Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/CPx7xSnM3ehAQarsiKSGbZEMTjA.roa
File: CPx7xSnM3ehAQarsiKSGbZEMTjA.roa (raw, json)
Hash identifier: Pom3dO7kaWFm3xDDoKH1yeoHVuL5Pze5M5b6sliBogw=
Subject key identifier: 08:FC:7B:C5:29:CC:DD:E8:40:41:AA:EC:88:A4:86:6D:91:0C:4E:30
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 1365498D
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/CPx7xSnM3ehAQarsiKSGbZEMTjA.roa
Signing time: Sat 01 Jan 2022 09:54:52 +0000
ROA not before: Sat 01 Jan 2022 09:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8966
IP address blocks: 185.120.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325405069 (0x1365498d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jan 1 09:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08fc7bc529ccdde84041aaec88a4866d910c4e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:89:0a:5e:58:b6:4d:c2:02:5f:df:f3:c0:
b1:15:56:0a:d7:76:b2:7f:90:63:2b:9d:e0:f4:eb:
12:5c:3a:6c:b9:71:3a:15:0b:42:e2:91:c0:69:b2:
e1:c9:77:c9:b9:12:40:ba:01:b3:df:2d:eb:1f:7d:
d3:bc:21:2c:38:89:40:ad:42:93:77:80:43:af:07:
7d:2b:3e:4c:a5:c0:e9:fa:63:5c:95:0a:33:34:e2:
9f:90:33:22:bc:55:52:aa:4b:d0:f3:65:a7:e1:4a:
db:51:d5:e0:b5:eb:1c:52:28:18:92:1a:7b:c3:66:
84:d8:16:b6:16:2f:de:dd:93:01:48:9f:bc:e4:8d:
d0:80:99:17:2c:5c:da:ea:61:13:40:5f:6b:fe:93:
6b:d7:ec:e2:62:f4:56:31:d0:b0:6d:45:e4:88:a6:
52:c6:87:11:51:a3:86:0c:5d:d3:5e:47:21:6b:71:
0f:c5:0d:93:17:5f:a2:fc:e8:3b:02:f1:12:1e:90:
83:c1:15:b2:63:d0:ae:f9:2b:0c:8e:ac:de:4e:32:
9e:44:60:16:b3:1e:79:4a:5e:f5:3a:a1:eb:55:4b:
a0:4b:c9:a4:23:8d:fc:6f:ea:13:ba:81:fc:06:70:
ee:16:71:f5:bb:39:65:6a:2c:ad:d4:2d:c3:99:55:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FC:7B:C5:29:CC:DD:E8:40:41:AA:EC:88:A4:86:6D:91:0C:4E:30
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/CPx7xSnM3ehAQarsiKSGbZEMTjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.31.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f4:9e:47:c6:e9:be:a7:95:be:ee:49:c1:c3:d5:19:e6:ed:
99:82:fa:71:e5:be:2e:1c:36:0c:5d:b4:a2:2b:1d:ff:29:ab:
08:55:f8:af:fb:d0:6e:fa:99:31:de:39:0a:ae:a4:fc:b8:ce:
b6:fc:6e:c7:93:85:6b:81:c7:40:50:37:1a:61:6d:2a:90:dd:
62:4d:4c:ca:12:95:22:d8:65:12:33:03:76:cc:67:8a:b1:91:
49:6b:ea:0d:39:ed:58:d1:b7:f9:9d:03:27:e1:42:b1:a0:7a:
d4:77:c0:b3:68:b4:a0:17:05:d1:dd:f4:a8:a1:61:14:0f:ee:
e3:0a:9a:99:36:f6:b5:fc:69:1f:58:1b:89:ee:8a:09:27:61:
b4:f1:b1:27:c5:f2:c9:52:7e:af:3f:19:71:2a:04:33:80:5d:
60:40:f2:65:54:e0:a1:9c:e1:00:b9:6b:25:dc:4e:a6:f9:7a:
e8:79:f2:3b:5d:81:12:64:14:46:2c:40:92:3f:a1:3d:7b:b2:
7c:c7:5b:ff:57:55:63:59:ae:c9:ab:9c:57:05:37:79:a0:14:
04:3c:75:09:9e:27:f8:4d:42:68:92:59:4c:3b:93:f8:67:a5:
3f:50:c6:4f:99:cd:f8:20:1c:80:1a:95:0a:5d:10:4b:d1:3c:
22:75:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:00 2025 by rpki-client