Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/7d0w6ZhZ0si1sNc0qOzAvJrAHHM.roa
File: 7d0w6ZhZ0si1sNc0qOzAvJrAHHM.roa (raw, json)
Hash identifier: 5BgFjCI6V9M3i+Nq0PUsAmGmN8Ijhg1NY+KJ/MvhXvw=
Subject key identifier: ED:DD:30:E9:98:59:D2:C8:B5:B0:D7:34:A8:EC:C0:BC:9A:C0:1C:73
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 06F81C21
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/7d0w6ZhZ0si1sNc0qOzAvJrAHHM.roa
Signing time: Wed 01 Jun 2022 09:14:23 +0000
ROA not before: Wed 01 Jun 2022 09:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59545
IP address blocks: 185.159.250.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116923425 (0x6f81c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Jun 1 09:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eddd30e99859d2c8b5b0d734a8ecc0bc9ac01c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e6:21:17:a3:d1:11:44:c0:ca:d3:e0:d9:3b:
a3:62:f4:e1:36:36:72:a4:d0:3f:17:38:d2:3c:69:
1b:17:3e:44:a8:46:27:42:a8:08:54:59:8a:bf:6d:
55:d2:3e:b3:c7:8a:bf:35:10:a1:f1:25:b4:12:1b:
1a:6f:52:82:3c:fe:2c:fa:4b:15:45:e4:30:49:98:
86:0a:83:56:62:f8:af:67:f3:52:78:0a:76:e5:5a:
54:aa:f4:bc:54:1e:58:c5:21:2a:03:fd:81:7a:81:
20:29:5d:1f:d2:69:39:3d:6e:a3:84:d7:26:b4:93:
9e:aa:4a:7d:4b:a9:3d:42:75:8c:41:5d:9e:f1:e7:
bf:ff:1a:17:11:42:37:5d:fe:3e:8b:06:a8:02:4c:
0d:ec:59:87:79:36:07:f1:f4:00:07:18:a7:49:0c:
c3:b5:23:3b:a2:b4:d3:08:dd:cf:ba:06:a1:71:b4:
aa:34:eb:be:8e:cf:eb:9f:68:db:9c:7c:53:77:d0:
7e:5e:52:9b:f5:73:78:0e:70:16:e9:09:b9:17:28:
58:a2:44:91:c4:6e:19:4b:e0:b6:e2:d4:41:f1:ae:
f5:1c:44:7c:bc:62:86:ab:49:5f:72:d6:1e:1f:07:
73:eb:12:ec:07:86:be:ae:72:43:f3:88:ae:19:0e:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:30:E9:98:59:D2:C8:B5:B0:D7:34:A8:EC:C0:BC:9A:C0:1C:73
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/7d0w6ZhZ0si1sNc0qOzAvJrAHHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.250.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:5b:f3:d7:70:69:0f:23:d0:91:04:df:89:4e:d3:b5:df:a2:
34:23:25:ca:cd:67:32:8f:09:fe:4e:30:12:81:81:d5:ce:71:
8f:46:c0:1f:b1:41:06:19:cc:0e:de:80:d9:3f:93:38:15:88:
49:86:09:23:13:09:87:82:5e:f6:5e:74:64:bb:d4:14:79:50:
ab:83:e3:d8:ea:3f:25:2a:b4:9a:e0:f7:56:33:c7:bd:84:c3:
25:27:c2:13:4f:ec:5c:50:39:c9:74:f8:65:55:e1:b6:de:1e:
8b:ff:50:3c:94:53:37:97:71:4a:34:7c:79:7a:fd:54:1e:36:
2e:08:92:81:91:16:14:86:0c:dc:ae:34:25:4b:4e:b8:5c:ec:
29:8a:45:8e:b5:88:03:b4:78:94:63:c0:71:3e:3f:01:74:4b:
56:52:6a:68:04:90:e7:9e:4c:bb:e7:4f:1d:63:81:0c:0f:af:
a4:03:8d:b7:b8:5f:0c:38:d4:09:ec:d1:40:a3:73:cb:08:b5:
d5:bb:81:bb:18:e8:40:48:82:2e:59:91:8a:7e:df:11:2f:0c:
eb:f6:a4:87:1f:3f:b7:eb:b0:f7:ed:44:d7:0d:9d:63:1d:92:
8a:18:01:99:9c:97:f3:cd:45:1b:c1:40:ed:6c:fa:6b:e1:59:
72:ac:a8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:17 2025 by rpki-client