Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/ScR6KmxS-sPjd-xh19ueDudAGHw.roa
File: ScR6KmxS-sPjd-xh19ueDudAGHw.roa (raw, json)
Hash identifier: nuSxTyQhx5wDbn1RsDRTRfO7cl81tazctu/uAuJcVMA=
Subject key identifier: 49:C4:7A:2A:6C:52:FA:C3:E3:77:EC:61:D7:DB:9E:0E:E7:40:18:7C
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 018446F40D76AC7247DB06B63624F770E37A
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/ScR6KmxS-sPjd-xh19ueDudAGHw.roa
Signing time: Sat 05 Nov 2022 08:41:50 +0000
ROA not before: Sat 05 Nov 2022 08:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57811
IP address blocks: 188.64.85.0/24 maxlen: 24
188.64.82.0/24 maxlen: 24
188.64.80.0/23 maxlen: 23
188.64.83.0/24 maxlen: 24
188.64.87.0/24 maxlen: 24
185.73.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:f4:0d:76:ac:72:47:db:06:b6:36:24:f7:70:e3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Nov 5 08:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49c47a2a6c52fac3e377ec61d7db9e0ee740187c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:56:cd:85:d8:a3:10:ea:ea:49:47:d3:ab:
84:dd:e2:7c:03:bf:03:a8:45:d6:df:d6:de:0a:9f:
9c:9a:b6:7e:87:40:79:0b:b1:29:1a:4b:94:b8:5c:
00:af:65:71:bd:de:5f:89:00:f6:08:ae:37:2c:db:
1a:73:f1:f6:51:4b:f4:42:e0:7c:dd:ed:51:2f:67:
ad:e4:d8:90:cf:77:b3:ac:d3:19:9d:0d:94:0b:4f:
22:e1:72:ff:fb:58:81:f1:bc:9b:e0:bd:bc:e1:0a:
2b:44:7c:f6:2e:cd:eb:2c:ed:08:88:45:4c:50:a6:
c4:29:08:a4:35:b0:40:ca:a3:5a:49:3c:cb:ed:57:
98:d2:a9:a7:51:c1:79:04:3f:0a:ad:69:29:05:a3:
6e:16:0f:f4:a0:8a:23:37:51:58:5d:a3:a5:b8:1b:
5c:c2:d9:7b:3a:2c:a7:96:0b:04:34:14:63:ff:c5:
42:22:60:81:eb:a9:46:dc:fa:14:de:ff:2c:47:37:
50:d7:d5:19:94:d8:2c:97:73:b9:88:1f:fd:4b:d6:
34:85:71:e7:e4:1d:4f:e7:07:e5:ca:e4:cb:7d:13:
8c:86:ed:90:61:eb:0c:a3:13:1b:94:f3:22:cb:fd:
cc:07:86:4d:70:55:22:b7:8f:ec:6b:f0:4a:13:75:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:7A:2A:6C:52:FA:C3:E3:77:EC:61:D7:DB:9E:0E:E7:40:18:7C
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/ScR6KmxS-sPjd-xh19ueDudAGHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.211.0/24
188.64.80.0/22
188.64.85.0/24
188.64.87.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d4:e2:f0:14:8c:ad:f4:08:58:00:65:e2:2c:d9:ee:0d:27:
25:55:af:4c:2e:85:43:84:6a:14:1e:6f:c0:1a:9e:23:55:97:
73:4a:f2:55:ec:93:e5:9d:e7:cc:3a:e2:5d:87:2d:80:7e:de:
18:5c:a4:6c:13:41:54:04:ee:fb:c3:41:ed:ab:24:fb:97:29:
dc:28:a4:7a:4f:92:21:5a:81:ab:e5:f9:ce:d0:98:ae:b7:5d:
a0:16:66:8d:19:ac:88:2d:07:41:b7:d1:2f:84:f6:8e:c1:58:
61:18:5e:c7:d5:7e:77:4c:1e:b6:6b:e3:34:2f:6b:c5:08:50:
6a:f0:55:47:a3:b7:b2:dd:9f:8c:e0:ad:87:dc:50:ad:68:c7:
1e:5a:81:f2:96:68:ea:a9:83:95:98:7d:03:20:43:44:71:a7:
2b:7a:1b:f1:48:89:48:43:33:4f:10:16:b8:c5:d3:55:0f:5d:
26:83:85:61:68:c4:49:47:46:a3:3c:e0:76:2d:07:49:cf:17:
64:ac:ab:90:a2:b0:12:d9:fe:8d:c1:37:63:40:50:5e:34:90:
bc:7c:a2:11:ba:c3:cc:67:ab:66:21:5c:95:d5:31:eb:ba:7e:
c2:94:5c:6a:f8:e3:14:af:0a:9e:a5:69:0c:5f:7f:97:67:ab:
fe:10:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:38 2025 by rpki-client