Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/4mGRuIEWcrfkNqRZHXgrIr58ZO8.roa
File: 4mGRuIEWcrfkNqRZHXgrIr58ZO8.roa (raw, json)
Hash identifier: SnJKV1u9Xij7v0YKbPrv9DCJ2v/5dbb931bCzPFwwYM=
Subject key identifier: E2:61:91:B8:81:16:72:B7:E4:36:A4:59:1D:78:2B:22:BE:7C:64:EF
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 08076BA8
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/4mGRuIEWcrfkNqRZHXgrIr58ZO8.roa
Signing time: Sat 01 Jan 2022 07:54:53 +0000
ROA not before: Sat 01 Jan 2022 07:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51540
IP address blocks: 185.126.216.0/24 maxlen: 24
185.126.218.0/24 maxlen: 24
89.252.188.0/24 maxlen: 24
89.252.190.0/24 maxlen: 24
89.252.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134704040 (0x8076ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jan 1 07:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e26191b8811672b7e436a4591d782b22be7c64ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:21:04:1d:57:9b:2a:0d:82:91:6f:ff:5f:
29:9e:00:04:8c:a2:f5:ee:77:11:69:5f:ea:31:cb:
1d:20:66:22:0a:de:1a:ba:2d:44:6f:fc:96:92:c6:
10:5e:61:76:b9:8c:57:fa:9f:2a:a0:72:d6:f0:7a:
de:d8:d8:d5:0d:53:b5:96:96:89:a8:ce:bc:37:5b:
11:99:3c:8a:6a:43:79:17:57:6b:df:a2:a0:19:91:
6b:3b:c1:eb:a9:e9:b2:20:96:bc:ec:84:f7:82:a4:
d9:98:6e:f5:17:f6:61:82:9c:9c:6e:46:0a:55:df:
8f:93:ac:36:8e:3b:7e:e1:38:5d:98:95:d3:c5:27:
35:79:82:ad:7e:a8:97:ee:8b:03:24:50:b7:5c:6d:
1e:ee:e6:b7:7e:e7:b4:05:ab:99:92:f2:a2:1d:e4:
2f:72:8e:0a:4e:de:36:8c:aa:8b:84:fa:e9:cd:dd:
78:5e:a2:c4:21:86:43:fc:97:49:32:8d:90:e9:cc:
b2:94:88:72:e6:15:8a:5f:9d:8e:cb:08:af:b2:f8:
e7:20:5f:36:e9:7e:27:c1:09:b7:61:25:89:1f:3c:
f2:44:21:27:e3:5f:13:d3:6c:72:47:33:8d:48:dc:
b5:95:aa:38:07:03:60:b7:83:f4:38:c5:e0:89:af:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:61:91:B8:81:16:72:B7:E4:36:A4:59:1D:78:2B:22:BE:7C:64:EF
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/4mGRuIEWcrfkNqRZHXgrIr58ZO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.188.0/24
89.252.190.0/23
185.126.216.0/24
185.126.218.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d1:de:60:1e:50:ca:f9:27:46:f9:31:bd:c2:08:bf:04:6e:
61:fd:31:7a:52:48:88:c7:29:bf:05:91:88:48:70:da:5c:fb:
cb:ea:a8:7e:00:22:15:ba:5c:4d:48:64:df:e4:a9:03:89:24:
ce:a0:41:cd:89:a6:e4:19:f1:de:10:15:5b:db:87:80:26:d5:
ee:7c:57:51:20:bf:91:aa:4a:8d:2f:2b:71:d3:77:94:a2:b7:
1e:ea:f1:4f:95:e7:db:10:0d:25:53:f7:5c:75:6a:72:26:64:
48:96:ff:3c:fc:0a:84:72:7b:03:bb:f5:30:ab:7a:7d:c8:35:
ef:5e:c6:11:d3:29:8c:6b:2f:74:70:6e:09:dd:e1:07:a9:ec:
e2:11:52:84:61:03:48:5d:af:4f:79:5b:87:91:d9:7e:ba:ed:
96:59:22:62:86:b5:8e:16:ef:79:47:7c:f1:bf:13:a6:5f:38:
eb:15:da:1b:1b:20:11:f8:32:be:d8:8c:7c:6c:27:57:49:f3:
6e:80:ed:63:1e:be:66:a5:a6:2a:70:ce:e8:25:48:ed:cc:6b:
41:ba:90:7e:3b:7b:09:a6:52:14:3b:cf:b2:d8:e3:e6:97:79:
66:89:30:c0:7b:45:7b:04:36:45:d7:85:6d:56:79:a2:b2:1b:
69:b3:92:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:11 2025 by rpki-client