Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/4HJ2tvwY5DmoYmq5EslgwMKN6JY.roa
File: 4HJ2tvwY5DmoYmq5EslgwMKN6JY.roa (raw, json)
Hash identifier: oYXxvWVAMWCjZhZO2X2nE3OqPnkl4hBvBGBY2mhDC08=
Subject key identifier: E0:72:76:B6:FC:18:E4:39:A8:62:6A:B9:12:C9:60:C0:C2:8D:E8:96
Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial: 06670396
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/4HJ2tvwY5DmoYmq5EslgwMKN6JY.roa
Signing time: Sat 01 Jan 2022 10:57:13 +0000
ROA not before: Sat 01 Jan 2022 10:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 185.171.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107414422 (0x6670396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Validity
Not Before: Jan 1 10:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e07276b6fc18e439a8626ab912c960c0c28de896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:4d:40:75:38:3b:3d:f3:3d:47:60:7a:67:
03:7e:24:bc:d3:47:dc:b8:e0:92:fc:71:a5:76:38:
72:fd:29:15:ba:70:b6:6c:eb:d0:04:0a:30:71:74:
9b:e3:a3:b8:24:d2:bb:28:0c:6e:93:6f:ec:c7:f4:
59:be:80:37:19:1b:50:57:f3:a3:b2:bc:ce:e2:89:
42:c1:15:be:30:e6:e0:8d:1e:1f:40:c0:14:72:36:
39:fd:a3:95:81:97:1b:74:5e:34:39:d2:2a:ea:8c:
8d:35:33:38:b4:56:8d:bc:11:73:2a:b7:94:57:64:
91:18:df:fb:9f:90:de:7b:11:d7:7d:be:35:1f:46:
9e:06:2a:22:50:43:38:58:bd:f0:0b:82:fa:99:3e:
bf:e3:22:2f:06:43:9e:37:f6:65:2e:d5:fe:55:39:
3b:e6:76:f5:53:d5:a7:c6:4d:6f:ac:f1:10:fc:39:
34:4f:20:5c:b7:3b:f5:5d:0c:e9:49:dd:5c:c6:94:
66:72:55:86:f4:d5:48:e7:2f:e9:9d:83:8a:9a:36:
c3:db:4c:ee:6d:70:9c:7b:18:40:44:19:fe:97:5c:
0e:b2:82:72:ca:66:ec:ec:54:3a:d5:a0:58:60:67:
f9:bc:43:fe:04:5e:b9:29:c5:24:42:71:18:33:2d:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:76:B6:FC:18:E4:39:A8:62:6A:B9:12:C9:60:C0:C2:8D:E8:96
X509v3 Authority Key Identifier:
keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/4HJ2tvwY5DmoYmq5EslgwMKN6JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.22.0/24
Signature Algorithm: sha256WithRSAEncryption
23:67:48:55:1e:36:a3:5b:fc:06:7b:46:78:7c:49:7a:92:7e:
65:d7:c3:52:0b:88:17:0c:f8:df:68:30:07:00:5b:e4:a8:62:
75:b8:f6:5a:b0:cc:53:97:c6:08:bf:9f:93:8a:82:62:66:87:
34:c9:2a:f0:29:cf:1c:43:d3:ea:dc:2b:ff:46:aa:38:a6:bb:
40:a9:23:14:a9:39:9b:61:d1:33:90:34:93:1c:5f:6d:7e:bd:
be:eb:24:1a:13:a4:c6:ce:e4:4e:ff:e2:a7:3e:d7:07:e2:20:
0f:23:29:2d:38:59:96:03:c2:42:c2:51:7a:02:83:8c:e1:0f:
e9:df:4c:07:be:fa:9e:70:d4:e0:9a:44:99:7b:79:1b:88:a4:
29:87:7e:8e:72:d7:20:58:ae:20:21:d9:5d:89:6e:ef:a3:de:
d8:de:cf:b8:d6:d9:01:5d:63:c9:1d:f5:47:d6:88:4d:1f:a6:
97:be:66:c7:95:e6:cd:3e:1b:3b:ea:c6:69:c2:b4:6d:26:0b:
7b:bd:f4:8e:bd:85:a2:9e:88:d9:4b:8c:82:b9:78:95:9d:2d:
56:f2:1d:a8:c8:38:23:bb:c9:57:83:bd:2c:ef:fa:fe:43:a9:
07:77:f3:f5:7d:f2:91:28:d4:ff:7b:f9:5e:a3:d5:9d:6e:ec:
bd:eb:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:43 2025 by rpki-client