Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/esxazF6VO1tB3bXlLfj_DpKOBPU.roa
File: esxazF6VO1tB3bXlLfj_DpKOBPU.roa (raw, json)
Hash identifier: JTGyignymCLRLNJU5cag5ALKpoURgQqQBZJt+sHBVCQ=
Subject key identifier: 7A:CC:5A:CC:5E:95:3B:5B:41:DD:B5:E5:2D:F8:FF:0E:92:8E:04:F5
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 05725082
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/esxazF6VO1tB3bXlLfj_DpKOBPU.roa
Signing time: Sat 01 Jan 2022 01:56:59 +0000
ROA not before: Sat 01 Jan 2022 01:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47176
IP address blocks: 185.20.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91377794 (0x5725082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Jan 1 01:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7acc5acc5e953b5b41ddb5e52df8ff0e928e04f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:08:b8:5b:26:82:5f:63:d8:ac:b4:a1:c3:
dc:6d:f6:97:1f:72:3f:a7:ed:aa:a0:d6:90:66:fb:
68:fe:09:f1:f4:b2:59:73:bf:6e:bb:72:02:88:7e:
9d:f6:0f:e9:f2:44:c8:1b:95:6e:f4:bf:2d:ee:3e:
ae:a9:8b:27:5b:c8:ae:fe:d7:ab:dd:be:94:cd:54:
a3:22:df:4f:41:24:22:df:ee:a5:8f:42:58:74:4b:
1b:0f:0a:d0:9b:63:2a:8c:e9:eb:03:ce:aa:a9:c6:
8c:de:59:48:fc:7e:c3:f3:0a:d3:43:94:1c:d1:b2:
55:b9:f1:29:3b:95:6e:81:a7:0e:ba:03:ab:75:e6:
e8:b3:cb:b4:76:49:93:a1:24:ce:1f:6b:9a:1e:12:
19:31:7e:31:8c:fb:34:20:bd:c4:e5:29:c2:8b:b2:
89:4c:9f:5e:1b:c3:83:b3:8f:69:9a:70:c8:57:a7:
3a:d0:a5:4a:91:9a:01:f1:1a:65:3d:16:7d:f0:1b:
9b:06:c4:2c:a2:ff:23:43:17:a3:da:ce:a7:23:5e:
4f:4c:ba:b4:4c:36:66:e4:23:fc:c8:2b:a8:0f:35:
0d:31:98:3b:af:02:2e:5e:61:42:db:bc:d4:6c:cd:
f8:cf:6d:75:b1:65:5f:45:25:c3:7c:8b:ff:7f:7a:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:5A:CC:5E:95:3B:5B:41:DD:B5:E5:2D:F8:FF:0E:92:8E:04:F5
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/esxazF6VO1tB3bXlLfj_DpKOBPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.233.0/24
Signature Algorithm: sha256WithRSAEncryption
16:11:3a:b9:53:24:58:df:39:43:d0:b5:61:ac:e4:a1:aa:8f:
1c:8a:70:68:7b:2b:ff:dd:4d:7c:da:ae:2e:21:0f:e7:8c:14:
1c:5d:57:73:3b:96:0a:cc:0b:26:5e:c9:1a:fc:78:bc:17:fe:
b3:7a:95:aa:47:b3:06:f5:cf:15:83:d1:45:df:24:07:39:61:
3d:a8:23:60:d1:1e:12:30:f7:ac:dd:b0:a1:3a:2f:80:84:0e:
46:01:4e:a1:f0:6d:77:73:96:28:ca:52:a8:22:57:ca:d6:2b:
7b:2d:1d:8e:6b:db:15:89:ca:3f:ae:11:df:a6:5d:ef:0b:e9:
5d:20:7c:b3:ce:64:c3:3a:de:9c:2f:8e:0c:b4:4e:34:90:19:
23:2d:4f:a1:de:ff:d1:39:b2:90:bf:f0:23:20:40:49:18:a5:
92:2d:36:0f:31:11:8d:99:f3:3a:6a:22:3d:c1:4e:2a:28:f8:
df:4b:cd:34:24:06:c2:d3:b4:56:cc:ec:e2:7d:db:59:96:bf:
0e:4d:d8:5b:ee:7b:5f:a2:07:09:e8:c0:c4:0a:fa:d8:3d:df:
6c:89:27:4f:ed:dd:d3:05:4e:42:cd:52:4e:1f:fd:8d:20:96:
57:43:00:50:9f:51:02:5c:67:fa:11:18:75:9a:18:d9:58:6c:
cc:61:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:08:19 2025 by rpki-client