Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/q3roVUV2ISZGzRWT29kDmzy9LIY.roa
File: q3roVUV2ISZGzRWT29kDmzy9LIY.roa (raw, json)
Hash identifier: iMEL3U8P7rVs7x3oFcGoQAmsYDQCn7j5fL9E3wMqRjU=
Subject key identifier: AB:7A:E8:55:45:76:21:26:46:CD:15:93:DB:D9:03:9B:3C:BD:2C:86
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 0184612E7348715147DDBFFA2297D8CF1429
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/q3roVUV2ISZGzRWT29kDmzy9LIY.roa
Signing time: Thu 10 Nov 2022 10:55:44 +0000
ROA not before: Thu 10 Nov 2022 10:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212097
IP address blocks: 185.227.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:2e:73:48:71:51:47:dd:bf:fa:22:97:d8:cf:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Nov 10 10:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab7ae8554576212646cd1593dbd9039b3cbd2c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:79:47:44:bd:b2:49:fc:40:2b:0e:e3:d5:
27:71:9a:42:ed:e7:00:f5:db:ea:57:1e:77:60:50:
05:37:93:8e:cf:de:0f:18:51:b5:51:6b:e1:77:8a:
e8:c8:d3:3b:3b:88:cb:d7:3a:d0:21:62:7f:db:7e:
9b:f7:4d:bc:c0:3b:aa:f3:58:d6:94:af:d1:48:b2:
ed:5d:78:e3:bd:d8:d1:e5:60:7e:1d:a1:f6:a6:b5:
5a:58:a1:ed:5a:38:99:3e:e4:f1:3c:a8:db:41:1b:
ba:c3:73:10:e3:5c:7f:f1:88:4a:b1:68:64:3d:a7:
89:c2:07:55:b6:69:bd:74:b2:2e:c9:7e:4d:1e:d7:
e9:3b:88:2c:4a:ab:ea:db:6c:96:d0:7e:de:8c:df:
d1:8f:11:43:4d:d8:f2:8a:06:08:7c:01:21:e1:0e:
64:85:79:64:20:1a:d9:7c:79:38:da:67:0a:2d:20:
a9:fd:36:02:73:df:63:ea:68:08:42:ba:4e:bc:74:
3d:00:9e:aa:db:61:8f:14:49:53:3d:a9:00:22:f2:
ed:a5:eb:29:2c:db:43:95:f8:7c:95:bd:5f:41:3f:
c8:dc:7a:ba:11:56:16:af:d1:19:71:37:02:75:0b:
f0:50:83:9c:4a:4e:e3:06:6a:e4:66:33:f0:a0:54:
de:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:E8:55:45:76:21:26:46:CD:15:93:DB:D9:03:9B:3C:BD:2C:86
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/q3roVUV2ISZGzRWT29kDmzy9LIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:17:39:c4:11:85:d9:dd:6a:8c:38:56:6c:15:e3:04:13:b8:
00:ab:24:8a:83:01:0e:2b:bf:a1:54:4e:f5:41:2c:df:d7:cd:
9c:4a:3d:2c:b0:7d:de:ed:2d:bc:f7:ea:be:71:f2:3b:a3:bc:
5c:96:ed:34:3f:d2:62:91:61:d0:af:07:fd:fe:fb:3a:82:ba:
4f:65:0a:34:a8:2c:45:be:59:7e:d7:ee:f7:af:36:04:18:7c:
12:b5:35:10:2d:b2:58:5a:f7:0f:0b:0c:63:88:f3:24:02:39:
11:80:29:89:ef:2c:d4:53:3a:64:3a:63:c4:38:b5:36:18:35:
59:e4:1d:bb:22:8e:98:78:ae:a0:47:85:d6:77:4c:f4:9e:71:
15:ff:04:fb:83:14:0b:fa:77:4f:dc:ab:b3:9a:ea:e3:63:c7:
76:4e:ed:9b:30:3f:53:c1:a4:8a:e9:67:4e:1b:fc:2c:11:c1:
4c:13:1f:85:d3:c7:2e:03:8f:e3:20:f7:f5:bd:02:e2:0a:ea:
6b:42:de:95:5e:e7:89:0c:a8:df:b4:3e:44:81:01:7c:79:4f:
1b:11:f0:ce:ca:fd:04:d3:fa:7b:8a:78:5f:8a:32:72:92:ad:
b9:d5:77:6b:e0:ed:97:1a:c4:51:27:0a:86:5e:5a:6d:17:ce:
55:ba:b6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:15 2025 by rpki-client