Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/iiN4d6BE39Jqvv5bk6zxo5AnnbY.roa
File: iiN4d6BE39Jqvv5bk6zxo5AnnbY.roa (raw, json)
Hash identifier: NtPiXvIna9HlQAI0PnXDBq2NbGs+fQXqY6hTLkYL+DM=
Subject key identifier: 8A:23:78:77:A0:44:DF:D2:6A:BE:FE:5B:93:AC:F1:A3:90:27:9D:B6
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 0CE5D06E
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/iiN4d6BE39Jqvv5bk6zxo5AnnbY.roa
Signing time: Sat 01 Jan 2022 05:05:55 +0000
ROA not before: Sat 01 Jan 2022 05:05:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49178
IP address blocks: 185.237.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216387694 (0xce5d06e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Jan 1 05:05:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a237877a044dfd26abefe5b93acf1a390279db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:af:3a:dc:f1:8f:57:1a:e2:a9:4f:f9:1e:
d0:ea:3a:d4:c6:1b:7e:45:29:53:4c:16:39:4a:6b:
1a:a0:65:06:aa:25:33:b8:01:71:ad:5a:f9:13:0f:
0e:ab:6e:7a:48:1a:fb:43:16:51:b3:3f:ba:06:6d:
47:ca:5c:ee:b7:05:d4:67:d2:6e:3b:9d:1c:75:e6:
f4:20:6e:4a:62:cf:41:79:22:d1:bb:eb:82:e7:ac:
62:6a:ce:cf:06:83:03:b1:82:e4:fd:e5:54:35:3a:
16:34:b0:e5:13:65:7f:4f:29:e6:a1:af:0a:8b:32:
ce:15:5e:53:92:d6:69:c4:8d:49:79:31:27:4b:3d:
16:58:a0:17:63:c4:12:f2:92:9f:21:2e:84:2c:c5:
21:e0:08:9b:bd:6e:79:00:19:a2:24:c1:c0:80:10:
9c:41:be:ff:b3:e2:10:f6:84:f9:b9:74:91:e7:88:
b3:4d:84:4d:b4:99:67:c8:af:97:8d:39:12:5f:44:
40:5b:18:e0:9f:9a:0b:72:11:70:ca:6e:64:0f:89:
57:8e:4f:4f:a2:03:70:ea:46:86:ba:21:01:ad:44:
00:f6:c0:43:0a:97:80:3e:03:75:de:f4:ea:90:6c:
2c:1e:3d:63:4c:dc:bd:3a:02:15:d1:70:c3:58:36:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:23:78:77:A0:44:DF:D2:6A:BE:FE:5B:93:AC:F1:A3:90:27:9D:B6
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/iiN4d6BE39Jqvv5bk6zxo5AnnbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:4c:85:71:7c:14:96:18:33:82:29:e2:f3:67:73:2c:72:4f:
96:24:8a:e9:72:ea:90:be:6a:92:5a:a0:c8:a5:1a:af:6e:11:
d5:90:43:1f:af:49:0e:4f:4a:80:05:83:19:e5:fa:d4:2f:e7:
61:d3:71:03:1d:f1:38:ff:aa:e1:31:72:df:02:cf:ae:02:00:
95:9d:63:34:e4:a1:32:13:06:a2:a0:33:74:a2:e8:aa:af:30:
bc:48:ee:94:37:21:2c:4f:4d:5f:36:69:a1:82:c7:b3:20:39:
fd:f0:74:91:ac:a7:4a:4a:33:76:bc:33:f5:7d:7e:f5:44:76:
16:e8:ab:40:f5:7c:e3:4e:b1:af:9b:35:5c:7c:1c:45:b6:de:
5b:8f:83:f0:85:b0:9b:47:a4:25:94:7f:85:66:a3:2c:d3:a0:
4b:8b:bd:08:73:99:62:ee:b8:f4:e6:4a:5f:bf:df:bc:a6:1f:
65:87:8b:80:bc:d9:c6:44:78:e5:45:7d:54:41:d3:ec:5f:18:
25:1b:73:a8:2c:7c:89:75:77:ec:64:15:9e:7b:3a:23:f6:59:
56:c0:dd:79:9c:df:50:21:e6:06:25:b5:75:2c:20:4a:b1:1a:
53:a7:00:4c:14:84:2f:5a:1e:0e:97:58:de:f9:66:ae:28:3e:
e2:7c:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:28:01 2025 by rpki-client