Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/V48fdDOZcgeSCtdwCjPdEtOy39Q.roa
File: V48fdDOZcgeSCtdwCjPdEtOy39Q.roa (raw, json)
Hash identifier: s8ODiyoeIc4QHWuPG6jZSdrJE2/9zKlMmkLdexv/Cf0=
Subject key identifier: 57:8F:1F:74:33:99:72:07:92:0A:D7:70:0A:33:DD:12:D3:B2:DF:D4
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 01856FC27C3D5148AB0BD95A19185A596F84
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/V48fdDOZcgeSCtdwCjPdEtOy39Q.roa
Signing time: Sun 01 Jan 2023 23:54:54 +0000
ROA not before: Sun 01 Jan 2023 23:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25540
IP address blocks: 185.130.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7c:3d:51:48:ab:0b:d9:5a:19:18:5a:59:6f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Jan 1 23:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=578f1f7433997207920ad7700a33dd12d3b2dfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:62:2b:63:e5:7e:46:eb:2d:77:0e:eb:ed:
3c:aa:38:d2:80:44:5a:07:85:59:3b:9b:f3:2a:94:
64:72:b3:21:a6:77:f1:15:71:de:2e:1e:ed:87:8b:
a8:58:52:5d:06:b3:27:24:ab:6f:b7:19:ef:29:78:
bc:03:98:b9:f6:02:0e:4c:30:b6:0b:f1:c4:49:6c:
68:0c:cd:b5:cc:0d:de:81:fe:64:44:51:f3:f2:0e:
79:a0:12:72:4e:c7:cf:79:50:f3:94:2e:1c:08:92:
f8:9a:f2:c1:7c:d3:8d:06:ee:ab:74:28:01:0f:a2:
ab:8e:20:9a:df:93:37:d2:03:ff:6f:8d:a2:31:d2:
2e:7b:fb:45:d4:dc:42:6c:d4:b7:c8:bc:9a:91:dc:
8f:9e:ba:0c:e3:29:c2:dc:89:60:8d:d3:a5:01:69:
93:58:b3:35:9e:12:58:82:74:59:68:c0:35:f2:df:
3b:8a:5c:28:22:48:b2:88:db:17:ca:19:64:84:f4:
01:8b:11:b4:52:cc:3d:54:10:4f:76:5f:cf:a0:47:
f9:bd:81:22:15:b0:e3:d2:49:a2:58:8e:5a:94:93:
1c:66:21:9c:35:0d:51:ba:ee:79:47:98:3b:31:db:
fe:4d:cc:3c:54:94:f5:89:6c:04:e5:da:e9:c4:82:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:1F:74:33:99:72:07:92:0A:D7:70:0A:33:DD:12:D3:B2:DF:D4
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/V48fdDOZcgeSCtdwCjPdEtOy39Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.116.0/22
Signature Algorithm: sha256WithRSAEncryption
58:03:54:c1:9d:2c:16:43:6a:52:a8:a0:bd:c5:70:62:86:d7:
f1:c8:e2:c6:8f:85:d0:b5:06:88:4e:9b:93:ec:c2:25:91:db:
da:01:41:5f:6a:7e:49:f1:6d:0e:06:9a:49:32:d5:60:3e:36:
5f:5b:19:9a:6d:f5:17:2d:9d:e8:45:b5:a0:fa:18:7a:a8:cc:
db:a6:ba:1c:a8:ce:25:aa:c7:29:fb:b8:af:33:dc:55:dc:8e:
f1:99:26:61:bf:83:e1:c1:04:e1:e4:c4:ec:da:47:4c:39:36:
9c:0d:81:ec:f1:f3:a6:87:5b:95:5e:e6:bd:72:1c:37:c2:e5:
f7:a8:be:63:95:16:95:24:9a:5c:cb:17:b8:0d:55:30:64:ce:
55:a6:bf:6c:e0:79:1c:a0:b0:2a:35:0a:8f:a5:19:9d:e5:3a:
4b:81:40:e9:b2:be:49:8f:68:83:1c:8a:00:52:50:2f:e7:93:
2a:4a:95:45:2e:95:75:0b:47:09:cc:a4:1a:f8:bf:97:6f:25:
e8:15:22:96:7e:50:8c:fe:c6:64:20:88:39:a8:cb:42:9a:7b:
ef:78:d1:51:3c:85:67:5c:56:69:be:60:35:72:cf:d7:11:63:
9b:58:8e:a3:c2:82:2e:51:fc:77:1e:f4:78:43:7c:cb:49:42:
1f:4e:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:16 2025 by rpki-client