Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/S_7nBYuGUK0vKXqqi5h7fwjZikY.roa
File: S_7nBYuGUK0vKXqqi5h7fwjZikY.roa (raw, json)
Hash identifier: KLSYYAqJVghsKHy+rzgvT1KlTjfFDqxEJF8lY2Lo2BU=
Subject key identifier: 4B:FE:E7:05:8B:86:50:AD:2F:29:7A:AA:8B:98:7B:7F:08:D9:8A:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01856CE679F55F7BA601FC1B4612B55F3C75
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/S_7nBYuGUK0vKXqqi5h7fwjZikY.roa
Signing time: Sun 01 Jan 2023 10:35:21 +0000
ROA not before: Sun 01 Jan 2023 10:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15967
IP address blocks: 185.248.212.0/22 maxlen: 22
185.248.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:79:f5:5f:7b:a6:01:fc:1b:46:12:b5:5f:3c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jan 1 10:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bfee7058b8650ad2f297aaa8b987b7f08d98a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:bc:65:9f:ad:eb:41:8f:4e:0c:11:44:5c:
88:4f:7a:fb:ae:3a:84:10:a4:f7:1f:cc:a4:2c:63:
b1:b1:9d:ab:5b:8a:fb:8e:72:58:bc:bb:57:19:9c:
88:ff:f7:2a:93:ad:a7:d7:e3:e7:0a:f0:b7:2b:b7:
81:e9:0c:6b:1c:6a:86:4b:19:20:b0:a5:39:49:de:
1b:a0:bc:9d:44:40:30:b7:08:72:7d:e1:2c:b7:b6:
6a:90:db:ef:e7:37:b9:14:82:d8:e8:83:1d:48:9d:
d6:6c:b5:81:0f:33:be:3b:e7:54:23:99:d9:8a:47:
6c:0c:08:88:71:5f:22:98:f4:d6:9a:9a:f8:c1:fd:
e0:20:a2:73:e1:61:9b:86:88:30:bd:3c:f3:7c:c5:
a8:2c:98:cc:30:84:62:2e:4d:85:7c:5f:68:42:2c:
d5:b8:1d:69:8f:65:4d:27:8a:75:ac:df:43:c8:2b:
a1:2d:5e:20:e4:af:f3:35:02:6a:dc:75:ab:e5:cc:
34:89:7f:3a:db:00:7b:a2:20:99:55:18:30:0d:24:
3b:c2:0b:6e:1b:21:ae:96:85:55:41:4e:c2:30:51:
31:b7:98:c0:00:48:c2:2c:b1:8f:1d:e2:13:53:55:
e0:39:c6:c1:28:89:63:60:a1:d2:ad:83:ea:e6:c1:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:E7:05:8B:86:50:AD:2F:29:7A:AA:8B:98:7B:7F:08:D9:8A:46
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/S_7nBYuGUK0vKXqqi5h7fwjZikY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.212.0/22
Signature Algorithm: sha256WithRSAEncryption
79:02:b3:47:cb:26:65:40:a5:aa:0a:13:1b:d7:ad:d5:db:76:
99:1e:a5:c6:34:57:ce:00:ed:1d:d8:b2:ee:78:d2:75:3a:7c:
de:2f:92:41:0e:f0:a3:98:7a:a8:0d:53:6d:d7:57:b9:68:8d:
db:b1:de:11:18:2c:65:63:5f:e8:cc:6b:33:dc:9f:1b:fc:05:
4a:78:e3:14:3c:b8:e4:5b:15:86:a6:6c:21:9c:da:c6:77:de:
38:2a:b9:61:a5:2d:c7:65:36:80:eb:ac:0a:74:01:32:56:97:
fa:77:a7:dd:95:03:c5:2d:8a:08:d2:ea:f7:91:6e:a9:8f:fc:
e9:c4:1c:17:ae:33:0e:d7:b7:ae:fc:74:ce:54:28:ab:1f:31:
ef:d5:1c:4e:6f:9c:63:08:c7:90:57:c0:44:90:b6:98:0f:38:
73:54:66:09:64:a2:5b:e0:92:00:32:7b:ae:60:ed:42:ea:f1:
94:29:66:31:bd:bc:74:8a:bc:e1:6e:a2:f1:16:81:e7:26:24:
b8:61:ed:c6:cf:da:df:85:4d:3e:c3:58:e2:0d:81:fa:1c:b6:
06:7a:a8:fb:f4:8e:74:8c:bc:8e:1c:57:69:59:8f:7b:e1:0f:
a5:07:ae:79:44:80:19:ea:a7:af:e0:dd:87:6f:70:dc:2c:cb:
d9:d6:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:59 2025 by rpki-client