Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/1-GEDU9TNbLrHdZ7fpJVlXu04heY.roa
File: 1-GEDU9TNbLrHdZ7fpJVlXu04heY.roa (raw, json)
Hash identifier: Jw2X54OCM7AWi++IhJ+m77Tgn/BSJlP05vtjAGv6VRk=
Subject key identifier: F8:61:03:53:D4:CD:6C:BA:C7:75:9E:DF:A4:95:65:5E:ED:38:85:E6
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 11BD95B4
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/1-GEDU9TNbLrHdZ7fpJVlXu04heY.roa
Signing time: Sat 01 Jan 2022 14:57:50 +0000
ROA not before: Sat 01 Jan 2022 14:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51392
IP address blocks: 185.157.208.0/24 maxlen: 24
185.157.211.0/24 maxlen: 24
185.157.210.0/24 maxlen: 24
185.157.209.0/24 maxlen: 24
2a03:afe2::/32 maxlen: 32
2a03:afe1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297637300 (0x11bd95b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jan 1 14:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8610353d4cd6cbac7759edfa495655eed3885e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:cd:b1:36:d3:5d:f4:73:10:d8:8b:b3:9e:
9a:7d:d6:1d:49:c5:81:fb:cf:1d:86:77:97:52:f0:
9f:3a:ce:91:9b:b0:d9:23:51:70:ed:fa:c5:d2:91:
07:77:db:89:0f:11:bb:44:ae:d2:3c:44:f2:ee:27:
84:6a:af:42:51:b8:52:c2:2b:90:62:e3:37:d4:69:
5a:db:ec:63:48:7f:f1:d7:50:3b:16:97:84:54:26:
bc:02:91:c4:fd:f1:a7:36:55:07:6b:c7:dc:d2:93:
fb:09:d3:b7:a2:97:f1:7b:60:e6:8f:29:65:f6:73:
13:c7:75:19:0f:0a:db:a7:e7:5b:9b:17:09:74:37:
49:68:29:79:32:01:35:a9:7f:e3:dd:5e:25:24:0a:
6b:f8:55:e4:9e:a2:5a:65:8f:99:9a:be:89:b6:28:
fc:24:dc:ca:f3:03:de:cc:16:1f:24:b5:6c:af:48:
10:b1:4a:b5:8b:a1:63:06:d5:c7:6c:4f:62:a1:9d:
d8:16:de:0a:39:ca:2b:19:12:bc:08:72:27:48:03:
89:72:f8:1b:b5:fb:31:98:80:c0:ea:30:95:65:4b:
32:5e:8f:6a:32:b0:ef:44:9e:f0:3f:db:a7:1e:24:
44:51:89:90:bb:2c:d1:e4:c7:6a:fe:74:ad:43:72:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:61:03:53:D4:CD:6C:BA:C7:75:9E:DF:A4:95:65:5E:ED:38:85:E6
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/1-GEDU9TNbLrHdZ7fpJVlXu04heY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.208.0/22
IPv6:
2a03:afe1::-2a03:afe2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:e8:2f:92:31:08:1d:d1:ac:e6:c4:a2:38:42:d3:70:73:13:
f3:20:66:ca:50:9e:5e:25:f0:67:fb:89:43:20:02:06:2c:78:
33:11:35:1d:a8:3c:e9:35:15:36:bd:9b:0f:13:c4:9c:ae:7e:
1e:06:64:b5:a5:71:7a:df:49:19:8a:9e:88:99:04:68:64:1e:
b9:a5:69:d8:2a:14:ef:94:b1:a0:a3:14:89:5d:8e:0a:f7:97:
e0:f4:4a:8c:f0:a7:21:1a:7b:96:c8:50:bb:d5:9c:db:da:fd:
5e:43:d4:f8:5a:25:2b:92:56:20:47:34:f9:94:ba:d2:9e:5d:
5e:9b:19:9f:b8:fa:1d:17:10:f5:77:dc:aa:fd:60:44:6d:eb:
03:7d:78:a2:2e:cd:4d:08:91:4a:85:2e:9e:fc:3f:e1:12:4f:
9b:fd:6d:37:1b:0d:bc:cb:d2:08:64:7f:70:99:6a:ed:b1:56:
ee:0b:83:74:f3:7b:87:b4:14:bf:9a:20:44:79:c4:3e:65:de:
e1:5b:80:1f:9d:84:47:f4:1a:14:9b:3f:41:83:e6:61:33:36:
40:59:b8:c1:70:85:06:1c:b2:d8:95:05:61:e5:61:09:04:6e:
33:e9:8f:d9:33:05:16:5d:6f:83:47:79:c5:f2:a2:0e:d5:28:
f0:2b:92:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:26 2025 by rpki-client