Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/5mpTIbOh6c7cGuojSc6hJ-pfijo.roa
File: 5mpTIbOh6c7cGuojSc6hJ-pfijo.roa (raw, json)
Hash identifier: 2OGkyQKZYJ20cYPNdQgyZXw4EOeTck/K8Dr5BPBDhbs=
Subject key identifier: E6:6A:53:21:B3:A1:E9:CE:DC:1A:EA:23:49:CE:A1:27:EA:5F:8A:3A
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 38045ED7
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/5mpTIbOh6c7cGuojSc6hJ-pfijo.roa
Signing time: Sat 01 Jan 2022 00:53:04 +0000
ROA not before: Sat 01 Jan 2022 00:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60341
IP address blocks: 185.50.92.0/22 maxlen: 22
185.47.20.0/22 maxlen: 22
185.45.116.0/22 maxlen: 22
185.32.232.0/22 maxlen: 22
2a00:c660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939810519 (0x38045ed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 1 00:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e66a5321b3a1e9cedc1aea2349cea127ea5f8a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:c6:82:a0:0c:42:c4:a6:b9:a5:a5:80:e3:
18:6e:5e:31:35:cb:28:a9:5b:31:fd:99:8f:87:68:
b4:1c:7a:2a:da:ad:14:34:33:94:f7:bb:ab:8c:5a:
fd:59:77:c6:06:69:06:1e:95:3a:7b:7b:5b:df:da:
12:47:4a:2b:eb:d4:e5:5f:6c:99:ce:28:14:ab:3e:
8b:1d:20:22:49:b1:a7:bf:05:de:26:11:4a:c2:d3:
a2:e8:33:1d:c0:5d:ae:37:15:5e:a4:99:48:f1:9b:
d4:90:c9:45:59:49:f2:a9:ab:a3:66:e4:6c:05:27:
03:d1:4b:ca:99:b5:f2:b6:04:90:bf:d3:d9:91:bb:
6e:13:b6:ed:f6:5f:42:f8:7b:a1:97:b8:2b:88:97:
7d:8e:9c:fa:b4:28:fd:9d:c8:fb:f3:76:6d:e3:36:
2c:42:c8:fa:f0:91:ed:5f:95:da:2c:f5:9f:0a:80:
a0:d5:05:d6:24:47:54:92:e2:8b:01:d2:ae:bb:5e:
21:01:50:9e:2e:fa:6d:dd:f0:51:04:bb:c0:7e:40:
99:e1:29:43:ef:ec:41:86:a0:ee:8f:91:f4:f2:fe:
41:70:60:fd:45:9c:8b:fb:7a:a7:92:8c:55:1a:35:
69:84:56:4b:e2:6b:fc:1e:92:fe:7e:09:be:92:d6:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6A:53:21:B3:A1:E9:CE:DC:1A:EA:23:49:CE:A1:27:EA:5F:8A:3A
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/5mpTIbOh6c7cGuojSc6hJ-pfijo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.232.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
IPv6:
2a00:c660::/32
Signature Algorithm: sha256WithRSAEncryption
88:2b:80:dc:2c:82:6e:72:c5:fd:96:8f:54:26:0b:eb:af:48:
15:1c:c8:d0:e8:d4:ce:db:ab:70:2e:b2:4c:51:5a:96:a5:0e:
94:9d:aa:f0:c8:6a:1d:71:5c:be:e4:56:54:c5:09:bf:ea:1c:
a4:1f:0b:37:6f:91:b5:ea:e0:8d:d3:2a:b3:04:5b:01:78:7b:
77:20:91:8f:3d:ba:f4:0b:ef:11:09:eb:ee:11:1c:ba:d5:8c:
a5:05:55:06:ed:2b:02:ce:f4:50:3a:49:bc:79:1a:02:a7:0c:
36:be:e7:c1:70:9b:af:1d:1e:ee:ca:97:4f:1c:c7:20:e4:75:
cf:13:e5:88:93:43:45:18:d0:f0:d9:db:d8:9d:f5:58:1b:00:
5c:35:2b:04:cd:36:34:8d:3d:8c:7e:f6:13:02:47:a3:51:93:
a5:68:e0:21:e0:51:d0:68:16:b5:9a:fb:46:b5:51:d4:8d:6a:
2c:0c:7d:f6:da:03:42:02:ec:9b:bc:53:c0:66:32:82:5a:8f:
c9:d8:5e:c9:af:51:f6:7e:d8:e5:bf:64:19:8b:ac:9e:cd:dc:
41:8e:97:33:14:07:1a:e7:49:b3:09:42:33:19:82:e3:60:97:
d3:de:2c:42:d2:2e:be:23:92:ad:32:05:a2:fa:3d:24:c1:b6:
4f:e5:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:19 2025 by rpki-client