Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/pMEKag-Kvv2JgbOjHsRsdHaTtMQ.roa
File: pMEKag-Kvv2JgbOjHsRsdHaTtMQ.roa (raw, json)
Hash identifier: vNGgpnrXb8O64j56OA7OsUNobbo4fKrsC083Tc4v5rs=
Subject key identifier: A4:C1:0A:6A:0F:8A:BE:FD:89:81:B3:A3:1E:C4:6C:74:76:93:B4:C4
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 10AE4CAC
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/pMEKag-Kvv2JgbOjHsRsdHaTtMQ.roa
Signing time: Sat 01 Jan 2022 01:50:48 +0000
ROA not before: Sat 01 Jan 2022 01:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202125
IP address blocks: 188.119.104.0/22 maxlen: 24
185.50.204.0/23 maxlen: 23
185.50.206.0/23 maxlen: 24
193.43.74.0/24 maxlen: 24
185.247.165.0/24 maxlen: 24
185.247.164.0/24 maxlen: 24
185.247.166.0/24 maxlen: 24
185.247.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279858348 (0x10ae4cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 1 01:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4c10a6a0f8abefd8981b3a31ec46c747693b4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:89:80:bb:b1:57:ca:19:e5:08:b3:25:61:
f5:fa:bf:99:e9:1a:20:3d:3a:06:91:6a:45:42:fd:
bc:f4:22:ca:cd:fa:ad:dd:7b:b8:e7:92:8f:cc:3b:
f8:c5:ff:92:c8:9f:1b:40:b9:be:e4:1e:ea:d9:27:
76:59:0b:6a:93:81:99:93:00:44:6e:0c:9e:74:10:
ec:e5:d0:cd:0b:59:48:7c:35:8a:75:cf:98:35:c1:
d8:b7:f8:8e:66:a5:3b:c0:5a:e5:32:ac:ee:55:60:
4d:66:9c:44:6c:4f:81:6a:86:87:f7:e4:f8:19:c4:
ff:ce:cd:f0:a2:1f:f9:40:62:f5:47:ec:c7:35:30:
91:7a:79:3b:0f:70:6b:0e:b4:bb:94:8d:2c:f5:a9:
02:aa:42:2e:54:ca:9f:19:35:76:20:3a:f2:96:53:
76:ab:78:8f:40:cf:3c:3b:ba:65:5b:9b:f1:ad:fd:
9b:d8:a1:42:86:5b:bb:83:bf:5d:14:a6:e7:cf:fc:
5d:33:9b:f0:3e:00:d6:b7:2c:a9:26:63:8e:d3:3b:
b0:2f:d5:0d:11:69:b5:5a:1e:de:a1:e7:de:23:cc:
82:71:a4:aa:fc:04:fc:66:56:d4:33:4d:c3:6d:8a:
e5:aa:bc:c4:08:67:8b:bc:44:f6:78:b3:58:5c:40:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C1:0A:6A:0F:8A:BE:FD:89:81:B3:A3:1E:C4:6C:74:76:93:B4:C4
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/pMEKag-Kvv2JgbOjHsRsdHaTtMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.204.0/22
185.247.164.0/22
188.119.104.0/22
193.43.74.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b1:d7:a9:66:4f:bb:95:7f:2f:21:70:c8:2f:ec:58:d2:1e:
a2:36:3a:b2:f9:9c:ee:f8:54:dd:25:a0:80:41:f6:75:bd:06:
a1:c3:02:8e:7f:01:94:52:c8:a3:8e:c6:63:ce:bf:01:90:43:
08:d4:bb:67:bb:94:56:3a:35:38:4f:ac:45:a1:48:4a:d9:df:
d8:53:ed:21:00:fd:07:ee:06:b4:1e:bf:38:37:e1:d1:67:58:
38:5e:62:3e:a6:0f:66:bf:85:c9:43:c2:6e:9f:16:33:84:21:
57:4b:00:ec:05:ae:1d:f8:ae:5b:46:6d:00:04:b1:62:7e:17:
8d:67:94:4f:fe:25:df:3f:6c:da:c3:0d:d3:0d:06:88:e5:62:
5d:73:1b:a8:70:88:f8:16:00:61:06:8b:65:b5:c4:c6:00:48:
7f:c4:89:38:57:cf:cf:f5:cd:f2:1e:ba:43:a9:99:78:44:b1:
59:87:ef:ba:41:ce:e1:a0:81:33:39:c7:ba:8b:f0:06:b8:e9:
2e:29:f7:27:75:ba:bd:d0:73:ff:c3:60:bf:ea:57:64:eb:3c:
c5:4b:95:e0:1a:6f:1a:80:ba:c8:63:d0:c9:d5:8e:eb:83:d6:
e6:ad:d9:6f:81:6b:7e:fb:4f:aa:d3:70:8a:12:94:54:e1:27:
6b:8a:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:51:35 2025 by rpki-client