Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/ihRxvz5McZ5OpruKdjj9Zk8rRiQ.roa
File: ihRxvz5McZ5OpruKdjj9Zk8rRiQ.roa (raw, json)
Hash identifier: PRxXV/irdvS7E2aX7xiNJ3112TYBNrhmUeHyS51mM1E=
Subject key identifier: 8A:14:71:BF:3E:4C:71:9E:4E:A6:BB:8A:76:38:FD:66:4F:2B:46:24
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 07230CE1
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/ihRxvz5McZ5OpruKdjj9Zk8rRiQ.roa
Signing time: Sat 01 Jan 2022 14:07:26 +0000
ROA not before: Sat 01 Jan 2022 14:07:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34946
IP address blocks: 185.16.92.0/22 maxlen: 22
80.244.192.0/20 maxlen: 20
92.42.72.0/21 maxlen: 21
2a00:f600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119737569 (0x7230ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jan 1 14:07:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a1471bf3e4c719e4ea6bb8a7638fd664f2b4624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:7e:b7:db:08:f8:8c:c0:d6:a7:d1:6e:df:
3d:5b:33:17:f5:39:b6:a1:65:34:09:3b:60:5f:c3:
1d:40:76:62:e0:a3:c5:18:68:6d:8c:ec:98:35:6a:
b4:1a:53:ae:9c:42:c6:e7:72:97:0d:43:74:db:e5:
22:22:9d:be:db:9e:dc:19:fa:d8:92:08:ee:ed:7b:
5e:4d:b6:88:75:9d:3f:27:a3:af:f6:e4:cb:e7:5a:
21:48:73:97:e0:c6:15:29:14:72:3e:66:c9:72:8b:
de:d0:7c:3f:e8:b3:43:0a:41:90:73:c1:cb:56:88:
39:a9:bc:43:cb:74:95:59:43:21:fc:cf:3e:11:0d:
e1:3d:d3:6d:c3:c0:fa:b4:12:6e:d8:f7:ed:1b:c4:
32:56:c8:91:6b:09:4d:a0:6f:27:79:69:32:b2:19:
4c:b5:5f:71:34:d2:75:19:10:0e:dd:a2:a2:fa:fc:
7c:0c:c4:5a:cc:f1:f1:1e:1b:ce:94:48:5c:83:de:
f7:29:f8:36:63:38:07:44:cb:d1:3d:eb:96:db:e3:
51:3d:70:8c:e0:11:4f:3f:4d:a9:c6:08:50:43:22:
57:7b:0c:ce:1e:b2:ba:21:43:b0:71:43:f2:2d:8e:
10:6a:db:a2:ea:9a:38:f1:1f:23:7d:0f:28:d6:27:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:71:BF:3E:4C:71:9E:4E:A6:BB:8A:76:38:FD:66:4F:2B:46:24
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/ihRxvz5McZ5OpruKdjj9Zk8rRiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.192.0/20
92.42.72.0/21
185.16.92.0/22
IPv6:
2a00:f600::/32
Signature Algorithm: sha256WithRSAEncryption
2c:41:a8:af:29:1f:99:96:79:17:f1:16:4e:58:b5:bf:60:cf:
e2:16:56:94:84:0d:28:d6:fe:59:07:a1:20:c6:d3:08:1f:39:
bc:9b:2d:b6:7e:e5:cb:eb:bc:3d:73:42:0e:9d:93:fc:4f:17:
74:20:a6:70:a1:46:1b:89:13:0a:3c:04:02:28:3f:c2:0b:71:
a6:d2:6a:ec:5e:24:06:26:12:06:88:65:5e:fa:83:01:f1:38:
ae:7d:71:ce:0e:d1:e9:42:f7:b4:ac:ea:4e:54:a7:78:bf:07:
49:95:56:36:97:c3:3a:72:a3:c9:af:4d:bb:15:8e:2a:a4:b0:
84:58:90:1e:c2:7d:a4:f1:b4:40:d4:01:e3:db:c6:7d:f1:48:
4d:d9:27:0b:19:ed:04:a4:b3:54:4f:09:20:8a:29:71:65:e3:
dd:37:6d:fb:99:19:2d:68:28:b8:28:df:d7:33:72:34:2c:78:
de:c2:6f:b7:c9:36:42:01:c3:02:f9:26:76:44:ed:01:f6:9e:
a5:51:a3:4d:ac:d9:42:00:d4:1f:3b:fe:14:b3:7e:53:f4:f4:
dc:ef:ca:2e:bd:41:ae:c2:bd:ac:f3:2b:76:92:a3:11:50:b8:
23:66:ac:51:e9:5f:09:d8:c0:53:cf:dc:e2:da:22:c7:1a:82:
00:4f:7d:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:23 2025 by rpki-client