Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/e2THcAGchzCJzDF9u_er90zSfEU.roa
File: e2THcAGchzCJzDF9u_er90zSfEU.roa (raw, json)
Hash identifier: IgvxDU/pqQo/+z6hdSg3q6g5p6yqG0oYoRnC74sXVjE=
Subject key identifier: 7B:64:C7:70:01:9C:87:30:89:CC:31:7D:BB:F7:AB:F7:4C:D2:7C:45
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 01844241F6CEC14AA305229BA101FA7C9FD5
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/e2THcAGchzCJzDF9u_er90zSfEU.roa
Signing time: Fri 04 Nov 2022 10:48:50 +0000
ROA not before: Fri 04 Nov 2022 10:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 702
IP address blocks: 185.42.233.0/24 maxlen: 24
185.42.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:41:f6:ce:c1:4a:a3:05:22:9b:a1:01:fa:7c:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Nov 4 10:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b64c770019c873089cc317dbbf7abf74cd27c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:88:14:ac:96:7e:85:51:c8:b3:e8:d9:1c:d3:
de:59:1d:42:a3:38:12:8d:62:eb:2c:67:38:97:7a:
76:47:c7:6d:46:56:79:90:28:3e:e3:21:33:6d:65:
ff:20:f0:c9:49:65:9c:88:4b:81:04:b2:61:91:6c:
16:51:3c:38:72:fc:e8:e0:75:68:c0:d8:c4:d5:66:
15:59:c0:c9:df:81:17:4f:d5:f6:7e:f7:91:b6:76:
40:cb:4e:6c:13:ab:f3:3f:2d:87:18:36:a6:42:52:
50:f2:63:8d:88:f0:56:16:f7:0c:7b:4d:e3:65:17:
a5:96:04:ed:fb:e4:74:71:a3:7a:95:db:91:9a:0f:
e9:53:ec:d9:c7:f8:6f:be:90:29:fd:4c:97:33:6e:
38:83:26:24:2e:3f:37:df:f3:d9:a6:64:e7:66:bc:
b7:92:c3:0a:70:4d:64:6f:6c:c9:ab:b6:b8:81:b5:
87:f7:01:0b:b0:21:ff:d1:f4:1a:2f:bd:55:f3:79:
c2:49:78:13:8d:33:01:45:80:de:f4:5e:3a:ab:16:
f9:78:b5:de:0e:23:62:6f:f1:b9:35:58:c0:1e:be:
38:f6:6e:6e:96:32:56:0c:ad:b5:1c:db:e8:87:30:
01:8f:c2:55:2b:9d:a7:f4:e9:cb:2b:c9:15:1c:51:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:64:C7:70:01:9C:87:30:89:CC:31:7D:BB:F7:AB:F7:4C:D2:7C:45
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/e2THcAGchzCJzDF9u_er90zSfEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.232.0/23
Signature Algorithm: sha256WithRSAEncryption
52:b2:26:e2:ae:33:ad:21:ba:2b:46:69:f5:c8:4f:04:66:f3:
cd:81:1c:98:b5:45:64:e3:cd:04:69:02:9f:e1:aa:12:8b:b0:
e9:b1:70:aa:34:56:d5:3d:8d:f9:af:d2:a3:e9:72:0c:bf:c8:
c1:1d:e9:e4:15:57:ab:29:5c:18:86:ac:30:ac:82:ba:72:7b:
0b:81:ef:cc:4c:1b:24:13:cd:c4:ea:f2:26:65:b3:ba:c6:ba:
bf:f1:45:42:c8:d3:58:fb:7d:4b:98:1c:4c:89:64:87:e5:e1:
5e:17:3c:a1:f8:3d:8d:d5:b3:a1:18:75:bd:43:0a:43:10:0a:
25:87:59:ff:78:b3:c6:e1:9a:01:b9:f1:74:91:40:30:da:db:
44:31:c4:80:41:ec:08:96:ed:d3:9a:a7:7c:b1:a6:85:3d:92:
d0:5d:06:4b:2b:a9:f1:f7:fe:ff:14:31:65:69:68:c6:18:cb:
4d:59:07:ba:96:b0:a9:6b:0e:67:6f:36:ef:6b:be:45:68:42:
ed:9f:45:30:49:14:06:63:8b:28:00:be:0e:2c:e8:3a:ec:63:
56:f9:9c:f6:29:29:38:b0:93:69:9c:ce:38:15:17:52:86:43:
ce:16:8f:46:d8:4b:b5:5f:fa:7d:89:ac:59:04:21:aa:96:02:
fb:90:2b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:31:16 2025 by rpki-client