Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/hiOeaFjxlFugki3ueTmc90IQYD0.roa
File: hiOeaFjxlFugki3ueTmc90IQYD0.roa (raw, json)
Hash identifier: 8VGQdTSzz9Tg6fZ8QOgLW/UlD0VroAXzxrwf6Gxkzzc=
Subject key identifier: 86:23:9E:68:58:F1:94:5B:A0:92:2D:EE:79:39:9C:F7:42:10:60:3D
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 03BB0EC6
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/hiOeaFjxlFugki3ueTmc90IQYD0.roa
Signing time: Sat 01 Jan 2022 14:08:25 +0000
ROA not before: Sat 01 Jan 2022 14:08:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 185.210.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62590662 (0x3bb0ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 1 14:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86239e6858f1945ba0922dee79399cf74210603d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:3b:95:35:27:de:c9:a9:83:3d:77:8e:8e:
92:3c:e7:3a:92:32:ad:56:32:ae:8c:78:60:3b:34:
a9:17:ce:b0:a7:f8:e7:10:5a:ad:fe:10:a2:d4:7b:
a2:b0:81:7e:85:ed:5e:c7:2c:4b:1b:7a:34:93:2d:
e8:99:ee:c5:07:0f:af:fd:98:2b:7d:c0:84:9f:1b:
e9:e3:22:70:94:cc:c1:c2:df:97:42:1d:ea:ee:db:
a5:69:71:b8:94:da:ae:ad:ae:d6:3c:22:7d:58:80:
f4:a6:f2:22:d6:61:b8:8e:7d:2b:83:64:0d:ce:18:
17:f8:2f:be:5a:69:2e:32:32:4f:8c:b0:77:92:24:
23:11:d7:5e:bc:1a:aa:38:b8:9d:8d:8d:1e:3e:1a:
88:a8:d9:c7:96:33:62:f2:03:12:f5:d2:87:42:86:
b2:ff:36:6d:96:b6:30:99:c6:c4:0e:9d:0d:46:1c:
cc:64:38:8d:c6:e6:34:41:97:8b:2b:a3:57:1d:a4:
92:97:a5:e1:29:c2:29:e3:78:58:2a:9d:e9:c0:d8:
1e:b8:62:9b:9a:98:db:b5:a6:da:2e:1c:db:6c:0c:
3b:fd:b4:4c:3f:57:99:2f:26:40:a2:7c:41:97:7a:
89:ad:d6:33:d8:de:46:22:61:72:33:cc:35:f0:93:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:9E:68:58:F1:94:5B:A0:92:2D:EE:79:39:9C:F7:42:10:60:3D
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/hiOeaFjxlFugki3ueTmc90IQYD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.204.0/22
Signature Algorithm: sha256WithRSAEncryption
82:ff:29:81:aa:91:3e:de:6b:c6:46:72:cf:95:36:c7:7e:55:
90:6a:f4:a1:c2:d6:6a:48:96:23:20:a2:39:1d:97:17:8d:0f:
62:d2:aa:59:69:ce:d7:b2:95:da:0c:55:f9:96:88:5e:04:b3:
7c:e2:23:20:fc:bb:ce:ac:e1:c9:cb:be:4d:de:2b:b5:50:cb:
fd:c1:d2:9c:fc:2b:c3:ad:12:56:ee:6f:e2:6f:8a:4e:ea:c8:
61:08:3f:7d:0c:82:80:2f:2f:ab:d8:06:09:c5:1b:ce:4c:4a:
3b:62:d0:f1:fb:3d:53:67:c3:91:dd:cc:d6:74:b1:b9:42:15:
c2:ec:19:9d:9d:4f:f3:9d:84:33:d0:df:8d:bb:06:ab:4e:dd:
32:bd:e9:66:95:f8:41:f5:6f:10:1b:ec:aa:0e:bc:69:e3:fb:
2d:d6:5b:c0:bf:df:27:32:bf:c1:e3:14:af:58:36:20:ae:b8:
17:db:90:05:8d:2a:8d:19:f7:b9:1a:62:58:34:97:28:25:d7:
0e:75:6f:96:5a:2e:86:bd:59:ec:3c:e3:5d:7b:77:68:10:33:
46:fb:3c:6b:94:c3:2b:15:f2:d1:52:59:63:ef:5e:33:53:47:
d0:1d:b5:c1:ed:24:5f:31:d5:00:9a:cd:a1:d8:60:64:f2:2b:
b8:3b:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:08:21 2025 by rpki-client