Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/tiSoXD0WvpRyjTnHtpmrekQMfxg.roa
File: tiSoXD0WvpRyjTnHtpmrekQMfxg.roa (raw, json)
Hash identifier: yo1l2mrseIZScqjXNZOwN2/+GD8Z4+0vC3HerpDrINM=
Subject key identifier: B6:24:A8:5C:3D:16:BE:94:72:8D:39:C7:B6:99:AB:7A:44:0C:7F:18
Certificate issuer: /CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Certificate serial: 0F71810B
Authority key identifier: 93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/tiSoXD0WvpRyjTnHtpmrekQMfxg.roa
Signing time: Sat 01 Jan 2022 10:53:46 +0000
ROA not before: Sat 01 Jan 2022 10:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62031
IP address blocks: 185.198.16.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259096843 (0xf71810b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a10fa9eca8ec8ddd5e125426438e8df8c87abc
Validity
Not Before: Jan 1 10:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b624a85c3d16be94728d39c7b699ab7a440c7f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:86:04:39:41:ab:bd:60:a9:e7:6a:b1:f2:
a6:07:dd:c7:de:ed:0c:58:6c:bf:22:04:0e:2e:4e:
fe:fe:bb:b3:98:13:5b:f3:e6:25:b4:b2:c1:fb:62:
99:7c:c4:64:4e:3d:f7:5c:ab:b8:e2:cb:e4:ef:1e:
4a:07:92:77:13:ff:1f:5b:69:65:e9:ac:da:e3:3b:
0d:de:6f:51:66:d8:f0:3d:1a:ba:db:6b:42:83:57:
ce:e3:28:ec:b3:c9:c8:4b:c5:7a:ea:84:cc:32:60:
f8:a8:8f:bb:44:b3:a0:27:44:35:3e:4f:41:b9:1f:
89:0b:ee:7d:47:b8:97:2a:9a:97:8d:f1:65:35:ea:
30:be:04:aa:45:0d:30:ce:cd:18:7d:41:9e:0e:5b:
9b:84:d5:be:c8:ba:56:2e:e9:6f:77:51:0a:51:78:
8a:0a:74:43:83:59:58:27:d3:c4:a7:b3:cf:ac:7c:
e9:81:07:6f:ea:06:79:90:30:3c:96:db:d6:9d:38:
67:f0:14:10:57:60:ee:ca:75:82:6c:d7:8e:a2:eb:
dd:af:63:de:6f:57:97:18:35:31:48:f3:74:f3:b3:
04:9e:a3:e7:d1:c2:2c:73:d5:ee:db:e9:cb:1a:98:
6f:7c:75:e0:18:7c:98:ce:70:0e:57:2a:15:46:2b:
56:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:A8:5C:3D:16:BE:94:72:8D:39:C7:B6:99:AB:7A:44:0C:7F:18
X509v3 Authority Key Identifier:
keyid:93:A1:0F:A9:EC:A8:EC:8D:DD:5E:12:54:26:43:8E:8D:F8:C8:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6EPqeyo7I3dXhJUJkOOjfjIerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/tiSoXD0WvpRyjTnHtpmrekQMfxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/85e00e-d9ae-4074-9662-48790f600c64/1/k6EPqeyo7I3dXhJUJkOOjfjIerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.16.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:0e:e4:c1:30:c5:40:19:ea:cc:57:09:2c:91:e8:b7:52:95:
5f:72:11:29:17:85:e9:75:96:36:b7:9d:be:06:a6:c9:24:cb:
e7:64:19:1c:26:08:e3:11:41:3e:64:ed:60:3b:01:3b:38:0a:
71:42:7a:b8:69:1a:25:bf:00:19:8b:f3:90:96:49:b8:60:1f:
a1:6e:fa:17:f0:db:05:bb:15:91:60:dc:e4:18:7a:82:5f:a4:
48:df:a9:65:d2:74:0c:09:c3:c9:75:45:11:18:46:47:75:24:
62:8e:69:1b:69:77:90:20:42:d0:56:0f:e6:f2:b3:24:e9:3e:
d4:22:21:dc:e7:58:cb:a7:dc:1b:7e:dd:99:d1:c0:0c:60:c2:
ae:e1:09:35:c1:cb:88:64:19:17:00:73:24:95:65:d7:0d:37:
d4:c0:3a:12:77:d1:9d:a9:cc:f0:06:3e:71:0b:f5:1d:5a:6d:
b8:3c:eb:e6:76:88:b2:a6:32:db:19:a4:f5:d9:9c:c0:11:c5:
9a:a6:4c:90:df:14:67:0f:e9:ab:ff:8b:e7:15:90:a1:73:dd:
07:28:64:bc:42:db:8a:eb:da:c6:52:bd:0c:44:e5:45:80:21:
ef:a3:b6:ba:40:c6:2d:14:1a:aa:3b:93:9b:fd:9a:3e:2b:d9:
e9:9f:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:41:01 2025 by rpki-client