Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/IcWJLmNxAVC6nBr7WrQcpneQc-U.roa
File: IcWJLmNxAVC6nBr7WrQcpneQc-U.roa (raw, json)
Hash identifier: RDfJrrqFSI1SyuCH1grd3YsONs999AQfS8BCGCx1x9o=
Subject key identifier: 21:C5:89:2E:63:71:01:50:BA:9C:1A:FB:5A:B4:1C:A6:77:90:73:E5
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 18B5834F
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/IcWJLmNxAVC6nBr7WrQcpneQc-U.roa
Signing time: Sat 01 Jan 2022 14:58:02 +0000
ROA not before: Sat 01 Jan 2022 14:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60164
IP address blocks: 185.54.148.0/22 maxlen: 24
2a04:d280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414548815 (0x18b5834f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Jan 1 14:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21c5892e63710150ba9c1afb5ab41ca6779073e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:0c:e2:97:b0:2d:a6:17:1b:c8:02:e4:68:
ae:82:d5:01:e6:45:6a:73:17:f7:68:e9:4f:df:a2:
bb:8a:9e:d3:97:62:2b:2f:7b:cf:4e:59:51:f1:58:
d4:f6:41:b2:ac:57:ca:fa:bb:c8:86:0e:ce:5b:81:
8d:0f:03:ae:e8:a9:0a:fe:18:17:55:a8:42:6e:40:
21:cb:88:38:7e:7b:a9:05:dd:f6:df:6e:be:ea:3d:
a6:81:b3:b6:83:d1:e8:d7:e1:16:34:a6:b0:28:68:
64:e1:74:a9:b9:10:ab:70:48:a6:7c:a8:f3:20:60:
6d:aa:0e:df:fb:5e:51:2b:4e:11:1e:41:0f:77:34:
3c:d6:63:e5:a8:ef:8a:43:e7:8b:40:d9:15:0e:16:
98:36:81:46:e2:5a:6d:75:68:0f:26:26:e0:df:e5:
99:18:c3:53:75:45:49:14:ca:fe:59:72:32:d5:93:
d0:b4:b4:01:f5:ca:48:80:f1:58:e8:4f:a2:2e:ac:
78:d7:09:3b:6b:46:0b:3a:5d:cf:8c:54:2a:24:f6:
d0:29:6b:e5:6a:b8:c0:1d:7e:21:61:a0:26:8e:45:
2a:99:77:2a:99:cc:9e:8d:ed:0b:35:d7:bb:a4:b6:
a1:98:65:5e:52:c4:28:3c:29:e3:7a:35:6c:f3:12:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:89:2E:63:71:01:50:BA:9C:1A:FB:5A:B4:1C:A6:77:90:73:E5
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/IcWJLmNxAVC6nBr7WrQcpneQc-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.148.0/22
IPv6:
2a04:d280::/29
Signature Algorithm: sha256WithRSAEncryption
19:bb:ab:b5:0f:a0:f9:78:92:ad:b1:f7:42:b7:59:fb:52:ab:
99:75:4e:7e:a6:35:75:eb:69:de:95:f0:9b:36:96:d0:86:8d:
85:78:83:26:2f:02:82:2b:c7:0d:7d:a7:06:74:ef:53:6a:e4:
1a:a6:f3:14:9b:18:23:74:df:5f:8c:47:5a:0c:1e:7e:b5:8a:
4b:44:5c:9b:d6:d1:79:a4:60:4b:76:54:91:2a:74:47:6e:a4:
6b:bd:86:df:66:25:21:d6:2c:7a:00:07:00:50:c7:8d:fe:ca:
0b:84:63:0f:06:18:b7:f7:2d:20:9a:d3:19:60:0a:f8:1b:9f:
51:cf:5c:f3:c0:16:3c:53:67:40:b9:d9:24:18:f2:d0:45:4f:
38:90:ee:27:0a:90:a3:11:f9:c4:6a:96:a0:45:2f:a8:02:b5:
e2:4b:6c:3d:38:5c:24:01:c0:af:f4:a2:6c:f8:c0:f3:d1:96:
39:72:9f:01:94:b8:92:c3:b5:57:b5:da:ed:1f:63:eb:7b:f8:
bf:70:d1:93:40:97:ce:5d:fe:00:cb:6d:ca:d6:87:03:de:be:
d3:04:ee:8c:38:ed:bb:ea:04:82:37:16:4a:fe:ae:ba:44:14:
55:91:f9:21:3d:1b:18:d2:c0:67:99:de:a2:81:a6:05:a3:e1:
4a:a5:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:05:42 2025 by rpki-client