Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/shvxydy1wqkYblqfJkiOJglUZxQ.roa
File: shvxydy1wqkYblqfJkiOJglUZxQ.roa (raw, json)
Hash identifier: 2woFfahFYvKJBYwFcDqBKSGYCuq1sLm8+NLZSK1CVOg=
Subject key identifier: B2:1B:F1:C9:DC:B5:C2:A9:18:6E:5A:9F:26:48:8E:26:09:54:67:14
Certificate issuer: /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial: 0DAF3A36
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/shvxydy1wqkYblqfJkiOJglUZxQ.roa
Signing time: Sat 01 Jan 2022 09:57:55 +0000
ROA not before: Sat 01 Jan 2022 09:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205982
IP address blocks: 185.200.108.0/24 maxlen: 32
185.200.108.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229587510 (0xdaf3a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
Validity
Not Before: Jan 1 09:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b21bf1c9dcb5c2a9186e5a9f26488e2609546714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:11:90:49:3b:b0:9c:36:7b:a2:87:bd:33:
16:38:98:68:66:52:f9:e1:e4:41:d3:4c:44:19:02:
80:02:77:1b:c8:b0:72:4d:9c:f0:9e:f4:14:34:ab:
2f:f7:dd:74:ff:a7:7b:72:42:f6:4c:59:e8:04:b5:
c4:0d:dd:65:09:d1:19:64:71:2f:bb:e7:3c:de:dd:
1c:87:4c:b1:aa:30:a3:1e:00:e1:64:75:3f:10:45:
35:a1:94:ba:1f:e5:ec:85:1f:c0:b9:92:50:95:1e:
ce:d1:0d:df:cf:db:45:e7:e8:c9:2d:1f:89:5e:0f:
dd:34:e2:34:3a:8e:cc:2d:87:0d:36:6d:b6:bd:d3:
1d:3d:29:61:4b:47:df:f6:28:a4:15:54:8d:34:b1:
1f:cb:6f:25:70:31:3c:14:48:33:07:7d:b2:7d:0b:
a2:a0:32:cd:38:3c:74:11:39:91:fc:18:8d:ff:ba:
56:f0:3e:9c:2f:65:fa:b9:24:b3:93:80:4d:96:f5:
a9:b1:99:35:b8:13:e3:65:6e:11:a2:2f:bf:55:7f:
4d:e4:33:2e:cc:35:3f:53:ee:60:d3:82:58:79:aa:
4c:25:0c:b6:c8:ae:53:17:73:98:bf:43:b1:1f:f0:
0c:41:a9:51:be:17:5c:53:cd:fb:fb:9d:2a:32:8e:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:F1:C9:DC:B5:C2:A9:18:6E:5A:9F:26:48:8E:26:09:54:67:14
X509v3 Authority Key Identifier:
keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/shvxydy1wqkYblqfJkiOJglUZxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:68:33:b1:22:9f:8e:f9:a6:dd:c1:c2:ca:ff:b4:09:45:76:
8e:9f:47:a8:b6:1a:7d:4c:7b:63:ea:5c:c5:a4:09:d5:cf:47:
97:96:d5:68:45:53:ee:96:24:38:45:31:27:a1:0c:44:0c:9f:
2e:27:e3:d5:ef:f0:56:98:d3:11:af:03:03:c7:d5:0d:cb:30:
89:ab:05:6f:9a:18:79:6e:df:a7:41:a5:eb:7d:07:63:93:59:
94:36:fb:24:54:75:c8:b6:e7:26:59:40:59:7a:8a:fd:36:90:
fb:0a:6f:87:c9:fc:3b:7b:e2:79:c7:7f:27:a1:06:3b:77:e1:
98:81:1b:a7:1f:9b:25:73:81:83:af:d8:d2:02:19:26:9d:95:
d4:cb:93:d9:0c:53:9e:28:d0:8b:d2:78:69:e4:13:9e:e7:ac:
d9:e3:59:44:0d:de:55:fb:5b:ff:83:12:f9:61:2a:38:d0:ae:
ae:a0:4b:3a:8f:9b:90:eb:00:61:3f:36:2f:f2:e8:78:ac:3d:
79:09:b0:7e:ed:f7:fa:a6:f7:3d:54:10:93:55:ca:00:b3:89:
28:73:c8:b1:e2:0c:f5:21:ac:e2:76:33:a8:ba:f0:b1:6c:a8:
87:26:8f:e2:44:d7:73:e4:57:7a:3e:a5:94:fb:ee:02:f0:59:
67:bc:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:09 2025 by rpki-client