Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/axw1N1fdGAxBq9OoAjMHw8zPWQw.roa
File: axw1N1fdGAxBq9OoAjMHw8zPWQw.roa (raw, json)
Hash identifier: KeTS1gJ5Kl/XfhUIW4FbWH4HdXZoTSHmSFDGYT1E30k=
Subject key identifier: 6B:1C:35:37:57:DD:18:0C:41:AB:D3:A8:02:33:07:C3:CC:CF:59:0C
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 01830D4031835F8251BBD8488A7B7598B256
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/axw1N1fdGAxBq9OoAjMHw8zPWQw.roa
Signing time: Mon 05 Sep 2022 10:44:14 +0000
ROA not before: Mon 05 Sep 2022 10:44:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 37468
IP address blocks: 185.148.112.0/23 maxlen: 24
185.148.112.0/22 maxlen: 24
185.148.113.0/24 maxlen: 24
185.148.114.0/23 maxlen: 24
2a07:6040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:40:31:83:5f:82:51:bb:d8:48:8a:7b:75:98:b2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Sep 5 10:44:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b1c353757dd180c41abd3a8023307c3cccf590c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:ae:c6:a0:cf:f7:b7:ea:ef:b1:b2:82:9c:
f4:49:5c:db:fe:e0:18:a6:dc:78:c8:9f:ca:08:16:
68:2f:50:36:66:96:9d:34:e0:33:a0:57:ab:7d:65:
21:b8:ed:bd:02:1f:f5:88:3b:3e:1b:e4:f9:68:a8:
71:c0:06:97:b0:4d:6d:a6:7f:b4:42:f8:d5:b7:3a:
84:09:97:36:31:99:4a:81:aa:ee:aa:c3:e3:14:7b:
a2:7b:5c:ba:ec:a5:9e:fe:27:ba:c6:27:2f:cc:7d:
cd:de:a8:c7:f9:a4:d9:89:96:f0:c6:f0:2e:19:60:
d2:48:7e:16:04:33:70:d6:01:e1:84:30:15:10:43:
fc:18:08:4a:55:8d:e5:b9:59:c6:7a:93:95:ff:77:
f0:b2:a3:66:e1:01:af:53:91:9f:1e:7c:ca:18:7c:
6c:d9:04:2f:46:65:26:1c:8c:54:77:63:b8:5f:ed:
22:f8:af:1b:8d:b5:25:b6:29:eb:0c:f1:4f:ba:9c:
48:5f:1f:6c:bd:3d:90:e2:dd:95:9e:11:20:27:95:
2c:69:39:0c:2f:53:db:53:d2:81:32:72:b1:5b:36:
c7:7e:fa:9c:82:2f:bd:46:ec:35:b6:b3:2c:65:9f:
c2:e7:55:8a:75:a3:9e:8b:c9:8e:c0:8e:e6:d3:c7:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:35:37:57:DD:18:0C:41:AB:D3:A8:02:33:07:C3:CC:CF:59:0C
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/axw1N1fdGAxBq9OoAjMHw8zPWQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.112.0/22
IPv6:
2a07:6040::/29
Signature Algorithm: sha256WithRSAEncryption
8c:64:d3:28:08:ad:14:29:9d:6a:79:9e:50:cc:f6:9d:70:77:
f9:f8:b3:f5:cc:ab:5e:68:b9:f6:b2:8f:27:58:9b:fe:0d:36:
7f:6b:d1:e7:ed:b6:82:96:f5:82:b5:3f:1d:75:db:b2:1d:1e:
2c:23:4b:6a:bf:25:52:10:dd:a4:0f:4f:d8:0f:16:30:44:04:
52:e0:2a:43:3d:9e:3f:d7:80:5e:35:b1:c2:20:4a:e7:be:4a:
46:68:ef:9f:8e:75:0c:c8:a0:2f:a5:9c:2c:c9:02:32:c1:1a:
54:1c:cd:ca:ca:7c:86:36:01:74:3c:d3:59:9d:d8:fc:37:3a:
17:f9:e8:35:5c:1c:93:18:e1:c6:0e:92:14:14:f1:b6:33:ae:
0e:49:af:0d:5f:5d:16:6b:78:f4:3c:1b:0a:9b:c5:01:6f:8b:
eb:3d:cb:d8:72:b9:27:43:4d:5b:a7:fd:37:a9:eb:d6:25:69:
84:53:c6:19:ea:45:56:13:33:d1:7b:df:08:98:bd:5d:75:64:
fe:0f:7a:fc:fe:ff:8a:fa:c7:c2:76:e3:21:7b:14:37:19:99:
70:c5:92:b9:3a:c0:fa:f1:5f:09:0e:f2:ef:c1:f6:d9:38:8c:
09:f6:0f:5c:71:b9:04:cd:36:08:0b:8b:a1:7d:eb:b6:ff:3d:
bb:5a:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:04:28 2025 by rpki-client