Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/AS0fxCody8XZqZGI6iHB7I13pFU.roa
File: AS0fxCody8XZqZGI6iHB7I13pFU.roa (raw, json)
Hash identifier: eEcNN+tn/UjxquLg7odJi2+fCOBPTJSlw5cW9LEyQ3U=
Subject key identifier: 01:2D:1F:C4:2A:1D:CB:C5:D9:A9:91:88:EA:21:C1:EC:8D:77:A4:55
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 064598F1
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/AS0fxCody8XZqZGI6iHB7I13pFU.roa
Signing time: Sat 01 Jan 2022 11:00:50 +0000
ROA not before: Sat 01 Jan 2022 11:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50718
IP address blocks: 185.29.89.0/24 maxlen: 24
91.227.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105224433 (0x64598f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 1 11:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=012d1fc42a1dcbc5d9a99188ea21c1ec8d77a455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:0c:3e:2e:fd:c0:41:21:c4:1f:1e:63:0f:
26:0e:d7:53:64:18:b1:04:68:65:3d:35:7c:a4:4c:
ec:a2:e5:b6:df:6d:03:e1:eb:cf:75:3b:21:46:93:
1e:d7:da:18:5e:79:eb:a4:8a:06:6f:97:6a:a3:01:
6c:33:b5:4e:d0:49:79:28:2f:17:4b:e6:c0:29:45:
17:55:fb:7e:b4:6d:b1:83:4c:19:8e:e5:fa:2f:30:
96:4f:d1:d9:79:16:21:7f:ab:e5:24:d6:f4:a6:27:
9e:97:e1:a9:4c:d5:bd:bb:03:9e:85:62:c7:ac:23:
9f:e9:84:2b:4a:9f:95:97:05:4d:07:19:1e:af:94:
e1:7a:e7:70:60:1b:c7:68:24:d2:bb:be:f6:b5:19:
91:86:ab:f0:07:cd:cf:f5:0c:fc:cc:4e:03:c2:ea:
af:39:ce:33:b0:83:43:de:e5:9e:77:c8:9d:21:92:
07:36:d6:cf:c5:c5:79:46:55:f9:54:1d:42:8d:81:
76:a9:c1:cb:4b:6d:79:ba:0d:cb:ec:62:07:f4:ce:
d5:bd:c7:88:7e:fc:8d:db:68:0f:f0:f0:06:cc:09:
9b:31:0f:72:a2:51:b6:94:9d:d3:7b:76:d1:00:02:
46:ab:f8:4d:c6:fe:1e:96:86:6f:3e:80:a5:53:d9:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2D:1F:C4:2A:1D:CB:C5:D9:A9:91:88:EA:21:C1:EC:8D:77:A4:55
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/AS0fxCody8XZqZGI6iHB7I13pFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.236.0/22
185.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:59:84:42:8f:64:9e:a5:23:8e:6c:39:a6:29:57:77:51:c6:
4d:78:6a:d0:f6:90:11:29:5d:ab:c1:b0:10:5a:f5:fa:af:1c:
39:b3:78:c0:b8:4d:f2:01:76:e5:19:2e:a8:d3:4c:b6:43:b1:
ad:89:a1:3c:2f:59:99:f3:c2:56:fa:40:b4:98:1f:8d:e4:78:
d1:b1:32:be:fe:19:4e:c0:62:b4:52:54:82:14:63:16:2c:d5:
7c:ab:38:ef:69:c9:8d:ff:4e:9d:d5:4c:de:37:18:89:da:2a:
4c:ab:20:32:bd:61:d0:14:c5:98:5b:dc:ae:c7:80:c8:08:31:
74:db:1a:2c:52:cc:0c:d4:98:77:83:6c:0f:04:35:61:e6:49:
6f:37:5f:1a:b1:48:b2:de:9a:db:11:d1:e3:da:d1:9d:a3:20:
79:3d:49:13:4e:93:1f:41:ba:9f:37:db:60:dd:6a:02:76:64:
67:31:46:f4:93:da:42:a8:11:ff:34:f0:2d:d8:26:23:e8:59:
05:5c:12:f0:28:68:27:0c:a3:e7:19:68:4d:9d:2d:aa:d9:af:
bd:93:02:66:90:d5:37:b9:c8:6d:51:24:20:ed:bf:c4:3a:75:
c0:96:11:03:cc:38:fb:ef:61:ff:4e:24:7a:fc:c3:27:ba:a8:
78:30:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:57:15 2025 by rpki-client