0:
db:77:de:ba:cd:4e:16:5b:a5:33:bd:ff:eb:31:1e:b5:e6:01:
8d:97:27:18:3c:a7:df:f5:b1:95:5d:03:c3:42:98:df:82:70:
2b:46:82:f9:9f:09:2e:25:06:6e:a2:19:f2:ca:58:37:29:13:
bc:53:ad:35:7c:f6:7f:1a:c0:a9:77:26:fe:cb:60:ab:a8:e2:
49:41:25:88:ab:bc:5c:b1:72:2b:07:c1:51:b7:9b:ef:ac:32:
13:72:c5:4a:80:d6:86:c5:6b:28:a3:af:31:58:e1:4a:bb:38:
06:bd:85:6a:f3:ff:4f:3e:69:a5:e3:a0:e2:cd:a4:58:e1:59:
65:63:d6:5e:ee:74:5b:b4:cc:11:99:6f:7b:5c:76:a4:2a:ec:
6f:30:d1:d6:fa:b4:6c:03:e2:c9:ed:af:f4:7b:aa:d1:18:20:
1c:e3:20:58:fa:9a:a4:ab:3e:92:8b:b9:8d:3a:e7:8a:60:63:
95:cd:a2:44:42:5e:ae:8d:d6:2a:bd:d1:21:92:7a:bf:8b:80:
91:56:8a:42:b0:78:1a:f7:cb:e8:87:33:cf:39:13:15:76:75:
54:27:a7:a6:67:58:d6:7a:22:e5:7f:3b:63:cd:ac:65:84:1e:
39:0e:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:35 2025 by rpki-client