Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/f9k6aWFea7Lyesm3GsT6xqt-x0Y.roa
File: f9k6aWFea7Lyesm3GsT6xqt-x0Y.roa (raw, json)
Hash identifier: iVN4pP81RplHQasBu+WMC4UXrzvRBKcEPC+wH5Nu+fc=
Subject key identifier: 7F:D9:3A:69:61:5E:6B:B2:F2:7A:C9:B7:1A:C4:FA:C6:AB:7E:C7:46
Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial: 01856C65CF27E751ED3EA568DD4A3B7931FB
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/f9k6aWFea7Lyesm3GsT6xqt-x0Y.roa
Signing time: Sun 01 Jan 2023 08:14:49 +0000
ROA not before: Sun 01 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199269
IP address blocks: 185.22.164.0/22 maxlen: 22
185.22.164.0/23 maxlen: 23
185.22.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:cf:27:e7:51:ed:3e:a5:68:dd:4a:3b:79:31:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Validity
Not Before: Jan 1 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fd93a69615e6bb2f27ac9b71ac4fac6ab7ec746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:69:02:6c:56:6e:05:24:9e:af:54:93:77:
97:2f:c1:00:5d:8f:24:02:6a:af:c9:17:ee:31:62:
4e:48:6c:e7:4e:68:fa:6c:ae:c1:a0:b7:99:f5:ae:
87:60:7d:16:91:6c:d9:3e:ff:b9:1a:58:8a:90:7c:
ff:5a:c9:03:97:06:27:ca:46:42:7e:9c:d5:c6:1a:
89:e6:2c:bd:50:16:12:78:f6:c9:af:ee:8c:0c:3a:
b2:ce:39:a0:d8:f6:d4:57:0c:63:28:3f:68:db:0b:
2c:ea:62:54:88:fb:cf:28:ff:81:ae:32:8b:f4:9d:
89:55:df:89:79:56:d4:ae:2f:8b:0c:bd:26:40:50:
47:ec:f4:06:44:bc:df:55:41:32:6f:c6:f4:d3:30:
38:72:12:10:b7:c2:6b:5a:77:68:de:24:84:96:6b:
8b:45:f4:eb:ab:76:d0:47:b1:a0:15:9d:ea:af:d9:
19:b0:78:6e:38:9e:19:53:68:5d:65:b0:9c:08:01:
74:2a:25:f2:a5:59:ee:d7:41:41:83:59:c1:cd:32:
b2:90:05:3b:c4:f2:86:28:2c:60:47:9b:b5:5d:c8:
4a:1a:00:f2:f9:d6:03:53:11:bf:bf:15:46:86:39:
39:ef:f3:59:90:d5:38:d0:2a:2a:bc:ba:5f:60:e5:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:3A:69:61:5E:6B:B2:F2:7A:C9:B7:1A:C4:FA:C6:AB:7E:C7:46
X509v3 Authority Key Identifier:
keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/f9k6aWFea7Lyesm3GsT6xqt-x0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.164.0/22
Signature Algorithm: sha256WithRSAEncryption
96:67:0e:75:0e:41:45:3f:b3:52:de:c7:45:89:be:1a:52:31:
08:b6:35:08:10:f0:1b:29:5d:55:fd:8f:d2:31:e9:69:ca:ac:
99:7f:85:c0:c5:a4:8f:94:48:92:6e:25:a8:e1:2a:cb:a6:cb:
ec:b5:09:5d:8c:2c:57:4d:fd:43:93:d5:d2:cc:e4:2b:39:6d:
b0:8e:91:9a:6b:1e:e8:a8:2d:b3:a4:83:87:ce:90:43:7a:80:
f7:c0:2c:43:0d:34:09:a1:f3:a2:b3:85:e8:7e:74:0f:96:d1:
6d:8d:9c:16:15:e8:1b:cd:b2:1a:ee:4f:1b:c4:89:3e:df:60:
e5:fb:f1:d8:bc:c5:f4:ca:7a:47:6c:d9:01:f0:c6:53:df:77:
58:ef:10:51:9c:7b:f8:c0:f5:07:67:11:e6:96:f5:83:41:d6:
5d:82:ec:47:f0:c3:13:6a:10:8c:76:68:58:49:11:28:77:d3:
d1:f5:b5:92:01:ec:4c:af:33:18:b3:fc:ef:7d:32:85:7c:68:
38:95:b4:1b:d8:ec:6e:26:59:96:46:06:01:ce:2f:f5:44:1a:
e1:b9:ed:9a:b4:6e:b2:30:e3:43:90:e7:8b:53:ed:52:52:91:
13:c0:c3:32:e4:0c:3c:7b:ee:5f:06:a7:46:5e:53:91:8d:44:
f1:22:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:35:59 2025 by rpki-client