Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/fRZnJiHfpGrLJ_6c9uDeKUoHuzw.roa
File: fRZnJiHfpGrLJ_6c9uDeKUoHuzw.roa (raw, json)
Hash identifier: AGSLVabZOXeEEbvxE2oHRqN3wbg1CKflZJQo5+fH+tc=
Subject key identifier: 7D:16:67:26:21:DF:A4:6A:CB:27:FE:9C:F6:E0:DE:29:4A:07:BB:3C
Certificate issuer: /CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Certificate serial: 01856F6FF20E214BD9AA95A37ECA82D86F5D
Authority key identifier: 52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/fRZnJiHfpGrLJ_6c9uDeKUoHuzw.roa
Signing time: Sun 01 Jan 2023 22:24:45 +0000
ROA not before: Sun 01 Jan 2023 22:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49163
IP address blocks: 185.119.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f2:0e:21:4b:d9:aa:95:a3:7e:ca:82:d8:6f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Validity
Not Before: Jan 1 22:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d16672621dfa46acb27fe9cf6e0de294a07bb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:d2:f3:37:a4:27:24:50:e3:83:1b:27:56:
c9:73:8b:a9:9e:54:89:3b:e4:ab:5c:bd:b2:43:1e:
96:ad:1a:4f:5e:f4:be:ae:a1:13:b1:28:4d:92:3b:
14:38:dd:73:0a:17:d9:54:67:9e:b6:82:22:bd:f4:
79:36:61:d6:ea:cd:25:da:d7:17:af:1c:b1:4b:08:
ec:05:2a:11:34:1e:67:b0:8e:ca:a2:07:4d:df:a5:
82:34:40:43:b0:35:d6:72:41:fa:b0:89:64:b8:4b:
3d:db:1c:9f:10:9e:75:21:cf:eb:35:af:22:5e:b5:
d9:e6:df:67:36:a9:4c:c0:4e:4f:71:c9:da:a5:2c:
90:c0:ea:0c:2c:07:78:19:13:90:c3:ba:73:99:8e:
67:99:d4:33:d5:72:30:d3:c5:ec:4d:14:1e:f3:03:
96:18:fc:d6:72:a8:22:a6:64:7f:cf:98:88:e8:ce:
bd:da:80:84:15:40:dc:3e:a6:0f:91:8f:ae:bc:0c:
4b:eb:3e:8a:32:78:85:7d:e8:19:b9:db:ba:8a:0a:
e0:9a:38:f8:d0:4f:de:a3:26:29:06:82:7c:1c:88:
b1:03:73:3b:cc:1b:a6:63:11:ed:9b:52:d4:5c:f6:
9f:6b:ed:69:83:e0:0d:ef:4f:57:45:1e:ce:8c:f7:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:16:67:26:21:DF:A4:6A:CB:27:FE:9C:F6:E0:DE:29:4A:07:BB:3C
X509v3 Authority Key Identifier:
keyid:52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/fRZnJiHfpGrLJ_6c9uDeKUoHuzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:3f:85:9e:ce:75:1a:48:eb:17:7e:e6:13:12:7e:70:ef:aa:
1c:c4:30:f7:67:19:c7:44:b5:f4:76:f2:59:95:4a:fa:b9:14:
2b:4a:c1:ca:4a:04:6f:23:bc:74:d7:ec:3e:88:bb:85:81:fd:
81:cf:a6:cc:3c:61:61:16:11:74:36:2f:1d:94:c0:27:ee:f4:
db:57:33:93:d9:14:7f:70:5e:29:26:ee:64:20:79:45:00:ad:
f3:9b:18:c7:02:37:45:43:de:b3:b4:13:15:a6:68:f5:d9:45:
f6:c4:df:bf:ff:7b:aa:f4:7f:ee:89:b5:21:5c:57:1c:41:27:
1b:13:ae:3e:c2:c6:73:ed:ef:aa:18:95:a3:81:1f:17:51:3a:
f1:2d:ef:47:52:d3:ff:f4:de:92:48:f9:b9:46:18:60:b6:e6:
7c:50:45:09:a7:a4:6a:b7:b7:34:54:71:0a:e5:84:28:01:16:
ce:bf:a0:71:c6:14:07:c0:a7:b0:85:27:0a:00:e1:28:98:0d:
00:d0:31:8c:fd:5d:40:1f:d4:48:27:d6:90:f0:c7:92:28:c7:
59:cb:b0:9e:56:15:1f:e3:50:e8:e1:86:c9:72:25:67:09:3f:
ca:d7:8d:cc:c5:66:04:05:0d:dc:92:30:fa:6d:21:b2:10:09:
cb:e9:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:05 2025 by rpki-client