Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/ASilK54ok1FHqADYwFojULL5REc.roa
File: ASilK54ok1FHqADYwFojULL5REc.roa (raw, json)
Hash identifier: Xfx+2hxZ7iD/AKWW6W7iYXCSU/2HF8DcE9UDZpRGXEk=
Subject key identifier: 01:28:A5:2B:9E:28:93:51:47:A8:00:D8:C0:5A:23:50:B2:F9:44:47
Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial: 01838826DD95731EA070FE9F98BAFC22DD59
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/ASilK54ok1FHqADYwFojULL5REc.roa
Signing time: Thu 29 Sep 2022 07:29:51 +0000
ROA not before: Thu 29 Sep 2022 07:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 185.171.22.0/24 maxlen: 24
185.171.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:26:dd:95:73:1e:a0:70:fe:9f:98:ba:fc:22:dd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Validity
Not Before: Sep 29 07:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0128a52b9e28935147a800d8c05a2350b2f94447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:ff:98:be:69:91:17:09:85:5a:86:ad:63:
3c:c0:a8:1a:81:b0:96:59:33:35:ed:54:30:09:12:
2d:81:ef:c5:b0:e5:d3:30:b2:ea:bf:01:b3:3d:fa:
73:e2:03:21:96:f7:6c:04:a3:7a:ae:ff:f3:4f:d1:
df:dc:50:52:e0:62:b1:aa:ff:82:19:27:70:04:22:
d7:fc:63:7d:fc:2e:7b:f0:09:43:89:2e:a0:38:cf:
eb:79:48:dd:74:d3:aa:5d:f2:6e:1b:21:63:36:34:
fe:95:8b:fe:52:48:9e:ec:cc:46:bc:de:04:71:81:
0d:6b:e6:cc:71:1f:51:ca:45:ee:8c:c0:ba:d4:8b:
6b:f2:b5:62:75:c8:96:4c:3d:4e:e9:51:d2:a1:f1:
06:e2:7a:49:45:8c:23:da:c3:2e:63:5b:1e:36:64:
2d:6d:af:6c:ef:18:c0:72:2a:33:0a:8e:84:99:fd:
f1:50:72:c1:b8:4e:b0:79:2b:ea:45:13:2c:af:a5:
f4:9a:a4:ae:43:61:16:6a:56:f2:55:1b:bd:d9:d8:
50:c7:dc:17:4d:f0:2a:1e:ce:a3:02:01:eb:56:6c:
6f:6a:3a:d4:01:01:c1:78:09:dc:6b:54:ef:4a:47:
86:7c:4b:1b:28:18:bb:f3:c5:9d:9f:6c:ce:bd:46:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:A5:2B:9E:28:93:51:47:A8:00:D8:C0:5A:23:50:B2:F9:44:47
X509v3 Authority Key Identifier:
keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/ASilK54ok1FHqADYwFojULL5REc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.22.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:35:37:90:24:b4:96:11:37:0c:bb:d1:e3:2d:dc:0d:b9:04:
a3:ea:15:53:93:71:e2:09:af:bb:50:a8:37:f6:14:55:67:0c:
d2:9a:69:5d:7a:be:5e:b0:f5:39:7e:e9:0c:79:54:8b:95:b5:
ae:7e:47:40:78:f3:c8:ce:e3:18:29:ca:b1:66:81:3d:16:b2:
e8:fd:47:82:ce:8d:da:29:b1:15:74:ff:8a:51:15:4f:95:9c:
38:0a:56:a9:3b:34:83:c9:00:b3:ef:d4:d8:19:42:3e:b2:46:
8d:06:ec:ce:f7:83:f2:c2:16:01:d7:13:16:50:76:85:67:18:
fb:db:a1:6c:28:71:75:d0:ce:d9:74:1e:d0:ae:b4:c7:15:56:
05:bc:c6:22:22:d9:73:f3:59:ec:56:bb:5d:0c:1f:98:30:74:
bf:db:25:35:0e:8b:c6:61:86:da:74:fe:51:8e:58:ab:5a:dc:
f2:9e:a6:10:37:4e:6f:f6:12:26:d5:b1:73:51:04:c5:21:db:
65:ba:49:9e:33:d3:0d:18:ca:96:7a:1b:5b:3e:ce:4a:cb:f6:
99:2c:e0:53:da:5f:11:6b:ed:5c:ba:83:58:ce:24:78:5e:81:
9f:9c:d2:81:7c:09:77:d7:09:86:52:b5:b1:3a:8e:42:86:4f:
b4:b7:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:21 2025 by rpki-client