Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/7Jj1JENJdxz1F_UyiDAUVuPTbCg.roa
File: 7Jj1JENJdxz1F_UyiDAUVuPTbCg.roa (raw, json)
Hash identifier: Au7SK9Qb+eQsyiJP0Zwx9LE6O90+9X3wSsfC8tTKW8M=
Subject key identifier: EC:98:F5:24:43:49:77:1C:F5:17:F5:32:88:30:14:56:E3:D3:6C:28
Certificate issuer: /CN=357c1bbbb216d911304761fa7b31378470cab69c
Certificate serial: 08DCF8D3
Authority key identifier: 35:7C:1B:BB:B2:16:D9:11:30:47:61:FA:7B:31:37:84:70:CA:B6:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXwbu7IW2REwR2H6ezE3hHDKtpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/7Jj1JENJdxz1F_UyiDAUVuPTbCg.roa
Signing time: Sat 01 Jan 2022 08:56:23 +0000
ROA not before: Sat 01 Jan 2022 08:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204809
IP address blocks: 185.238.156.0/22 maxlen: 22
2a0c:3080::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148699347 (0x8dcf8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357c1bbbb216d911304761fa7b31378470cab69c
Validity
Not Before: Jan 1 08:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec98f5244349771cf517f53288301456e3d36c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:ee:ed:b0:be:38:46:00:a0:c6:47:07:8d:
78:57:3a:96:fd:1a:1b:95:8e:72:41:9c:de:e6:48:
53:42:2e:f0:02:d6:4a:85:ef:a0:07:38:a5:f5:4f:
1d:71:d8:b5:01:89:33:bf:71:5c:82:11:82:41:14:
5b:c9:1a:2d:73:04:21:95:83:27:eb:dd:03:dc:38:
78:e7:3a:d4:27:69:5f:25:da:35:0e:de:50:fd:68:
55:e0:1a:c6:90:7c:32:50:04:65:0f:dc:7c:67:27:
67:ff:f0:77:20:fa:aa:0b:f5:7b:c1:80:d9:d6:e5:
36:34:27:b6:cc:98:48:e6:ce:54:64:c1:95:3e:a8:
e2:88:f5:26:4f:b2:1a:eb:a0:15:f3:5c:5d:0e:fe:
26:68:da:75:86:2d:e2:2e:db:f8:94:90:b5:3a:1d:
24:c6:62:bd:9a:5f:67:00:8e:38:23:68:05:e5:b8:
7d:d4:58:8f:86:82:4a:94:42:a9:0c:07:8b:58:94:
02:6c:c0:a0:55:f7:0d:5e:55:5b:84:00:ce:e2:e5:
58:03:35:8b:91:aa:ef:db:1f:a1:2b:40:ed:41:44:
a5:ba:93:02:16:59:03:d6:b4:d7:43:0c:6a:00:35:
93:c0:c2:09:31:9c:cb:c9:9b:8b:7d:0b:e5:4c:7a:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:F5:24:43:49:77:1C:F5:17:F5:32:88:30:14:56:E3:D3:6C:28
X509v3 Authority Key Identifier:
keyid:35:7C:1B:BB:B2:16:D9:11:30:47:61:FA:7B:31:37:84:70:CA:B6:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXwbu7IW2REwR2H6ezE3hHDKtpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/7Jj1JENJdxz1F_UyiDAUVuPTbCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.156.0/22
IPv6:
2a0c:3080::/48
Signature Algorithm: sha256WithRSAEncryption
64:f4:47:82:2d:95:8d:1b:be:97:18:ea:e4:ae:fa:77:83:29:
be:11:d5:78:be:64:83:bf:fb:cb:2d:99:55:c2:5d:26:ea:4a:
7d:af:2e:67:d8:16:90:73:25:7c:f0:a0:6d:34:2f:bc:1e:96:
cd:57:73:8c:d3:5b:f4:d8:ad:df:1b:89:0f:ec:59:a0:ad:5a:
de:05:00:4e:26:af:1b:84:69:be:e5:e1:66:cf:c4:68:3e:e2:
37:05:3b:b3:4a:d6:27:29:2e:81:e0:89:d2:51:71:33:e7:0e:
b2:70:0f:a8:b6:8b:7c:49:15:f1:c4:5f:ea:df:eb:8a:22:00:
7e:0f:b4:7d:30:30:2a:7f:b9:12:51:61:17:21:44:87:8e:d6:
6d:0d:3f:52:44:25:9b:7d:0a:37:8c:dc:69:f3:86:14:68:c9:
68:f3:29:59:d3:62:ef:17:f8:36:d9:62:28:3c:06:86:2c:6d:
50:aa:2d:de:f5:c1:6f:05:2d:ae:4b:63:18:9d:79:a1:1c:4f:
64:c3:9e:0a:5f:7f:8d:74:25:fb:c6:3d:d8:12:88:92:69:97:
56:84:51:ee:44:64:09:8b:38:bf:5f:f5:e7:7c:9f:ac:09:4c:
b1:d9:c3:b2:87:6e:ff:00:48:e1:6c:9c:62:ae:85:3f:cb:36:
0c:22:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:47 2025 by rpki-client