Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/lKI1QsW2iV5FZZdtIr_eDvillG8.roa
File: lKI1QsW2iV5FZZdtIr_eDvillG8.roa (raw, json)
Hash identifier: W2dSpaVir+T74WWw9A7FsHyFC40yheR0KMEFs7iGPEw=
Subject key identifier: 94:A2:35:42:C5:B6:89:5E:45:65:97:6D:22:BF:DE:0E:F8:A5:94:6F
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 018BD2AD813E838597F197F7BCF8EABC57AB
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/lKI1QsW2iV5FZZdtIr_eDvillG8.roa
Signing time: Wed 15 Nov 2023 11:11:08 +0000
ROA not before: Wed 15 Nov 2023 11:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42697
IP address blocks: 185.27.0.0/22 maxlen: 22
185.27.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:ad:81:3e:83:85:97:f1:97:f7:bc:f8:ea:bc:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Nov 15 11:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94a23542c5b6895e4565976d22bfde0ef8a5946f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:5f:5c:d8:3e:ec:98:c7:53:5b:03:0d:19:
0b:35:d9:8d:7d:f4:22:66:8a:3a:84:4f:11:e3:c0:
de:0a:f8:e7:1c:b9:ab:9f:8f:5d:21:b2:c6:a1:ba:
77:7b:af:a1:9b:24:5e:83:e9:e7:93:85:be:80:56:
6b:5c:ee:78:80:53:59:31:75:68:c4:69:03:74:33:
24:03:f3:9a:0e:9f:59:0d:c2:20:89:c2:42:1d:51:
b3:b0:cf:bf:90:d8:de:7d:f7:79:eb:36:62:78:2b:
fc:54:77:f8:63:20:59:9c:e9:f0:54:01:01:75:71:
44:a2:d8:a2:0f:63:95:75:0b:9e:d2:6e:0b:cf:ae:
b7:8a:19:21:72:41:72:05:dc:98:21:1f:39:e0:87:
4a:5a:96:f7:35:47:2d:0e:57:12:bc:0a:d3:73:fe:
9f:68:45:48:a9:d4:a6:ee:8e:33:f5:2f:5d:88:74:
c8:c0:ac:36:94:f2:70:73:04:48:73:73:76:a8:a6:
67:0f:6e:46:aa:d4:f6:1c:39:41:d1:1c:45:66:11:
2d:bb:94:5b:d2:3a:1d:cb:b6:e7:da:85:90:a9:81:
74:0c:2c:9c:e0:30:8a:fd:fe:49:16:70:5a:9f:ff:
12:05:fa:57:ff:dc:ea:6e:81:5a:1d:81:7a:98:80:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:35:42:C5:B6:89:5E:45:65:97:6D:22:BF:DE:0E:F8:A5:94:6F
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/lKI1QsW2iV5FZZdtIr_eDvillG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.0.0/22
Signature Algorithm: sha256WithRSAEncryption
24:28:7f:55:0b:62:52:e5:d6:98:8c:ac:b5:5b:5c:69:60:ef:
6e:98:84:29:f2:50:e2:a9:6b:4c:96:2d:4c:cd:64:1a:06:fc:
2d:84:47:8b:58:49:e3:e6:4e:7a:31:85:e1:ec:e9:d3:52:79:
e1:ea:9d:d7:07:5a:9f:f3:50:c4:c7:47:f0:9a:67:b6:00:91:
f4:dc:48:b6:30:c2:0a:3a:de:d1:28:dd:e1:bc:2b:8c:d9:cd:
34:3e:f4:53:cb:71:ca:19:5b:97:27:5f:c3:79:8f:94:d1:4d:
65:82:7a:6a:d5:39:eb:32:87:21:b5:ab:13:f9:60:72:b1:7e:
dc:22:5d:a8:74:f6:ca:a3:62:66:c7:e6:11:9f:75:4d:76:6e:
ef:11:67:eb:46:b7:7e:d5:31:79:26:11:1c:3e:56:ae:bb:2b:
1f:bd:22:e9:09:c6:45:c2:f9:e7:f7:a1:4f:9c:45:2c:c6:90:
70:92:27:2b:62:2a:87:42:4d:53:ab:bc:4f:a1:a0:92:e7:a8:
8f:8b:97:33:4c:03:6a:06:f2:21:40:70:26:b9:1c:5d:5b:df:
23:14:39:00:04:58:29:51:14:f6:6f:75:95:09:d8:63:f5:04:
7b:ab:db:37:ae:c1:89:27:24:cc:38:ad:1c:cf:1a:73:48:8a:
dd:71:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:34:51 2025 by rpki-client