Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/Pr4M5nTlhmTV8YM5JInRYyYoXb4.roa
File: Pr4M5nTlhmTV8YM5JInRYyYoXb4.roa (raw, json)
Hash identifier: YXrQ0ov9Fm4S5vD9M+ry2Z4s6pZJ4kby0J6ugsNFCo8=
Subject key identifier: 3E:BE:0C:E6:74:E5:86:64:D5:F1:83:39:24:89:D1:63:26:28:5D:BE
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 069B5391
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/Pr4M5nTlhmTV8YM5JInRYyYoXb4.roa
Signing time: Sat 01 Jan 2022 16:10:31 +0000
ROA not before: Sat 01 Jan 2022 16:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42605
IP address blocks: 83.136.72.0/21 maxlen: 24
185.111.192.0/22 maxlen: 24
2a02:b28::/32 maxlen: 32
2a02:b28::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110842769 (0x69b5391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jan 1 16:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ebe0ce674e58664d5f183392489d16326285dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:53:c5:c9:26:d9:42:6d:78:fb:88:81:13:
c8:a7:b9:98:8a:72:47:be:a7:11:c6:10:65:8e:34:
ed:29:4b:42:15:a4:bd:e8:44:a3:ba:d8:5e:5c:9b:
8d:dc:1e:4a:61:28:88:9e:68:0e:77:08:83:67:a2:
ac:12:15:25:25:01:02:7e:a3:b5:f1:b4:a9:1a:f1:
8e:41:36:9a:ee:5b:83:c4:cc:51:18:d4:dc:a7:86:
99:a6:d9:2d:29:f6:85:41:68:1d:64:83:63:9c:0d:
28:28:83:ae:0f:77:08:55:d1:56:c4:b6:f4:cd:95:
50:83:8e:0d:69:5a:61:3c:26:d1:fb:96:41:f0:e1:
f2:b5:35:db:1c:bf:0c:fd:23:6e:5f:68:d5:2f:e7:
32:b7:19:04:eb:ea:76:c4:76:fe:a2:6b:da:01:8b:
5f:eb:c8:6e:3a:90:34:83:d8:a0:c1:fc:4c:b4:3c:
bb:2c:9e:a1:d8:ab:dd:8e:ff:96:25:81:79:6d:78:
3a:95:c4:2a:2c:d1:9b:20:73:ca:7d:7e:18:92:d3:
95:d2:1c:87:98:42:e9:b8:bb:86:cd:89:4a:d2:70:
13:d5:c6:9b:81:81:73:ff:54:b3:9d:77:60:e4:5e:
83:a4:21:53:7d:40:2b:9b:42:a3:dc:84:6c:ca:0b:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BE:0C:E6:74:E5:86:64:D5:F1:83:39:24:89:D1:63:26:28:5D:BE
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/Pr4M5nTlhmTV8YM5JInRYyYoXb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.72.0/21
185.111.192.0/22
IPv6:
2a02:b28::/29
Signature Algorithm: sha256WithRSAEncryption
87:ad:d6:2f:c7:59:dc:d5:35:14:d3:e2:af:60:83:4d:da:be:
8d:65:a0:2a:bf:fe:46:dc:5a:35:2f:77:df:28:9d:ee:42:95:
2b:f6:5b:75:59:83:d2:de:53:84:34:20:80:06:55:b4:1b:a6:
3d:be:da:c6:a9:a9:63:67:0b:ee:46:a2:5b:50:df:fe:4e:f9:
d4:ff:35:dc:85:5b:38:88:73:47:85:09:15:f6:89:a3:27:67:
57:08:9c:5c:fa:dd:9a:de:41:43:4c:79:bb:87:9e:a8:5c:52:
5a:90:ab:23:c0:cf:1e:f0:69:50:40:15:dd:39:75:17:4b:06:
b0:6d:c7:a9:13:f7:1d:70:d6:fc:1d:c8:ea:6d:03:20:04:96:
89:df:a5:1b:8a:06:3e:06:33:ae:19:a2:1f:78:62:20:37:95:
49:14:84:a6:88:fe:1f:ed:d2:65:cc:f9:0f:a9:30:61:95:38:
8f:ad:fd:8d:61:ce:94:80:47:41:20:e7:a7:0e:c2:e5:95:e1:
be:45:2e:0c:94:f1:7e:6b:ae:00:d5:13:0f:90:1b:e8:52:57:
8a:a7:1f:46:11:cc:7b:e9:ac:70:86:f9:9f:84:44:9a:9a:04:
d1:3b:da:cd:8f:63:ad:3d:7c:55:33:aa:90:36:84:f9:87:56:
63:e0:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:40 2025 by rpki-client