Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/f4wRVk-W4Tf9x4fcwildkeubst4.roa
File: f4wRVk-W4Tf9x4fcwildkeubst4.roa (raw, json)
Hash identifier: VHOjZAksQR3Sd3CRRPfajhQvLhvVhpD5fGr4iAtQcMA=
Subject key identifier: 7F:8C:11:56:4F:96:E1:37:FD:C7:87:DC:C2:29:5D:91:EB:9B:B2:DE
Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial: 01856DE64E63D2C9FDE7864FB1CCE9A5A5D3
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/f4wRVk-W4Tf9x4fcwildkeubst4.roa
Signing time: Sun 01 Jan 2023 15:14:47 +0000
ROA not before: Sun 01 Jan 2023 15:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24582
IP address blocks: 185.64.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:4e:63:d2:c9:fd:e7:86:4f:b1:cc:e9:a5:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Validity
Not Before: Jan 1 15:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f8c11564f96e137fdc787dcc2295d91eb9bb2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f4:ca:75:6d:4a:17:61:0a:7d:af:5d:e5:46:
4e:b5:9e:c6:7a:19:88:05:94:33:4e:5b:55:6f:f5:
e8:94:18:21:8a:a3:da:af:2c:d2:74:46:a6:0d:83:
c7:b3:70:d4:c9:3e:53:12:31:9b:cd:69:49:bc:da:
f9:c3:97:10:35:42:80:50:0c:d9:ec:55:f3:64:da:
94:e7:77:9b:f5:2e:76:c9:84:2b:74:85:93:51:03:
70:2b:33:3e:7e:04:a8:ff:e7:0d:7a:4f:0b:18:17:
8f:b7:23:5f:2f:cd:e2:9e:1b:66:d5:5f:68:85:c8:
c2:40:22:ee:37:d2:1a:1c:81:00:4e:f6:d5:42:3a:
11:03:0e:a2:d1:c0:6b:33:98:12:b0:e5:bf:da:c0:
0f:0c:c3:8e:88:36:52:40:30:2d:50:66:04:ae:09:
4f:da:aa:df:2f:bb:53:3d:2d:ac:8d:82:d5:cf:f5:
01:da:23:bc:17:6c:95:7a:a8:06:66:68:1f:0f:82:
fc:00:72:61:30:1f:67:49:14:9e:05:5c:8d:ce:8f:
90:1f:14:f9:ff:63:11:be:bf:77:68:7d:4c:fe:87:
92:66:96:63:58:ed:bd:26:01:86:3c:3c:7a:d3:b9:
20:e0:39:05:5f:9e:99:51:3c:f9:cd:22:47:97:e9:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:11:56:4F:96:E1:37:FD:C7:87:DC:C2:29:5D:91:EB:9B:B2:DE
X509v3 Authority Key Identifier:
keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/f4wRVk-W4Tf9x4fcwildkeubst4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.96.0/22
Signature Algorithm: sha256WithRSAEncryption
26:af:6f:fb:b3:04:20:34:b2:5a:16:73:b3:80:64:81:ae:f9:
2b:3c:14:d5:ab:07:f3:6e:84:2a:a5:26:6e:c2:68:ed:85:fe:
db:39:51:b2:d9:2c:22:d3:fc:07:55:55:ff:07:6f:1e:8d:eb:
06:0a:8a:a8:6c:5e:7d:ec:74:f0:5d:f9:6b:63:ff:83:1e:e3:
ec:0f:21:6a:f5:bc:8d:de:b9:4e:0b:2a:87:2c:7b:da:56:08:
63:fb:4c:b6:b2:d9:03:ee:83:b4:6f:51:a5:e6:c0:f9:7b:13:
32:dc:58:5f:7b:dd:8a:09:10:62:94:68:c9:7a:a1:14:74:bc:
c7:59:2f:4a:6c:9d:48:a4:1c:05:99:a8:1a:a7:c6:83:ae:b0:
0f:09:60:df:72:ff:b5:51:78:c2:06:02:db:0c:03:45:e3:f1:
cf:81:7f:c3:e9:30:0e:a2:06:00:5d:9e:a9:44:ad:b4:b2:93:
ac:8f:14:99:a9:93:61:08:e7:fb:9f:82:f0:0b:aa:51:79:19:
7d:6e:97:b9:16:3e:e6:70:c8:d5:81:4a:65:bb:e8:91:a9:ba:
74:28:55:6e:8c:3b:4f:9e:86:02:84:16:9f:33:11:c7:3d:77:
67:31:65:40:a3:7d:8c:d9:84:8c:00:57:fc:9e:f3:58:48:e5:
e5:6a:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:58:48 2025 by rpki-client