Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/7h047zofl57tADv5bJq4-ocPPhY.roa
File: 7h047zofl57tADv5bJq4-ocPPhY.roa (raw, json)
Hash identifier: 7cAss3ApXLTT811iFUlbZSUXNnj+CGhC95hbjJI5I0Y=
Subject key identifier: EE:1D:38:EF:3A:1F:97:9E:ED:00:3B:F9:6C:9A:B8:FA:87:0F:3E:16
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018572C37928012445395B331FE0E714BF7F
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/7h047zofl57tADv5bJq4-ocPPhY.roa
Signing time: Mon 02 Jan 2023 13:54:51 +0000
ROA not before: Mon 02 Jan 2023 13:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62081
IP address blocks: 185.165.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:79:28:01:24:45:39:5b:33:1f:e0:e7:14:bf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 2 13:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee1d38ef3a1f979eed003bf96c9ab8fa870f3e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:20:3f:d9:e7:17:72:27:e5:24:e9:25:5c:
27:14:51:45:dd:b1:77:83:c1:18:59:1e:a1:a9:ee:
05:66:ad:7e:37:08:56:1a:78:78:61:d1:02:d3:32:
17:99:4e:7c:1a:6d:9f:6b:16:e4:2f:a8:b5:8b:46:
97:cc:ba:29:21:b7:28:61:f5:48:12:cc:d0:aa:f4:
b2:2e:9d:d4:c5:bf:92:b8:18:43:18:1e:f4:48:5d:
67:c2:37:21:a2:66:36:f7:3d:8b:2c:72:87:9e:6d:
62:c6:61:17:4d:85:95:2f:fc:67:71:c6:73:37:7f:
08:a4:2e:8b:20:41:d2:1d:ec:98:20:c2:f8:c2:f3:
3b:c3:73:fb:65:7a:a4:91:e5:7c:5f:a6:04:90:f4:
81:3d:c3:3c:3f:eb:93:a6:fc:70:12:c0:ad:77:90:
47:aa:4c:a8:5b:d9:51:e7:5c:10:ec:12:c2:aa:47:
9b:bb:5a:b3:20:31:84:37:18:20:b8:d7:8d:5e:8a:
4c:c1:a9:42:64:c6:14:6e:c0:ae:81:17:f4:e0:94:
91:65:65:51:1a:7e:b0:1c:cc:c2:e7:6a:49:5f:58:
15:a4:41:c5:bd:0b:be:d6:46:e2:99:7b:1c:d4:c4:
ed:ac:99:d9:1f:97:c4:e4:f7:92:81:ee:be:7d:ab:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:38:EF:3A:1F:97:9E:ED:00:3B:F9:6C:9A:B8:FA:87:0F:3E:16
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/7h047zofl57tADv5bJq4-ocPPhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.149.0/24
Signature Algorithm: sha256WithRSAEncryption
26:67:0e:cb:e5:f7:d5:66:16:b0:e3:68:bc:29:3b:b7:2a:7a:
0f:73:f5:a5:fc:e4:58:32:b9:32:6e:b8:5f:45:ea:52:d8:16:
1f:b1:37:8b:3c:2a:1b:a3:3a:ad:df:c0:a0:4b:7c:11:b6:71:
d3:9f:4f:a5:04:e6:ba:ea:20:03:9c:4f:2e:ab:ff:80:a2:d3:
14:9b:53:2b:9f:23:7a:5a:f8:f4:76:62:1f:39:df:63:f7:02:
7c:43:ac:ca:77:7d:89:d5:63:10:07:69:a7:b1:1c:18:8a:39:
51:32:ef:60:95:4a:fd:5e:30:42:2c:bf:e6:1e:5e:b7:37:7f:
e1:77:2a:dc:b9:50:d8:8d:45:8d:21:4e:02:3e:6f:7b:84:c3:
2f:b7:9c:71:24:5c:a8:a1:22:a9:6a:bf:c1:19:90:55:cc:72:
c0:5b:69:ab:f1:f6:f2:d5:97:e4:2a:17:ac:0a:ba:d5:12:4d:
71:a2:1c:09:ea:73:87:e7:d2:ab:ee:48:e2:2b:66:ae:bb:5b:
2c:a9:bb:97:54:7f:33:44:86:93:28:6b:c8:7c:f9:51:68:26:
45:0a:93:3f:51:0e:4b:97:aa:16:f7:4b:cf:df:5d:60:2c:bb:
c7:b5:4c:d2:1b:11:75:90:e5:8d:a4:66:3c:1c:05:8f:a6:4d:
e5:0a:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:15 2025 by rpki-client