Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/x_oKyyZWwetmPQX4BEt8v3rgL70.roa
File: x_oKyyZWwetmPQX4BEt8v3rgL70.roa (raw, json)
Hash identifier: /xvWVf6AQOQqEqsINs8bAkezYSLTzTBM7+GcIm7jyLg=
Subject key identifier: C7:FA:0A:CB:26:56:C1:EB:66:3D:05:F8:04:4B:7C:BF:7A:E0:2F:BD
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 0182399505943A980CD57E14E57D1EA1BE1D
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/x_oKyyZWwetmPQX4BEt8v3rgL70.roa
Signing time: Tue 26 Jul 2022 08:17:23 +0000
ROA not before: Tue 26 Jul 2022 08:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47372
IP address blocks: 185.192.168.0/22 maxlen: 32
93.191.160.0/21 maxlen: 32
2a06:5d00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:95:05:94:3a:98:0c:d5:7e:14:e5:7d:1e:a1:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jul 26 08:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7fa0acb2656c1eb663d05f8044b7cbf7ae02fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:1e:52:d6:5d:6b:2a:24:ce:21:05:2e:fe:
d0:07:af:73:ae:ea:7b:d4:01:5a:49:cd:fd:f4:f7:
a3:48:dd:ff:f8:0b:54:2f:e5:83:70:61:31:93:a6:
ca:1e:06:ca:76:5d:5d:67:ab:e7:8f:9d:b0:aa:a0:
32:14:51:8f:7a:b1:ad:a4:16:35:25:a0:df:d4:37:
26:79:15:ca:58:07:38:87:2d:30:b9:6f:52:5e:9c:
f4:31:bb:f4:5b:52:67:9e:ea:3b:fc:3d:9e:76:4e:
a4:07:54:c8:a1:7f:ef:1e:a0:86:8c:d6:4f:80:43:
cf:11:0e:70:05:c9:56:d9:cc:f4:8d:15:ae:fc:ec:
2c:60:5d:f5:72:36:56:e6:ca:93:15:97:dc:6c:0d:
df:dc:37:26:1e:c8:57:ff:32:9f:85:8c:0e:5e:12:
70:14:4e:0f:9a:d3:02:d6:2c:17:ff:a2:29:05:4e:
bd:a7:93:de:9e:cb:1a:71:2c:d4:1b:08:b8:db:e0:
85:4b:72:b0:8d:bb:ce:d9:33:a1:23:47:df:52:7f:
65:76:1c:38:a1:af:03:93:25:a8:f3:06:d4:40:76:
9b:b6:7e:6b:90:29:41:0f:68:9d:f1:09:9e:b1:61:
39:a2:4a:c0:36:37:c0:ed:ad:7f:97:f7:f7:d2:91:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:0A:CB:26:56:C1:EB:66:3D:05:F8:04:4B:7C:BF:7A:E0:2F:BD
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/x_oKyyZWwetmPQX4BEt8v3rgL70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/22
IPv6:
2a06:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
48:31:23:ee:3d:e7:bc:ba:8d:7c:6e:86:ff:fd:0c:e4:86:99:
9c:42:7e:c5:ad:89:03:d9:c0:66:d6:f2:40:31:9d:d1:14:26:
20:70:25:d5:74:48:c8:8c:f3:53:e4:79:6f:24:bc:53:f7:07:
dd:5d:57:b4:70:67:56:f6:28:99:18:7f:cb:98:c9:11:98:c1:
97:de:83:a2:e1:d5:7f:12:9b:de:8a:bc:a7:6f:63:48:42:97:
f1:fb:d4:38:5d:d9:30:81:ad:c7:c9:6a:2a:76:a7:2e:88:be:
84:9b:61:e5:85:4d:3c:65:cf:c1:df:23:3a:4b:e5:f0:65:b6:
b6:3d:59:5f:a4:12:7c:32:2f:76:fa:e0:39:7a:e1:d8:c4:fa:
a7:8d:8e:7b:5f:2c:3f:98:29:ed:a8:7e:fd:0e:22:7e:df:4a:
88:38:0d:21:b4:13:da:24:8c:a8:53:a1:db:78:0f:cb:29:f6:
82:46:bb:fc:6d:a7:f0:5e:dd:b7:1e:10:9d:03:bc:50:ec:20:
fb:b4:e3:da:76:33:5f:92:60:82:8f:a0:94:8a:aa:c7:c9:34:
df:e2:26:ee:f9:d1:c6:d8:4e:75:d0:bb:0e:3d:de:bb:82:07:
12:96:df:36:9f:e9:be:82:24:5f:6a:d4:48:a6:7c:db:d6:dc:
12:c5:d8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:07 2025 by rpki-client