Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/jMPY2-ufPcStrz5YkP3hrmRa0x4.roa
File: jMPY2-ufPcStrz5YkP3hrmRa0x4.roa (raw, json)
Hash identifier: WEKhSeRMtMAat0/YN89Ym/Vfd2Cf6k+8GL0laGXCu34=
Subject key identifier: 8C:C3:D8:DB:EB:9F:3D:C4:AD:AF:3E:58:90:FD:E1:AE:64:5A:D3:1E
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 018382F4DF06341CAC11B655AF1370BFECAB
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/jMPY2-ufPcStrz5YkP3hrmRa0x4.roa
Signing time: Wed 28 Sep 2022 07:17:09 +0000
ROA not before: Wed 28 Sep 2022 07:17:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205196
IP address blocks: 185.226.93.0/24 maxlen: 24
185.226.94.0/24 maxlen: 24
185.226.92.0/24 maxlen: 24
185.226.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:82:f4:df:06:34:1c:ac:11:b6:55:af:13:70:bf:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Sep 28 07:17:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cc3d8dbeb9f3dc4adaf3e5890fde1ae645ad31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:a7:be:77:0a:14:38:cb:2a:d7:26:18:80:
13:af:2c:c0:f5:0d:12:1e:a4:d9:6b:5d:60:3f:08:
cf:1b:75:bb:99:c9:3b:8f:d2:c3:37:74:c7:40:4b:
68:da:c5:60:61:bf:0f:de:0f:eb:ce:62:9b:a5:36:
8e:a6:8b:85:85:bb:fe:f0:fa:88:44:4c:f5:02:a1:
8a:49:58:d3:e1:09:eb:8d:10:46:4a:74:06:2c:35:
59:0c:a5:8e:1a:c7:d5:02:68:ae:54:16:f5:f6:d2:
5c:b1:e8:cb:60:1b:fc:69:4e:0a:65:31:e2:de:c6:
64:76:47:8b:d2:45:54:f8:4e:d1:a9:07:b1:27:34:
0a:a3:30:5d:32:5a:bf:d3:9f:37:05:e7:c9:5f:a4:
e4:58:55:6c:28:86:66:a8:93:1f:1d:ab:8f:a3:16:
40:48:41:06:f6:94:fc:86:b8:c0:79:b0:4e:90:47:
bd:a3:89:93:68:0c:2c:91:c7:d5:24:f6:78:6e:18:
ca:d9:43:1b:f4:8f:63:a0:27:01:75:de:a1:d4:09:
3f:bb:e8:a4:bd:90:40:78:b0:6d:42:20:ea:59:0d:
f2:ab:1a:a0:3d:f4:52:1f:1e:34:6b:8f:84:1c:bb:
69:04:2b:25:90:bd:36:69:58:f1:89:58:3f:0e:67:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:D8:DB:EB:9F:3D:C4:AD:AF:3E:58:90:FD:E1:AE:64:5A:D3:1E
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/jMPY2-ufPcStrz5YkP3hrmRa0x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:40:09:7a:8c:a2:a5:de:01:83:d6:80:8e:6b:21:ef:4d:30:
0b:bb:40:60:66:c2:0a:b3:df:83:7c:9a:32:e0:ce:97:c3:f7:
2a:83:7b:ab:7d:c8:53:c6:c9:ec:86:79:6c:e8:db:86:50:86:
f9:87:c4:87:bc:71:1b:66:1e:fb:4f:f4:f9:fb:65:21:2e:c8:
35:37:8b:f7:fa:6f:c6:e1:b1:0e:10:ed:27:95:1e:71:9a:9f:
11:29:b7:7e:f8:28:6d:8f:6e:1d:48:8f:90:d1:3a:2f:33:36:
e6:b0:fd:bc:1a:a8:3f:d2:5b:e1:ac:0d:92:54:9d:ca:76:ad:
30:82:e9:02:0d:07:86:c7:79:6b:20:06:4e:ab:af:d3:fe:1f:
7a:00:91:74:0a:5c:1e:60:71:d2:8d:2e:96:ab:77:e5:e7:be:
b1:26:0b:f8:65:0b:24:70:59:79:95:20:4d:cd:76:92:57:dd:
c8:94:22:d0:a3:b9:b4:21:44:cc:f0:84:ef:29:52:14:73:8f:
09:31:48:77:4a:8a:f1:29:d6:5c:5f:e7:44:7b:f9:c1:b1:e6:
b4:9e:1f:64:43:3e:94:60:1f:2c:c0:54:82:e5:91:d1:d6:8d:
76:e1:91:cc:e9:4c:7e:f2:01:16:0f:6e:74:c6:36:4e:ae:11:
8d:81:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:56:03 2025 by rpki-client