Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/1pJCxEQ6kAneijsxkFavIktXA6w.roa
File: 1pJCxEQ6kAneijsxkFavIktXA6w.roa (raw, json)
Hash identifier: TQCErnQVsdPVE1oxznKe0ys9vw0fdoz1koQ/kuePxOw=
Subject key identifier: D6:92:42:C4:44:3A:90:09:DE:8A:3B:31:90:56:AF:22:4B:57:03:AC
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 0186E5E60FE6CA3EC0842BB87F8BC63E577F
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/1pJCxEQ6kAneijsxkFavIktXA6w.roa
Signing time: Wed 15 Mar 2023 15:31:45 +0000
ROA not before: Wed 15 Mar 2023 15:31:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.120.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:e6:0f:e6:ca:3e:c0:84:2b:b8:7f:8b:c6:3e:57:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Mar 15 15:31:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d69242c4443a9009de8a3b319056af224b5703ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:2c:c6:cf:be:ba:30:97:24:0f:08:d7:fb:
3c:8c:bb:1c:e2:4d:0d:78:20:f8:84:8e:74:40:9d:
a1:f9:26:57:a5:f1:5a:8d:f1:49:c0:cf:3c:b5:b0:
81:67:f2:24:0e:8b:68:82:3d:87:bf:62:4f:b1:df:
92:d7:f6:02:85:a1:5f:33:de:6d:6d:4c:5a:f2:07:
8a:8c:eb:6a:d3:c5:55:b0:bc:f5:8e:57:c4:c9:3a:
dc:68:b2:2e:69:a3:90:b8:45:51:3c:d1:ae:bd:60:
bb:b5:b4:ea:e1:97:1e:7e:44:7a:81:41:e5:fb:34:
ee:96:ae:b7:d4:e1:72:b5:92:fb:f1:25:b2:1f:33:
f6:bc:28:e8:0f:a3:2a:95:51:5a:cc:85:ca:ef:b4:
ff:a8:5a:21:68:02:14:62:8a:15:3f:fe:5a:45:e8:
6e:3a:b1:34:38:0c:e8:87:89:0e:87:fd:1b:d3:b6:
60:9b:ec:2e:72:8d:b6:d7:f1:36:1a:dc:29:1a:e0:
44:a2:6a:02:4e:7a:01:ad:99:74:c2:92:7b:20:5a:
6d:58:47:57:46:cf:13:43:97:8b:fd:33:49:5f:bf:
3e:64:6b:a4:f0:31:83:77:19:a6:a2:af:bb:ea:8a:
f3:54:a1:3f:18:14:21:21:50:d9:ca:7a:c2:c4:1a:
5a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:42:C4:44:3A:90:09:DE:8A:3B:31:90:56:AF:22:4B:57:03:AC
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/1pJCxEQ6kAneijsxkFavIktXA6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.92.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:2b:61:2b:8f:89:38:79:8c:1f:13:a4:38:43:f0:a0:26:01:
af:18:d1:68:a5:c8:5a:a4:15:6d:4f:0a:b7:59:0a:1c:d9:e2:
10:08:6c:1f:21:43:6d:ff:45:66:4e:0e:62:7a:8c:51:19:7b:
6b:2e:8b:94:d3:7f:bd:8a:27:c3:92:1f:41:24:c5:e0:17:74:
d3:54:3b:5a:66:bd:1d:ac:8f:1c:1b:11:aa:8b:53:ba:03:21:
24:55:85:00:56:1d:1d:bf:a7:a0:df:d3:f1:b8:b2:cc:07:9c:
21:ee:df:e2:6f:fd:cf:03:fc:a3:ad:9c:5f:86:d4:8c:25:70:
9a:9d:3c:e7:18:cc:0e:e1:07:5b:5c:49:fd:cb:c2:d4:a5:5b:
da:08:0f:80:86:42:8a:71:17:8e:07:69:6f:18:b9:e7:6e:b3:
64:88:f7:d1:9b:eb:03:7c:03:e3:93:c6:b9:6b:bb:91:5c:70:
47:dd:1a:04:10:bf:8a:d4:62:49:7b:0f:1d:d3:77:36:13:55:
a4:b6:06:4f:97:10:f8:3d:8c:0a:1e:30:07:dd:9e:5f:ea:37:
0a:45:a3:21:a1:50:16:8a:fe:b3:29:4d:d8:82:7e:28:58:60:
de:b1:80:d8:34:7a:8b:28:6d:c4:1e:ef:0d:90:a3:6b:e8:a2:
2b:de:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:12 2025 by rpki-client