Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/t1pQrN_ztPI7Q4wgreDpanqJHRM.roa
File: t1pQrN_ztPI7Q4wgreDpanqJHRM.roa (raw, json)
Hash identifier: M3fin2KpFifZvRKII63IoPNi/nZtLZTzbMU1C1Fxhss=
Subject key identifier: B7:5A:50:AC:DF:F3:B4:F2:3B:43:8C:20:AD:E0:E9:6A:7A:89:1D:13
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 018A6AC1B5F89480E6C30CD321EBC2F1E808
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/t1pQrN_ztPI7Q4wgreDpanqJHRM.roa
Signing time: Wed 06 Sep 2023 13:49:54 +0000
ROA not before: Wed 06 Sep 2023 13:49:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3267
IP address blocks: 185.220.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:c1:b5:f8:94:80:e6:c3:0c:d3:21:eb:c2:f1:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Sep 6 13:49:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b75a50acdff3b4f23b438c20ade0e96a7a891d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:42:ee:cb:57:5f:da:98:2a:d1:63:33:af:
33:f6:72:b0:dc:95:69:ce:23:78:99:9f:42:fb:37:
92:2d:8c:89:95:3b:78:14:6c:17:72:7e:df:16:5e:
6b:c3:5d:f0:b3:9e:e7:6d:12:54:c3:92:37:e3:97:
c7:fd:06:e5:40:d2:dd:4b:f0:26:8e:e1:df:47:41:
f8:ff:33:a2:f8:4f:03:f7:74:ed:03:9c:0f:1e:7f:
bd:b8:00:6f:e4:69:01:44:2a:e0:29:35:ec:f7:2d:
73:03:39:af:7e:0b:22:4e:35:e2:a0:bb:97:2e:90:
35:cd:46:10:33:1d:b2:9d:71:c9:ec:ed:60:5d:b8:
20:84:67:a9:0d:48:0f:7a:71:be:55:d0:ef:23:5d:
a9:3a:84:d4:39:93:f9:b0:58:35:34:bb:c8:dd:e2:
55:21:7e:f5:46:80:ff:dc:74:87:58:eb:5c:fc:43:
fa:5d:d1:50:fe:52:31:ad:0c:d1:18:92:06:0d:b0:
5f:22:ad:7d:d8:f6:15:5e:a5:08:22:64:05:59:e1:
8c:e9:88:4a:81:38:2a:e1:30:8e:24:33:57:59:78:
ef:bd:a9:98:ca:a6:3e:77:2e:93:b8:ee:d5:55:41:
09:f7:15:79:b6:7e:9f:d1:05:b7:b0:4b:cb:f3:5d:
51:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:50:AC:DF:F3:B4:F2:3B:43:8C:20:AD:E0:E9:6A:7A:89:1D:13
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/t1pQrN_ztPI7Q4wgreDpanqJHRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.194.0/23
Signature Algorithm: sha256WithRSAEncryption
62:e6:3e:a1:3d:6a:d6:d5:08:34:87:7e:76:c9:e7:26:69:54:
08:d2:b6:d2:8d:0d:31:52:f7:ab:6c:91:70:58:37:b6:22:13:
ed:a7:eb:1b:6e:c5:c4:2c:fb:c3:a5:59:29:52:7e:98:47:05:
13:46:c1:70:0f:89:7c:50:bd:fa:b7:3c:da:7a:b4:2c:70:5d:
18:98:a9:94:0c:3e:71:14:f5:9e:7a:a2:83:f1:f3:23:5f:db:
62:1b:a2:b8:4c:7d:11:89:57:95:25:e0:2b:2b:b1:1e:35:de:
a5:f0:66:78:fb:27:3f:18:02:8f:01:07:48:4b:dd:ef:1a:4e:
7e:92:46:6f:bf:a0:77:47:33:bb:43:73:79:69:89:a1:b9:34:
e7:8f:a1:69:0c:1b:d1:c7:c7:05:b8:c0:88:9b:25:9b:31:24:
a9:0a:c3:67:ef:2d:b9:8f:8f:1b:55:c4:c7:cd:76:54:e1:e4:
36:5b:ce:ae:37:27:94:e2:5e:39:c1:a2:1c:52:12:d1:34:4b:
db:d6:76:a7:57:86:30:6b:f9:1f:d6:9a:1e:f0:7d:33:1b:3f:
72:7c:0f:3d:6a:ff:02:5c:56:f6:76:ca:30:9c:7e:47:8d:c3:
57:d4:33:fe:3b:aa:7f:84:05:8d:5a:6b:91:8f:fe:9e:45:55:
f1:f8:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:49 2025 by rpki-client