Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/lGehDL6urJ4bpncRzFb8ZfJmPV8.roa
File: lGehDL6urJ4bpncRzFb8ZfJmPV8.roa (raw, json)
Hash identifier: n3JkfCq453G60Hdcyso5rHbM6+nfJY/tjEQlrsMtOtw=
Subject key identifier: 94:67:A1:0C:BE:AE:AC:9E:1B:A6:77:11:CC:56:FC:65:F2:66:3D:5F
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01898BF882DC2B2FD6E3D356B13775738B26
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/lGehDL6urJ4bpncRzFb8ZfJmPV8.roa
Signing time: Tue 25 Jul 2023 07:34:26 +0000
ROA not before: Tue 25 Jul 2023 07:34:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264617
IP address blocks: 147.185.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:f8:82:dc:2b:2f:d6:e3:d3:56:b1:37:75:73:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 25 07:34:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9467a10cbeaeac9e1ba67711cc56fc65f2663d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:5e:07:79:de:49:27:49:35:3f:84:77:44:
1b:9c:ec:87:98:b2:ba:b8:0b:9d:28:97:e2:8a:12:
3d:d1:3c:70:21:5e:a1:d1:6c:20:ef:c7:ac:1c:8e:
e2:00:7b:9a:25:22:6e:83:bc:26:bd:6e:7f:a5:2c:
9f:74:b5:3b:7b:a1:3a:0e:e3:e2:cd:7d:11:b0:2a:
b4:26:84:b7:11:77:fc:6c:10:ea:80:8a:40:92:a4:
6b:63:b1:30:be:f7:10:17:ee:f2:51:09:4d:a6:f7:
58:6c:5f:d7:eb:07:d5:76:07:df:70:6c:86:4d:c7:
6e:f5:c2:83:e2:db:ce:2a:83:73:aa:7c:6f:65:53:
0e:25:c9:e2:c7:35:e8:e0:db:6e:ce:70:a6:4e:bd:
81:3e:40:ac:d7:02:82:ca:b9:4e:50:86:80:26:19:
51:99:aa:22:b9:75:17:c6:80:77:5d:83:8d:ac:af:
85:aa:91:b4:ba:e8:e4:1b:15:67:65:f6:62:a3:3b:
94:98:bb:ff:dc:09:e7:8c:59:98:d0:7c:05:ec:a2:
d4:ac:09:85:e2:d1:79:4b:55:59:69:00:4c:b4:04:
56:93:d4:97:19:6a:ec:5a:c3:5f:d3:38:43:40:49:
5f:51:1e:2a:f4:42:83:c2:e9:35:c6:d9:94:51:34:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:A1:0C:BE:AE:AC:9E:1B:A6:77:11:CC:56:FC:65:F2:66:3D:5F
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/lGehDL6urJ4bpncRzFb8ZfJmPV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.250.0/24
Signature Algorithm: sha256WithRSAEncryption
39:78:de:02:f6:03:83:bc:fd:27:b4:3a:66:be:b4:e6:d1:81:
75:7e:1b:dd:a3:3b:16:fa:71:95:5b:73:b8:19:c5:db:7a:e9:
e8:a4:6a:6e:a9:43:2e:6a:c4:14:8a:96:f2:64:f5:2e:80:da:
aa:cc:83:55:62:54:7f:ea:f5:1f:52:df:bc:a6:04:f6:8d:92:
d3:dd:cc:07:b8:ae:c9:df:94:8b:31:69:a3:e6:f3:a7:fc:52:
98:bd:98:95:24:3c:40:73:ef:09:67:15:44:bd:b1:81:19:0f:
34:ed:76:25:23:c8:12:14:70:7b:77:04:e7:d7:45:b5:0c:f5:
83:d3:c6:55:51:4a:16:7f:33:cd:df:59:46:7e:2d:dc:85:6b:
62:e8:98:1f:ad:b3:bb:35:54:06:c8:c5:ef:94:b6:89:0c:30:
84:fb:63:d3:8c:ff:c3:b1:f3:b7:b8:a9:89:8f:df:68:c9:2c:
95:e9:83:63:b9:04:7a:ff:40:fa:58:d2:f3:78:84:aa:ea:69:
c5:ac:61:3e:0b:a3:43:d2:ca:9f:fc:95:44:df:ed:54:6f:d8:
d8:f7:8d:c8:44:cf:09:6d:af:f5:3f:12:b6:12:f6:46:c0:da:
e5:1a:35:1c:ef:da:38:6e:09:33:66:e7:a0:8b:02:a4:c2:c6:
6d:a2:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:36 2025 by rpki-client