Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/hidPvgHinTQ6lN1wb37pGzzDnvU.roa
File: hidPvgHinTQ6lN1wb37pGzzDnvU.roa (raw, json)
Hash identifier: SQ85OJfP8n9glpJrjVTfcCHfkUYT6tA2HgqLs0kFoHA=
Subject key identifier: 86:27:4F:BE:01:E2:9D:34:3A:94:DD:70:6F:7E:E9:1B:3C:C3:9E:F5
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 018215EFBFB3FD1F553743098141A6DC817F
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/hidPvgHinTQ6lN1wb37pGzzDnvU.roa
Signing time: Tue 19 Jul 2022 10:10:09 +0000
ROA not before: Tue 19 Jul 2022 10:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3225
IP address blocks: 185.75.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:ef:bf:b3:fd:1f:55:37:43:09:81:41:a6:dc:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Jul 19 10:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86274fbe01e29d343a94dd706f7ee91b3cc39ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:52:63:93:cd:bd:da:5e:ae:6e:3f:78:12:
f5:ab:24:69:63:cc:64:ac:0b:bc:b9:ee:a5:2d:fa:
01:77:a6:8b:3e:f7:4e:a9:6b:68:8b:88:3b:40:5a:
ee:9e:83:d1:96:2d:98:fb:44:42:5a:a1:4a:8d:9e:
6f:9e:32:cb:ff:c7:9a:94:5f:3b:61:31:31:b4:b0:
af:bf:68:04:0b:77:af:87:5d:5f:e1:4c:7b:bb:28:
16:e0:bd:e7:60:53:0b:ac:eb:b6:ff:ca:b0:d6:f7:
b7:81:92:dc:d0:40:d6:c1:87:b6:5c:81:07:64:50:
c2:1b:d7:63:e2:a9:5f:f3:af:f1:90:f6:da:25:ea:
e6:6e:4e:37:75:d2:52:14:32:88:06:dd:61:5b:5a:
73:06:b4:d0:83:fa:55:59:43:bf:c0:84:1c:26:f7:
9d:d8:f1:fa:14:b2:27:5b:2c:df:93:4b:65:47:10:
2a:59:f3:33:af:e7:0a:36:62:47:ec:69:33:90:07:
20:ad:1e:40:14:27:6b:23:73:49:cf:ef:fa:82:31:
8c:78:10:77:67:ed:c4:bb:23:b6:24:93:f3:8a:c3:
f3:09:cb:6c:53:f9:b2:cb:e9:0e:c6:29:5e:26:cb:
a2:61:bf:32:a6:4a:51:63:f9:d7:00:2a:14:7d:b5:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:27:4F:BE:01:E2:9D:34:3A:94:DD:70:6F:7E:E9:1B:3C:C3:9E:F5
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/hidPvgHinTQ6lN1wb37pGzzDnvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:25:cb:d6:2d:e5:c0:12:78:22:48:99:ab:cd:89:02:e8:09:
4e:f0:b9:7a:10:ab:31:5c:df:25:7c:9d:87:4d:25:de:b5:f7:
87:cc:89:d5:38:e7:d5:e9:d5:0f:4d:53:7b:75:56:73:ee:73:
6c:7c:19:79:75:08:a0:a5:bc:23:a2:28:4f:44:6e:35:46:01:
51:75:5a:f7:c7:b8:1e:be:f6:6b:f3:4b:4a:72:c8:5c:ef:67:
79:b8:50:58:42:03:7f:d2:9c:13:2c:ac:63:7d:a5:27:73:e4:
0d:78:14:53:48:d5:96:89:01:99:6c:22:1c:a4:a4:77:28:1f:
21:1a:61:04:c8:b4:6d:f5:8f:9a:39:a2:63:ae:d1:62:84:ba:
03:cf:58:bf:ca:c7:58:d4:ab:15:ac:c8:4e:18:38:ae:04:43:
7f:08:aa:6a:52:be:7d:52:92:81:66:f8:ba:b2:40:79:1b:fc:
31:e1:a8:6c:e1:60:83:dd:06:d3:a2:e1:44:f0:bd:e6:f3:b1:
fd:2b:85:de:b1:1e:bf:be:36:a1:0e:7f:5f:2d:fa:83:a2:7e:
b7:26:98:e2:78:a9:6a:a5:e6:e2:ff:79:60:50:65:89:5e:0d:
7c:e5:ab:07:33:41:a6:85:ab:37:c1:8d:df:d9:be:39:83:0c:
6c:e9:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:27 2025 by rpki-client