Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/3JPq1hIDr1GTX2R_s3Y2nBK-dTM.roa
File: 3JPq1hIDr1GTX2R_s3Y2nBK-dTM.roa (raw, json)
Hash identifier: AHiLtoIx0itNMAaMbLDLwBAQhDXI0vvV3jLFDQ4aQP8=
Subject key identifier: DC:93:EA:D6:12:03:AF:51:93:5F:64:7F:B3:76:36:9C:12:BE:75:33
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 01856C4A4F66190F9A1C08B94EFFCC4DB384
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/3JPq1hIDr1GTX2R_s3Y2nBK-dTM.roa
Signing time: Sun 01 Jan 2023 07:44:47 +0000
ROA not before: Sun 01 Jan 2023 07:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1241
IP address blocks: 185.247.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4f:66:19:0f:9a:1c:08:b9:4e:ff:cc:4d:b3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jan 1 07:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc93ead61203af51935f647fb376369c12be7533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:8e:64:e3:9c:67:d4:d1:68:5c:31:20:3c:
b5:f2:7f:31:c1:a1:18:86:68:8b:57:3e:13:f7:46:
58:78:69:41:0f:cd:f1:7e:6f:71:19:0c:56:8f:4f:
57:fe:6c:1a:70:dd:82:ca:ef:53:09:00:95:03:ae:
8b:1e:02:db:f7:aa:c2:d4:88:1f:e6:99:1f:c3:a7:
81:01:02:5e:ae:b9:d5:88:98:80:e2:9f:5e:42:84:
a5:61:1d:00:94:84:38:c6:ae:77:74:41:01:0e:d0:
19:af:b1:83:9f:33:b0:46:de:0e:0e:13:ff:61:e4:
11:ea:7e:ad:3d:94:df:05:9d:76:dc:b9:90:63:f9:
cd:46:44:fd:17:95:6b:43:61:f1:0c:a1:3b:f8:62:
94:60:84:70:d4:24:57:c4:08:4f:64:72:5c:51:9c:
a4:e9:78:a0:1f:c3:8d:c6:8c:a8:f7:82:20:0a:e3:
e8:7b:98:8a:74:0c:84:a0:3c:58:81:f0:ae:4a:e9:
52:9b:91:6f:59:3f:b7:3f:08:4f:65:16:6b:b3:2e:
2d:6b:29:6e:0b:eb:8f:f1:3e:ed:e7:00:b4:00:93:
ae:73:2e:6b:32:ec:4d:c2:a1:a2:f7:a5:bc:9a:09:
c8:f1:65:49:47:4c:cf:dc:46:dc:99:20:02:a5:9b:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:EA:D6:12:03:AF:51:93:5F:64:7F:B3:76:36:9C:12:BE:75:33
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/3JPq1hIDr1GTX2R_s3Y2nBK-dTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
38:79:25:2e:25:88:56:7b:71:ff:29:2f:aa:a2:c4:27:5d:b9:
d9:0e:bc:ee:e6:29:f5:54:38:15:f1:11:8a:ee:95:c1:55:8b:
f7:66:54:b7:53:63:87:d6:58:b3:04:15:cc:02:51:23:4e:73:
62:10:10:ba:54:d0:06:94:53:55:77:d3:3f:3c:a5:b0:95:61:
0c:6b:8c:05:10:9c:76:b7:53:e6:20:fe:c1:71:74:61:31:1b:
76:e9:4d:bf:8b:56:da:e7:6d:a7:4b:b6:52:3e:22:b6:b6:ab:
76:59:67:7e:3b:9a:62:f0:06:c2:3f:94:5f:1b:15:29:54:f5:
ad:5b:7c:74:75:b3:ad:19:5c:97:6f:60:fe:7e:dc:3f:00:6e:
bb:53:09:87:69:ff:bc:77:d9:95:b6:b5:71:8b:fe:38:7b:6d:
f3:85:b0:d7:e3:dc:0b:7f:08:3a:12:c8:18:46:51:40:30:43:
9e:ae:ef:17:25:c1:56:10:6f:e9:05:b0:1a:de:74:8b:21:55:
5d:56:c0:c3:2e:db:a2:da:ca:3f:fe:ee:8e:a4:cc:e9:7f:08:
31:cd:c1:39:4a:92:73:09:17:6f:a0:cc:2f:15:2e:82:c9:90:
34:0e:c4:3a:2b:7a:f2:3e:e5:b6:f4:f2:b4:50:24:cc:18:21:
06:dc:7e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:15 2025 by rpki-client