Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/3ZWmlOlflDVZLH2ZWLfYjiNj1uI.roa
File: 3ZWmlOlflDVZLH2ZWLfYjiNj1uI.roa (raw, json)
Hash identifier: IBVl0VCNZjX/yF1RbHQAaIPsvzJuWCvE23Pp0AH52PU=
Subject key identifier: DD:95:A6:94:E9:5F:94:35:59:2C:7D:99:58:B7:D8:8E:23:63:D6:E2
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 05979B5A
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/3ZWmlOlflDVZLH2ZWLfYjiNj1uI.roa
Signing time: Sat 01 Jan 2022 08:02:34 +0000
ROA not before: Sat 01 Jan 2022 08:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50631
IP address blocks: 185.159.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93821786 (0x5979b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Jan 1 08:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd95a694e95f9435592c7d9958b7d88e2363d6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:9d:e3:da:07:bf:66:f0:25:ed:c2:89:15:
f2:c0:9d:cd:d4:5c:be:3f:29:9a:40:8f:57:4d:f0:
8a:c3:7d:ae:72:a3:bd:72:0f:7a:28:e4:4a:c4:bd:
39:33:7d:6f:da:a1:98:2d:96:c7:d2:26:4a:65:c1:
eb:26:af:c9:d4:04:70:6e:ee:7d:28:ba:71:fb:ec:
2c:44:9c:c2:6a:36:4b:1e:78:39:1d:8a:5a:25:05:
51:76:12:28:68:d2:85:a1:a7:3d:32:29:1c:85:f7:
e2:82:fb:cb:73:aa:9f:95:cb:64:49:b7:20:01:ba:
7c:80:94:3b:d9:8a:68:15:61:6d:e7:98:92:e8:fa:
10:48:96:35:c9:b5:8c:cf:5f:56:99:b0:63:50:b9:
03:9b:f5:62:34:9f:1f:a1:d2:7b:8c:1d:8e:2d:43:
28:8e:51:05:31:16:07:2f:03:c3:ef:eb:23:4c:94:
53:1e:06:67:97:d6:7e:2b:9e:84:25:ca:3e:08:b0:
25:36:7d:90:51:be:f8:d3:f0:ce:67:96:d7:88:65:
57:ce:85:71:fc:c5:24:29:0b:fd:5c:06:ec:f2:ba:
da:33:e7:24:25:9b:d7:1f:8d:70:e9:83:2e:65:d4:
38:f2:ba:1d:95:49:a0:41:05:0e:f6:93:cb:c8:66:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:A6:94:E9:5F:94:35:59:2C:7D:99:58:B7:D8:8E:23:63:D6:E2
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/3ZWmlOlflDVZLH2ZWLfYjiNj1uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f5:d3:9e:f9:0f:02:01:44:b8:78:78:3b:66:7f:22:58:45:
f0:ef:10:3d:eb:e0:53:4b:66:5b:36:35:13:bc:3f:86:10:93:
1e:bc:4c:7c:bf:18:90:18:93:57:b6:29:f2:6a:b9:0d:c2:49:
2b:c1:a8:a8:72:22:6c:9d:86:3c:3a:81:70:4a:21:42:9a:b5:
19:4e:5d:52:e5:04:36:3f:c2:1b:f4:ab:c4:c4:8a:23:02:6f:
84:20:de:2d:cc:ca:b8:2f:85:fd:c9:77:84:0a:3c:cb:e0:c2:
20:b5:78:8d:64:21:dd:cf:d3:25:58:48:bc:ea:0b:2c:42:ce:
6a:d5:40:5d:d0:ac:0b:f9:51:47:a1:eb:16:a4:4d:d9:d2:6d:
b8:9f:b3:ad:0a:f6:6b:13:8c:9b:14:f9:7f:4e:f0:0c:67:5a:
1f:06:44:d1:76:02:6c:05:d6:c8:74:a6:9b:e5:c4:8b:5b:0f:
41:30:72:d8:35:b0:74:e9:f9:f2:92:5a:8c:3f:7c:ae:4c:1e:
34:05:98:94:c1:45:76:1c:ab:b6:1f:78:c2:45:3d:ba:81:74:
a6:f5:70:77:41:97:69:54:bb:db:4e:91:2f:fe:31:f1:d6:80:
ec:df:90:05:20:10:e8:1e:58:01:93:53:6e:f8:43:32:df:49:
5e:d3:d8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:59 2025 by rpki-client