Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/IRnbIqwjNoOWO4CmjEqhrBdX8QA.roa
File: IRnbIqwjNoOWO4CmjEqhrBdX8QA.roa (raw, json)
Hash identifier: MgryhiCKBUxu4k9X2zmg8xAEHbZy80efST4hEtpy+zA=
Subject key identifier: 21:19:DB:22:AC:23:36:83:96:3B:80:A6:8C:4A:A1:AC:17:57:F1:00
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 0428973D
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/IRnbIqwjNoOWO4CmjEqhrBdX8QA.roa
Signing time: Sat 01 Jan 2022 12:02:51 +0000
ROA not before: Sat 01 Jan 2022 12:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201627
IP address blocks: 185.68.168.0/22 maxlen: 22
185.68.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69769021 (0x428973d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Jan 1 12:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2119db22ac233683963b80a68c4aa1ac1757f100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:ee:72:61:60:5c:a9:86:b2:16:88:2b:84:
1c:ce:d8:11:e6:88:1f:d9:cb:0a:5a:81:c1:be:9e:
25:36:ea:61:ac:a6:e3:e9:76:b7:29:24:d5:52:a3:
e3:d6:8b:8b:bd:07:f6:a5:8d:d8:30:cc:59:fa:12:
0e:9b:d9:e8:f3:9c:25:7d:37:3d:e3:41:8c:e3:55:
45:93:f5:ee:f7:dc:8e:55:58:49:ee:08:0c:78:2b:
3b:13:18:a2:37:b4:b5:13:3a:9a:d6:1c:f3:66:73:
0b:74:5f:66:6f:51:e1:c6:29:c2:b6:d4:21:52:33:
2e:ae:65:8e:0a:14:27:5a:b1:01:2e:9c:1b:c7:84:
90:97:4c:29:e1:fb:c7:da:4a:28:a1:0f:8d:99:64:
48:e6:a8:4b:e3:7a:62:7d:65:e3:9e:06:23:35:ab:
b7:ea:0a:bd:07:94:5a:c8:fd:38:7c:53:46:92:01:
d5:c1:dd:0c:c5:aa:d9:86:a0:d3:f3:f7:dd:ff:02:
76:5d:ac:13:a3:2f:f8:a8:dc:1c:05:97:ca:bf:cc:
19:e3:bf:ef:b2:2e:d5:4d:c6:db:3b:8d:55:e6:99:
04:7e:17:13:5c:2c:0b:9a:69:a7:0c:0e:e4:22:b5:
3b:ab:1c:a9:4e:59:9a:78:10:8e:c4:3a:03:12:10:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:DB:22:AC:23:36:83:96:3B:80:A6:8C:4A:A1:AC:17:57:F1:00
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/IRnbIqwjNoOWO4CmjEqhrBdX8QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.168.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d0:e7:21:07:75:ed:90:1b:5e:0c:a4:20:08:50:e8:a2:ee:
22:10:db:3a:92:ea:ac:1a:09:e5:4f:c7:58:ee:5d:32:85:75:
ce:fb:00:8f:7b:c2:a0:0e:d8:b2:2f:96:54:d3:21:48:27:f1:
c2:4d:60:ee:c1:c8:60:6e:f1:b6:c3:a2:e6:a0:7c:d5:56:1e:
f4:9e:fa:7a:f7:64:79:05:b8:9e:ef:26:73:63:57:8e:d4:1a:
f5:dc:f1:51:4a:22:9d:d4:55:d1:ef:63:3b:5f:a3:ad:b0:72:
73:3b:52:33:62:99:61:39:9e:5d:3a:44:1e:8c:3f:72:af:83:
04:29:27:71:89:1b:d4:fe:d2:b8:3e:36:ee:ed:44:9b:98:a4:
d8:0e:85:fe:0a:27:6c:83:38:1b:72:c9:be:6d:fc:53:0c:28:
79:26:dd:88:81:ac:3e:1b:a0:44:35:96:45:77:08:14:2b:c2:
5c:15:58:dd:2e:54:29:b2:8b:5b:19:25:39:37:e4:07:ef:7a:
b7:48:5f:d0:26:eb:c6:fc:2f:f6:c8:eb:82:f7:3d:1d:66:83:
e0:02:89:a3:77:8b:e2:11:10:8c:9d:b1:41:9d:a8:50:b3:bc:
c1:18:b1:65:6c:7a:8e:e0:f5:56:f8:44:7b:32:03:8a:7b:82:
2d:bd:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:41:17 2025 by rpki-client