Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/07vEs3VpP7Vj8czhHgI2DWY6KF8.roa
File: 07vEs3VpP7Vj8czhHgI2DWY6KF8.roa (raw, json)
Hash identifier: tn40tWf07p5j8Qi3J1XQUM8KhOJk9vQYR83CihuzfGo=
Subject key identifier: D3:BB:C4:B3:75:69:3F:B5:63:F1:CC:E1:1E:02:36:0D:66:3A:28:5F
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 037719DC
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/07vEs3VpP7Vj8czhHgI2DWY6KF8.roa
Signing time: Sat 01 Jan 2022 08:53:17 +0000
ROA not before: Sat 01 Jan 2022 08:53:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205428
IP address blocks: 185.216.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58137052 (0x37719dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Jan 1 08:53:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3bbc4b375693fb563f1cce11e02360d663a285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:02:df:9b:db:85:60:30:b8:24:7d:d8:78:
cf:c0:5b:1b:4f:93:23:ea:d5:ee:c9:6c:37:1b:8d:
7b:12:f9:e7:54:e2:64:04:8f:d5:f8:f4:98:fe:1b:
90:26:c3:56:aa:1f:1f:67:b5:fe:98:cb:3a:65:42:
87:03:35:13:05:2d:0b:d6:78:5f:13:c2:9a:bc:1c:
87:28:36:cb:d1:54:a7:41:14:61:81:da:37:aa:df:
76:b0:e2:86:06:bf:69:85:11:da:b9:c8:ac:e3:e3:
70:ed:2e:b4:28:99:9b:d3:6e:5c:73:c7:07:fb:f7:
46:ea:c5:f0:07:a0:8e:38:3c:28:32:7a:1c:71:04:
76:32:30:cb:25:89:a1:b6:75:ec:c9:14:d0:23:11:
de:d5:a6:1f:38:e6:e9:5f:18:72:29:db:70:15:3a:
63:f4:73:40:4d:a8:aa:84:b9:e8:7a:58:b8:f0:58:
0e:f4:54:ae:1b:0a:5f:31:bd:39:0a:30:1f:cb:ba:
87:b7:98:6b:bc:95:6e:8c:93:6f:45:23:71:de:ff:
30:09:26:37:f7:3a:c3:1f:a0:b0:39:82:51:89:bd:
ad:28:a1:11:c7:79:77:01:f7:38:11:48:19:8f:c3:
41:b7:0b:46:ca:13:08:bc:de:a8:a6:9c:db:e2:60:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:C4:B3:75:69:3F:B5:63:F1:CC:E1:1E:02:36:0D:66:3A:28:5F
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/07vEs3VpP7Vj8czhHgI2DWY6KF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.164.0/22
Signature Algorithm: sha256WithRSAEncryption
72:17:d0:da:51:11:37:ed:f3:08:70:d0:a5:fe:fa:36:52:49:
48:a5:1d:39:3b:6b:15:6d:5f:09:9a:16:5e:78:49:fd:18:26:
4a:f5:7b:49:3a:5b:da:74:f1:d8:d8:7a:ad:04:db:14:40:90:
93:2e:c3:5b:a1:0f:9d:cc:08:6b:75:58:1e:33:85:4f:12:10:
13:6d:35:c5:d0:2d:e7:03:a1:ef:ff:7e:c1:df:ec:35:42:fa:
8c:26:4e:d3:f1:a1:15:f4:52:76:12:03:4f:2a:31:60:c6:f5:
c4:b7:5c:ac:b8:f9:72:b8:f2:29:66:c5:60:cf:00:49:cc:3e:
77:5c:34:ed:71:25:91:76:9f:8c:1e:77:78:4c:6b:d6:b0:a6:
fa:37:69:ab:df:d6:e8:7e:6a:dc:fe:67:74:89:b8:fe:9f:22:
10:5e:07:99:b4:e8:12:27:6f:88:84:df:30:85:03:47:50:34:
12:fe:1f:7a:f5:ae:8b:1c:45:5c:34:89:05:b8:10:3e:54:03:
94:42:a4:36:ba:1d:4f:10:84:5b:e1:9b:e9:c8:ff:35:50:8b:
29:be:de:60:8f:9d:2d:f4:c5:91:d1:62:9b:84:33:97:33:be:
73:35:58:ba:2d:20:6d:ed:6d:14:a0:e8:e9:05:bf:ae:0a:63:
15:da:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:43 2025 by rpki-client