Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/7UkBioDH_1fOOHo9zEKmvwhQ3Sk.roa
File: 7UkBioDH_1fOOHo9zEKmvwhQ3Sk.roa (raw, json)
Hash identifier: vgXKULDydTG5kS4+woXJNFOHyKntR1VAAnk/1mwteaE=
Subject key identifier: ED:49:01:8A:80:C7:FF:57:CE:38:7A:3D:CC:42:A6:BF:08:50:DD:29
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 01856F94A2B5771C4157B67F411D7B979A41
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/7UkBioDH_1fOOHo9zEKmvwhQ3Sk.roa
Signing time: Sun 01 Jan 2023 23:04:50 +0000
ROA not before: Sun 01 Jan 2023 23:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 185.225.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:a2:b5:77:1c:41:57:b6:7f:41:1d:7b:97:9a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jan 1 23:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed49018a80c7ff57ce387a3dcc42a6bf0850dd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:4d:2c:c0:6c:27:4f:3e:a6:ab:40:67:88:
a2:30:2a:95:0c:1f:5c:64:b9:07:72:7e:8c:ea:5d:
50:8e:9d:66:0e:c8:c1:f6:4c:c2:4e:ae:92:d8:0b:
eb:86:19:17:56:68:d0:94:43:b3:a5:48:62:17:dd:
60:c8:96:8e:3c:6b:4b:2a:42:26:ad:fd:6c:2a:97:
df:4f:c9:4a:cb:8d:6f:22:b9:47:3b:47:0e:53:8f:
bc:1d:9b:9b:a9:57:32:d6:81:a9:df:b0:40:d7:1f:
dd:6d:af:64:82:43:4d:c5:48:81:42:07:e0:a3:5f:
40:b0:e3:8d:cc:11:23:38:00:bc:0a:5b:ef:61:9e:
f8:12:9b:80:33:41:31:e5:26:00:bc:ce:79:33:a1:
2f:49:da:77:f0:4e:86:c4:4e:cb:b0:2f:e7:76:62:
2e:30:00:5e:f1:c7:ef:3a:77:ff:56:ad:cc:0a:7c:
d5:5d:b6:ee:ae:cd:ce:94:22:64:99:8b:34:00:94:
2d:b1:5e:b3:43:31:48:db:cf:9f:4b:61:ef:cc:f3:
a5:21:eb:a2:91:3d:0e:3b:c6:74:0f:14:1d:35:81:
d6:ca:ee:e7:10:25:71:38:9d:87:e4:0b:5a:d6:20:
47:28:b0:28:70:ed:bf:58:9e:d3:eb:39:79:c7:cd:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:01:8A:80:C7:FF:57:CE:38:7A:3D:CC:42:A6:BF:08:50:DD:29
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/7UkBioDH_1fOOHo9zEKmvwhQ3Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.60.0/22
Signature Algorithm: sha256WithRSAEncryption
68:bb:10:79:90:af:fb:a8:98:e1:42:54:e1:59:27:24:c7:d2:
d5:1d:ee:fe:2f:f9:15:7f:7f:cc:96:45:5d:ec:b8:43:aa:f7:
97:1a:32:f3:c6:66:58:10:70:9a:f4:f5:7d:4b:a0:6a:37:51:
db:b9:76:56:20:92:d9:a5:1e:66:c0:63:9f:93:72:4a:0a:47:
e3:8e:3c:2a:68:64:fb:b5:96:54:c4:4e:70:ff:e1:9a:c8:b8:
6c:c9:53:9e:66:60:d3:08:44:4a:0b:38:db:06:6e:c0:8c:14:
92:3e:30:e6:a6:ea:b1:9f:f8:f6:84:50:90:32:80:d4:ea:c6:
61:fe:c9:9b:40:08:fd:f7:b5:2a:10:25:6b:52:99:d8:ea:f8:
91:fc:da:27:8c:e7:f4:d7:e6:71:56:47:88:8e:f2:08:10:2b:
1f:c7:eb:6e:6b:b9:ff:5c:f1:26:a1:dd:80:24:8d:bb:01:1a:
97:ac:5b:18:48:a4:fc:57:3b:e5:6b:f0:0e:5b:a5:93:a6:9f:
91:4c:3c:5f:ca:19:4b:4e:97:82:4f:98:7f:8e:9c:14:02:0b:
af:a5:26:9d:30:31:88:c0:3b:47:a7:1b:07:6d:7b:c2:38:9e:
72:9b:45:81:86:5f:fc:26:5f:a9:d1:91:1b:43:e3:ee:5e:07:
e1:63:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:06:56 2025 by rpki-client