Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/9A4xYti-Hy4WqQOWOKk9irrBKEw.roa
File: 9A4xYti-Hy4WqQOWOKk9irrBKEw.roa (raw, json)
Hash identifier: v6YkiH10KEVrrKCOgV2Nr3cQrcQWkyHfKEMRQancBw4=
Subject key identifier: F4:0E:31:62:D8:BE:1F:2E:16:A9:03:96:38:A9:3D:8A:BA:C1:28:4C
Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial: 0F56999D
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/9A4xYti-Hy4WqQOWOKk9irrBKEw.roa
Signing time: Sat 01 Jan 2022 03:01:12 +0000
ROA not before: Sat 01 Jan 2022 03:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199562
IP address blocks: 185.10.224.0/22 maxlen: 24
185.10.227.0/24 maxlen: 24
2a03:6640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257333661 (0xf56999d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Validity
Not Before: Jan 1 03:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f40e3162d8be1f2e16a9039638a93d8abac1284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:2c:5c:2a:fc:88:b9:d6:10:4c:07:4b:58:
ef:da:27:7c:f7:03:74:44:61:e1:06:69:42:a5:53:
3e:5f:a3:85:1e:ee:3f:22:59:fc:4b:b4:0d:05:16:
57:ad:42:af:7d:1e:45:3c:6c:bd:35:e6:23:b9:e7:
3b:5e:77:97:6f:48:b4:b8:0a:b2:d8:09:f0:8d:5a:
fb:6f:dd:c4:3a:73:2c:e3:18:8d:cc:2e:14:d0:e3:
3f:08:53:3d:09:2f:9c:4a:ae:bf:20:e4:10:56:5d:
6d:4c:46:22:a4:a4:dc:9d:d9:bb:c1:0c:c5:50:74:
0c:6e:c7:71:f5:9f:ff:12:32:81:9b:fa:db:22:03:
1f:6e:08:6b:d3:4f:65:4d:2c:7a:3d:3c:16:e7:79:
60:85:21:4b:66:75:82:6c:9c:31:73:33:b5:1b:1d:
99:3f:99:83:9f:d0:9c:5f:ae:38:0b:cc:41:c7:88:
a7:a1:3e:c5:48:38:43:ee:f1:70:b7:81:ce:86:05:
09:7a:3d:e4:8e:f6:a9:0d:64:7c:0e:7d:9b:d9:ef:
7a:7a:f9:4d:cf:e4:28:c4:37:84:19:4f:27:1d:c8:
6e:29:37:7d:90:da:90:85:d2:18:0e:d0:dd:6a:64:
1f:a1:a4:9d:e6:77:2d:00:4d:71:c7:45:00:bb:bd:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0E:31:62:D8:BE:1F:2E:16:A9:03:96:38:A9:3D:8A:BA:C1:28:4C
X509v3 Authority Key Identifier:
keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/9A4xYti-Hy4WqQOWOKk9irrBKEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.224.0/22
IPv6:
2a03:6640::/32
Signature Algorithm: sha256WithRSAEncryption
73:18:43:13:e2:2d:c7:cb:38:a8:89:86:eb:bb:1f:d8:e0:b6:
c7:0c:4b:2d:d3:28:cc:d1:68:23:69:14:ee:4b:39:ed:fa:4a:
60:2d:df:27:b3:36:58:95:70:58:a4:27:38:1a:97:7d:85:b6:
7b:68:01:4c:e9:de:f1:76:7a:b6:31:16:a9:e1:9d:b3:96:4f:
88:9a:04:47:f4:60:b4:5f:b0:6a:2e:86:0b:2e:13:1e:4e:5a:
a3:28:e3:1f:4d:d3:2c:53:4e:8a:54:23:83:66:d7:7c:3c:a1:
80:be:9d:58:67:87:8e:b5:0d:7d:e0:be:72:b9:6e:56:f9:fa:
c1:e3:3c:b8:92:ae:53:6e:94:be:2b:f6:dd:ec:11:8c:97:f2:
70:33:f3:e3:55:61:82:0f:00:f5:67:83:53:ab:64:b1:d0:95:
14:b3:c1:15:84:d2:3f:16:73:41:59:d5:c7:72:65:0d:4e:19:
68:c2:78:1f:74:ba:81:d6:d9:6f:41:08:65:31:7f:20:4f:34:
8a:7b:45:c2:8a:7d:55:43:d8:00:2d:a0:7f:0b:b0:b2:9e:2a:
cc:94:a6:b5:53:84:4a:19:ed:54:aa:12:01:cf:2a:24:e1:05:
f3:76:f5:05:d3:7a:72:fe:be:c2:5d:c0:7c:84:5f:1b:49:35:
ab:1b:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:46 2025 by rpki-client