Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/xxjg65HgPp9O28sTFlLLeSi9LIk.roa
File: xxjg65HgPp9O28sTFlLLeSi9LIk.roa (raw, json)
Hash identifier: fCiGrpUs0fajxnIfDrV0sqEO4ce6gYnWX4DmB3lbZos=
Subject key identifier: C7:18:E0:EB:91:E0:3E:9F:4E:DB:CB:13:16:52:CB:79:28:BD:2C:89
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 0A1B18AE
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/xxjg65HgPp9O28sTFlLLeSi9LIk.roa
Signing time: Sat 01 Jan 2022 11:01:22 +0000
ROA not before: Sat 01 Jan 2022 11:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200678
IP address blocks: 185.247.28.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169547950 (0xa1b18ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jan 1 11:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c718e0eb91e03e9f4edbcb131652cb7928bd2c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:73:63:15:45:57:1d:2f:34:ed:d2:46:ac:
43:ca:56:bd:51:dc:58:89:d3:f8:91:26:87:71:b4:
f0:c9:21:f7:17:6b:99:92:b1:1f:b5:ec:b5:18:7e:
fb:28:4b:0a:9e:b3:ff:f5:af:c7:31:b2:58:5d:83:
8f:db:56:d5:04:fb:f5:b6:3a:51:b8:ac:79:0d:bb:
83:b8:92:83:a4:f6:69:7a:f9:2b:e8:26:47:2e:22:
1c:0e:f9:fb:8d:77:ff:19:60:85:4c:40:fa:b4:9f:
be:41:2a:13:a6:a9:d9:ba:e9:be:a2:40:fc:40:9f:
76:0a:bd:49:c8:39:51:19:11:86:c2:33:aa:81:64:
ba:5c:d0:50:4b:32:b6:51:78:fd:9a:3c:19:f6:42:
47:b8:c7:45:a7:2e:49:ca:9b:31:cc:c2:30:0b:0b:
41:46:2b:b1:e0:0f:70:b1:97:05:36:83:0b:2e:73:
2d:ad:38:a7:42:6b:ef:9d:2f:ce:81:2f:f2:e4:b3:
08:02:61:b9:31:c3:e6:a9:09:09:7f:9d:e3:63:56:
73:fb:e4:1d:ef:6b:ed:d0:4f:69:02:51:a7:ba:dc:
6a:14:cc:4c:3f:52:27:50:47:94:2f:06:96:ea:39:
b7:52:db:ce:98:65:84:44:42:44:23:f0:3f:1b:84:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:E0:EB:91:E0:3E:9F:4E:DB:CB:13:16:52:CB:79:28:BD:2C:89
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/xxjg65HgPp9O28sTFlLLeSi9LIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:e9:f0:b1:1b:de:a2:f7:2e:37:63:0b:85:c4:d2:11:ae:ab:
40:4e:e5:8f:db:b7:c7:50:54:c2:dd:23:0c:c5:84:3b:e1:67:
6d:b7:00:8d:1c:78:bf:af:26:b7:5d:4e:b9:b3:d2:33:6a:71:
87:22:93:6c:43:80:2d:c0:b5:09:a6:0a:c4:a4:0d:63:d2:cf:
79:9b:02:a2:c1:5a:cd:31:08:7c:72:3f:64:9c:e5:47:b7:34:
1a:e9:ca:e0:c8:9e:8e:a6:75:97:04:d3:96:05:33:6b:7d:2e:
9a:4b:cf:7f:9f:e3:7e:3a:22:20:88:5f:40:46:ff:e7:5a:9a:
76:44:73:c9:39:dc:44:01:22:8e:35:be:4f:ea:aa:49:6e:15:
3a:93:00:bc:1e:ae:13:19:d4:b6:11:e1:40:54:4a:c1:43:a5:
e4:7a:14:51:7a:92:dc:07:0b:46:a8:de:7d:16:5f:41:64:d3:
c1:0b:a5:ea:b8:6a:0e:95:ea:4d:ae:00:60:0e:fb:b4:73:2f:
0c:f9:02:7b:fb:77:3f:a1:1a:d0:57:c3:87:62:49:9e:63:d6:
d6:cd:c5:ff:21:85:f9:29:82:df:1b:53:a4:d3:0b:6e:ab:51:
8c:5a:89:9e:e0:4a:d9:39:37:57:74:32:1a:0f:c9:0a:7e:79:
5f:7c:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:19 2025 by rpki-client