Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/kp7IJiLfvSHLyk2VV1UQ_3V0M20.roa
File: kp7IJiLfvSHLyk2VV1UQ_3V0M20.roa (raw, json)
Hash identifier: cOQZciYHFkm+i6LsFVtVrRRsgXdif6EOBLL4sghVkZ8=
Subject key identifier: 92:9E:C8:26:22:DF:BD:21:CB:CA:4D:95:57:55:10:FF:75:74:33:6D
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 01857283434A1F37D4ADCE5AA5B2837E938F
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/kp7IJiLfvSHLyk2VV1UQ_3V0M20.roa
Signing time: Mon 02 Jan 2023 12:44:43 +0000
ROA not before: Mon 02 Jan 2023 12:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205854
IP address blocks: 185.185.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:43:4a:1f:37:d4:ad:ce:5a:a5:b2:83:7e:93:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jan 2 12:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=929ec82622dfbd21cbca4d95575510ff7574336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:b2:1a:6a:d2:f3:86:f4:6b:b1:f1:3c:ab:
c9:58:f2:7a:4b:00:2c:b1:d7:89:71:f9:c6:47:ce:
21:3e:27:cc:0c:a9:28:0f:e1:48:d1:41:06:4d:ba:
db:3d:06:e6:26:f0:35:d8:f2:8a:1f:e1:7f:39:1b:
b3:ee:87:38:c2:b0:35:d1:96:1c:c2:da:8e:29:0f:
ac:62:d7:02:bf:40:f4:3e:e4:80:f7:85:2c:b3:27:
7a:f0:25:03:f8:e5:42:57:2f:ef:88:99:60:99:ae:
20:8c:20:b6:a4:39:49:14:78:75:35:4e:df:20:cf:
5d:e5:a1:3b:1f:98:85:60:50:30:47:46:92:18:3b:
d5:f7:d5:2e:fb:f7:20:23:17:45:8e:3e:b1:06:35:
13:b3:b5:b3:66:eb:2b:07:19:f4:29:91:50:fb:86:
ae:21:6a:c3:57:18:1b:3b:a3:bc:40:42:20:06:f7:
fb:c0:69:e7:5c:67:75:ca:d8:4c:6d:03:8f:a3:0d:
45:ea:d4:79:b6:5b:0c:01:18:9c:a7:82:e9:60:9b:
d2:d8:de:e9:81:86:46:86:93:32:2f:d2:38:7b:ee:
b4:5e:de:71:fc:1a:ab:17:81:b3:f1:cb:ba:0d:d2:
1e:4d:77:44:e2:1f:9f:ce:f0:6f:ee:7b:09:cf:da:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9E:C8:26:22:DF:BD:21:CB:CA:4D:95:57:55:10:FF:75:74:33:6D
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/kp7IJiLfvSHLyk2VV1UQ_3V0M20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:fc:3b:6b:9f:08:e6:d5:c8:38:64:7c:cc:44:7b:3c:89:90:
91:2c:55:05:9f:9e:da:5d:5c:96:10:b6:ad:d0:57:70:89:2e:
f6:fa:22:39:1a:0e:16:24:38:e5:51:0b:4f:a4:27:dc:8e:0e:
07:92:1a:0f:5e:51:5e:5a:6e:57:c9:a7:57:f4:47:0e:f2:9d:
b8:69:24:8e:83:d7:d3:5c:f3:ce:ab:4c:19:e5:69:30:97:d4:
13:26:39:23:2e:ee:fe:84:b3:61:26:ca:0c:fb:bc:f1:5b:ae:
13:17:37:15:5e:02:2e:33:0f:d1:71:9c:a1:50:78:27:a8:97:
a9:b1:7b:d6:0e:f0:0a:30:4c:9f:9e:74:a3:7d:61:fe:79:4e:
d0:3e:31:7b:9f:08:34:09:b4:13:d0:13:37:5b:6f:51:f9:0b:
e6:6f:6a:55:78:3b:bc:3e:88:3f:79:ed:6f:82:c8:72:a2:62:
95:74:9a:97:77:2c:cf:20:ac:f7:f3:53:0d:eb:ac:b7:18:34:
30:97:16:d1:ba:27:d1:dd:64:57:72:26:3f:f1:fc:a2:9d:86:
22:ac:85:c0:e5:ea:a8:4b:69:84:00:af:34:c2:1e:e6:97:50:
f0:7b:d7:ab:9e:23:41:e3:1d:2e:c5:1f:08:91:48:68:72:63:
18:56:a5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:39 2025 by rpki-client