Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/iRZZFy6NEHVCflb6ZmLNZSuTPWU.roa
File: iRZZFy6NEHVCflb6ZmLNZSuTPWU.roa (raw, json)
Hash identifier: X8e3/B2KOGEEIujF0Rvlt7M0TYhMr/zQDH4rq19R4zQ=
Subject key identifier: 89:16:59:17:2E:8D:10:75:42:7E:56:FA:66:62:CD:65:2B:93:3D:65
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 0E5BA665
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/iRZZFy6NEHVCflb6ZmLNZSuTPWU.roa
Signing time: Sat 01 Jan 2022 13:07:10 +0000
ROA not before: Sat 01 Jan 2022 13:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51018
IP address blocks: 185.239.52.0/24 maxlen: 24
185.239.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240887397 (0xe5ba665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Jan 1 13:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=891659172e8d1075427e56fa6662cd652b933d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fd:8e:98:c7:2b:ec:86:a8:f8:5e:bb:05:e4:
0d:21:b4:78:49:7d:db:7e:55:c1:9c:b5:5a:27:3b:
88:c5:ce:a7:56:83:8a:4e:af:5a:d4:9a:c1:10:cf:
5d:a7:e1:34:a3:5b:c9:6b:2d:ce:6b:96:4b:73:9a:
14:ff:09:c9:c9:06:26:9d:2c:44:b7:50:87:73:43:
d7:6e:c9:d8:d1:ac:8e:a3:27:bb:93:31:c6:3f:13:
1f:c4:31:8a:24:c6:af:6c:5b:7f:dd:6d:07:df:e2:
fc:4b:37:cf:56:17:4d:a9:2c:f1:08:94:13:8d:f9:
80:bf:4d:1a:eb:72:c5:76:26:9a:04:47:76:8a:b9:
b2:7c:26:59:43:42:df:c3:0c:68:59:4e:07:36:32:
5e:e1:9e:f5:e5:c5:9e:07:70:99:1a:83:cb:d1:ac:
ef:5c:06:d9:4c:08:2e:47:fd:0a:4c:c2:35:ca:7d:
7e:50:8f:8a:4e:05:c0:09:01:c2:f1:1b:8e:9b:47:
b4:aa:55:94:25:f6:58:9e:7d:fa:3a:18:6b:07:c4:
4e:01:20:f4:78:b3:43:df:96:69:2f:66:c0:dd:f0:
d2:8a:7c:28:a2:2d:8a:2a:a0:49:e5:04:ef:db:d8:
b1:34:3a:5e:dd:0b:95:de:9a:33:39:73:71:86:d7:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:59:17:2E:8D:10:75:42:7E:56:FA:66:62:CD:65:2B:93:3D:65
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/iRZZFy6NEHVCflb6ZmLNZSuTPWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.52.0/22
Signature Algorithm: sha256WithRSAEncryption
45:92:ca:b3:02:e2:b5:5b:c7:ab:6a:1c:8b:30:05:a8:33:28:
94:c4:64:b4:12:75:b1:c8:4f:0a:0e:c3:26:da:96:f6:d7:6e:
1b:0b:4e:3b:9f:34:61:20:83:aa:1d:5d:6f:40:1c:d9:14:66:
5d:6d:a8:e5:d4:78:aa:b4:c5:32:dd:6f:c7:25:98:ae:f9:8a:
eb:aa:30:95:89:64:32:e3:db:51:d4:9a:3e:1f:df:30:da:13:
e0:c2:8c:48:14:4d:8c:39:e0:d0:20:45:72:02:31:41:55:4d:
55:2d:20:8b:f9:85:9a:99:74:91:76:bc:f4:24:29:bb:18:c1:
0e:4f:0e:c7:2b:25:16:07:e6:20:3f:99:fe:48:1f:54:7d:0c:
b4:85:5a:10:83:cb:ed:fb:86:4e:5b:de:71:0d:5e:8f:fa:a4:
91:99:e1:6b:da:2e:8d:92:de:11:3e:84:4a:e7:56:07:81:11:
4e:bd:69:0f:70:09:8d:b4:d9:4d:2d:65:46:92:10:b0:17:a1:
2a:38:74:ae:d0:8e:a4:80:00:0d:10:b2:b8:e7:8a:35:76:3c:
08:c0:7c:35:b8:ab:59:58:aa:66:ec:fa:0c:b4:f7:59:58:59:
75:ae:8f:f3:72:35:85:0f:19:27:80:c0:d0:d5:29:e4:25:e6:
c1:10:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:54 2025 by rpki-client