Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/8eKmzLeD6JOTfrwLIaltJgrEXdQ.roa
File: 8eKmzLeD6JOTfrwLIaltJgrEXdQ.roa (raw, json)
Hash identifier: esMlzXcX+ItiF13wVHkCQf6BeHKmFCF9bmtEVZ4BKz0=
Subject key identifier: F1:E2:A6:CC:B7:83:E8:93:93:7E:BC:0B:21:A9:6D:26:0A:C4:5D:D4
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 06B797AA
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/8eKmzLeD6JOTfrwLIaltJgrEXdQ.roa
Signing time: Sat 01 Jan 2022 12:57:04 +0000
ROA not before: Sat 01 Jan 2022 12:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56911
IP address blocks: 185.153.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112695210 (0x6b797aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Jan 1 12:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1e2a6ccb783e893937ebc0b21a96d260ac45dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4e:f1:c9:97:c2:92:bf:c0:f5:54:cc:28:b0:
82:48:72:6e:35:37:40:67:2f:de:06:81:49:fd:4f:
73:77:a1:e6:e9:df:29:27:92:c0:98:92:07:d9:6f:
c1:a8:82:fc:19:9d:66:96:84:f6:f4:b6:09:42:98:
27:18:5f:d4:70:10:a9:6b:7f:b5:7b:1f:67:04:85:
11:29:2b:a8:26:7e:e0:8f:2f:50:8c:c0:dc:50:b3:
ec:f2:95:e2:3b:e9:85:20:18:97:ed:30:00:7c:a7:
1a:76:ba:be:71:04:ad:7c:af:28:c7:10:cd:d7:16:
6b:88:d4:e1:d4:7c:1e:5b:9b:cc:2a:e8:86:b4:e0:
5b:46:4b:f8:7e:f5:c3:21:0f:6c:dc:ac:4e:14:6f:
45:e3:11:77:e0:64:29:c9:d6:71:81:89:48:87:50:
b2:ee:b5:3a:09:e5:d2:85:5f:bd:3a:32:6a:5f:42:
5c:a6:0f:dd:4f:c0:c4:51:75:39:de:81:c9:d2:cb:
73:25:f0:53:20:9f:1b:ba:be:59:7b:3a:82:ec:26:
77:17:ef:63:b3:c3:cb:c3:e8:48:a2:19:11:99:af:
75:a1:81:37:48:49:5d:80:d7:f3:e1:c6:4c:b7:ce:
db:44:8f:0d:01:2a:97:23:c3:d4:44:23:3c:c1:8c:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:A6:CC:B7:83:E8:93:93:7E:BC:0B:21:A9:6D:26:0A:C4:5D:D4
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/8eKmzLeD6JOTfrwLIaltJgrEXdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:ba:55:06:53:ec:08:5c:ab:80:75:bf:bc:bf:24:bd:57:35:
b3:2e:a2:9d:48:e8:ba:44:aa:55:55:69:86:ff:3a:10:0e:34:
4a:b3:a1:b5:0c:5d:c6:ce:78:71:05:1b:d3:68:69:77:21:d3:
59:23:46:5b:8a:72:2e:3d:2f:f6:f5:71:f9:32:72:2d:77:33:
3f:a3:9b:0a:0c:78:24:ab:32:15:b5:88:39:af:f1:8a:3e:b3:
48:cf:36:43:61:1f:bb:60:5b:7d:46:95:ae:20:fd:38:d9:0d:
89:46:87:ef:a4:e9:73:12:c5:2c:ba:a7:b8:f8:1d:3e:c8:a8:
66:10:76:de:d1:33:41:bc:cc:c7:2e:a8:16:c6:fb:f7:11:91:
b8:b1:ce:7e:38:ec:a2:96:b6:d0:ea:67:38:98:6c:02:fd:1c:
0d:aa:cf:0e:e8:21:bf:10:47:46:f9:b0:46:69:ec:1e:3a:f2:
d1:dd:82:8d:7e:49:6e:ee:8e:ca:24:67:2e:5d:de:f2:b0:70:
6b:de:9d:9f:77:c2:bc:b2:9c:17:47:a3:b0:5a:88:6e:56:40:
68:e8:03:39:36:b0:1e:24:8e:3f:9d:dd:59:b4:94:65:af:b7:
e1:39:a4:bf:f1:ec:50:f7:70:05:8c:d5:3a:75:52:5a:3b:6b:
30:2d:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:13 2025 by rpki-client