Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ajuft92REHYyHuBiBrFzGz97CWs.roa
File: Ajuft92REHYyHuBiBrFzGz97CWs.roa (raw, json)
Hash identifier: Hy94TsYl2vN0sckuE1Y3HmexA9Zb3QIZrpP/to8xA24=
Subject key identifier: 02:3B:9F:B7:DD:91:10:76:32:1E:E0:62:06:B1:73:1B:3F:7B:09:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A21D45D0A911D03DFBE327BA6073AF195
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ajuft92REHYyHuBiBrFzGz97CWs.roa
Signing time: Wed 23 Aug 2023 09:58:00 +0000
ROA not before: Wed 23 Aug 2023 09:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 164.40.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:d4:5d:0a:91:1d:03:df:be:32:7b:a6:07:3a:f1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 23 09:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=023b9fb7dd911076321ee06206b1731b3f7b096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:3e:bf:a5:24:84:aa:57:dd:92:07:b1:c8:
c9:98:3e:0f:a7:b3:cb:90:b5:99:bf:0a:9b:42:5b:
d6:a9:d5:af:e9:39:8d:9e:67:2a:c7:bc:c6:66:a2:
f5:2a:37:94:65:e7:3b:97:06:36:55:b0:00:2c:13:
92:ff:29:2c:99:66:f5:8b:34:3c:ff:9d:43:c1:e0:
fd:85:61:31:c4:b6:6d:52:98:53:c2:a4:88:8d:7c:
ba:44:7f:a7:5f:e8:d7:e7:36:98:32:7f:73:45:46:
48:7d:51:db:05:f4:11:6f:f7:65:cb:30:d7:f9:90:
e2:d4:03:2d:8e:3e:ee:1b:b0:d7:47:fa:46:10:fe:
09:d7:69:9d:67:99:f2:75:81:a5:a7:f4:2b:db:09:
f3:6d:84:9b:64:df:a4:ab:c6:8b:8c:5c:67:34:ef:
01:5e:e3:ba:59:01:35:b4:57:3c:84:26:a1:aa:29:
f7:aa:0d:21:e7:ec:3b:8f:f0:05:7d:2e:ff:1c:3b:
6f:11:d5:36:5d:97:c9:cd:00:af:e7:a0:a3:08:19:
62:85:c7:43:dd:7d:03:c1:4b:9a:bd:27:f2:9f:aa:
13:40:5f:db:a4:8d:be:f6:bf:a1:6f:2d:06:24:ab:
86:3f:fb:37:67:1f:58:e7:c1:a4:a5:38:d6:fc:0d:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:9F:B7:DD:91:10:76:32:1E:E0:62:06:B1:73:1B:3F:7B:09:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ajuft92REHYyHuBiBrFzGz97CWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
91:93:15:72:86:89:96:04:73:f0:81:c2:1d:4a:14:d0:82:12:
1f:c9:fd:97:6c:fc:e6:bd:b8:61:54:e1:c3:3f:6d:e0:91:e5:
ef:8e:d1:92:71:11:4b:f4:21:65:42:e9:1f:67:39:e6:2d:f3:
86:fb:80:10:d1:84:57:3c:23:b0:8c:cf:b6:08:da:7c:cc:6a:
c8:fb:71:e6:4b:0f:46:0c:7f:2f:e9:8c:29:f6:c7:73:e7:ef:
08:a0:a4:ee:c6:e1:2a:e3:ae:6f:6b:41:cb:fe:44:4d:95:67:
0a:08:2c:95:0d:90:19:3c:d5:15:22:25:a8:94:51:81:df:b8:
87:de:3d:93:c1:ec:63:a8:32:9b:82:00:cb:ab:d7:0b:ae:7f:
71:b3:d1:a9:ed:73:4b:70:54:e8:eb:a9:12:2f:fc:33:8c:79:
c5:d0:80:e3:66:17:86:2c:48:07:76:27:d2:db:f8:2b:77:b8:
4a:78:08:db:49:f9:44:59:f9:00:7a:e3:de:5d:9d:d4:92:03:
47:87:58:4d:20:87:63:ea:c2:97:19:8b:2b:8a:5b:d5:d0:11:
f0:9b:53:70:3e:78:af:71:90:fc:43:28:70:6c:13:2e:70:fa:
e1:cc:ab:10:b3:48:f4:53:36:95:08:f8:1d:95:9d:2e:f2:15:
ca:28:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:42:04 2025 by rpki-client