Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/rFngbBl9LVlnE7BXRz5-l-sEzEc.roa
File: rFngbBl9LVlnE7BXRz5-l-sEzEc.roa (raw, json)
Hash identifier: LsLDUfODVx++S4Z+ZcBDsSxOrmLgzDceRz7vEWqK8aE=
Subject key identifier: AC:59:E0:6C:19:7D:2D:59:67:13:B0:57:47:3E:7E:97:EB:04:CC:47
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 01828C435F647CBF90C119B06CBEBDF27348
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/rFngbBl9LVlnE7BXRz5-l-sEzEc.roa
Signing time: Thu 11 Aug 2022 09:36:41 +0000
ROA not before: Thu 11 Aug 2022 09:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205215
IP address blocks: 185.218.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:43:5f:64:7c:bf:90:c1:19:b0:6c:be:bd:f2:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Aug 11 09:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac59e06c197d2d596713b057473e7e97eb04cc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:d7:82:3e:a3:0b:9d:b3:05:34:6d:b1:00:
b4:c9:e3:8d:04:87:ab:ab:23:17:c6:79:58:9d:d7:
e0:87:1b:72:f8:fc:9c:fe:1f:34:45:2c:a3:5d:91:
41:8f:71:6c:07:3f:d2:ca:64:d2:fb:50:1f:06:29:
8c:d8:e9:8a:a4:5a:45:69:29:56:08:8d:c6:89:43:
8c:46:3d:b6:1e:5e:81:38:a8:5b:7a:f0:67:72:29:
98:57:40:4b:53:c0:3d:e1:1d:98:f4:25:4f:60:a2:
5e:dc:a9:4f:dd:25:60:ae:0d:19:2c:aa:2c:fe:7c:
b2:d8:b9:f6:4c:7d:81:38:f7:28:17:35:57:0f:6d:
32:98:be:cf:88:43:d1:14:c7:47:1e:43:d7:5f:46:
83:c7:14:09:8c:e6:e9:22:65:d4:d0:20:a7:60:39:
02:c4:a4:59:86:04:69:ff:73:16:69:66:a9:0b:3e:
0d:79:36:d6:cf:41:b1:75:75:36:c2:92:22:f5:09:
50:f3:c6:be:0c:ee:25:8e:53:e8:49:07:3d:3b:bc:
af:55:55:d9:67:86:1e:ae:b7:6b:f8:e9:ec:96:92:
f0:9c:27:4e:e9:9f:af:0b:24:5f:71:1e:da:70:d0:
08:d9:03:00:59:01:38:90:38:e3:60:bc:c6:0b:9c:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:E0:6C:19:7D:2D:59:67:13:B0:57:47:3E:7E:97:EB:04:CC:47
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/rFngbBl9LVlnE7BXRz5-l-sEzEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:5c:c6:f8:cc:b5:ff:e1:f9:aa:31:60:e9:f4:f4:80:bc:02:
b9:1a:94:19:b7:c2:85:b6:86:f7:a0:83:e4:2b:91:28:da:15:
78:57:54:06:b5:4b:f3:1a:65:b0:b6:9a:53:b6:c6:86:d3:6f:
4b:dd:f3:94:91:0d:ac:65:59:1d:70:0d:5c:87:a7:78:4e:6e:
37:3b:26:67:69:9c:4e:8c:73:c8:ff:96:26:c1:07:c9:ce:68:
1d:39:72:02:01:27:0f:5a:64:f8:8e:4a:ed:25:15:d1:ea:39:
2a:72:5e:8a:cc:48:83:12:29:e1:3f:68:c7:fd:a5:ee:d6:02:
4d:e3:9f:ae:42:27:38:59:83:0f:0e:b6:f7:0f:67:44:77:5b:
13:4b:4f:b3:ef:65:f4:4d:89:f8:a0:6b:c0:2d:6a:84:6b:05:
50:ca:9a:22:48:47:9f:a3:39:d3:b3:11:f4:ea:14:25:ba:15:
a7:eb:17:d0:56:e5:7c:96:d4:a7:d0:9c:f2:bb:52:33:62:aa:
7d:3d:1e:55:ab:50:79:89:9d:56:a0:2f:97:f8:93:30:06:65:
60:d9:a1:2f:66:4e:78:c4:a4:56:43:b4:b9:47:f5:e4:2a:44:
30:78:2f:a3:fb:98:11:67:5c:82:65:09:fe:86:56:d0:57:ee:
6b:ac:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:41:35 2025 by rpki-client