Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/XfFWZTyEDxTjmyg42FE3-Kw6Qdc.roa
File: XfFWZTyEDxTjmyg42FE3-Kw6Qdc.roa (raw, json)
Hash identifier: 6noKGMlk1p7ou3cqYNmpehTG4OGRHiq5pbmrrEkIWgQ=
Subject key identifier: 5D:F1:56:65:3C:84:0F:14:E3:9B:28:38:D8:51:37:F8:AC:3A:41:D7
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 0ADDFF54
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/XfFWZTyEDxTjmyg42FE3-Kw6Qdc.roa
Signing time: Sat 01 Jan 2022 08:56:08 +0000
ROA not before: Sat 01 Jan 2022 08:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 185.41.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182320980 (0xaddff54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Jan 1 08:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5df156653c840f14e39b2838d85137f8ac3a41d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:5d:d6:62:bf:50:75:cc:2a:88:df:d6:8d:
bd:03:40:4e:d5:61:30:b2:d1:a7:3b:4c:f8:cf:c8:
b9:0a:8e:2d:6c:e6:70:ea:8a:dd:18:58:b4:8f:e5:
22:3e:40:dc:6c:14:f9:df:8a:5c:35:cc:74:3b:b9:
3e:b5:56:71:75:9e:8b:40:a2:6f:54:31:80:d9:36:
2d:64:c8:6d:dc:e1:1e:58:9d:22:24:1d:39:c4:5b:
79:34:42:07:6e:d7:bb:23:09:b7:91:51:46:9a:ea:
d0:74:c6:bd:5b:64:df:bb:7b:af:d5:5d:b7:a9:1b:
e6:32:23:83:3a:3b:11:fa:80:76:8d:a6:b2:2b:2d:
63:57:13:1a:b3:03:68:f5:48:34:a9:c7:4e:76:a6:
d1:37:40:81:67:cc:f6:7b:73:df:56:45:68:f2:c5:
bc:63:8f:84:a2:a8:f0:56:58:1f:63:62:dc:8c:15:
7d:19:90:c5:91:c4:53:3c:9a:ad:1c:e9:7e:b2:15:
a3:88:61:93:d3:e8:53:fd:e1:7b:3f:8b:61:ce:eb:
19:da:b9:33:97:01:c4:ad:e3:51:b7:6b:18:85:25:
90:f8:2f:c7:06:17:8c:8e:6e:7f:5f:e3:be:47:8d:
7a:4d:d0:a9:0b:37:e2:0a:3f:58:16:dc:ca:11:b0:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F1:56:65:3C:84:0F:14:E3:9B:28:38:D8:51:37:F8:AC:3A:41:D7
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/XfFWZTyEDxTjmyg42FE3-Kw6Qdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.124.0/22
Signature Algorithm: sha256WithRSAEncryption
21:3f:e2:63:ea:0a:e3:1c:e6:d0:72:e1:b3:0f:6b:c7:33:4a:
71:b2:30:75:ae:50:5a:5b:01:df:84:fc:a4:3e:69:2e:5c:5f:
ee:21:af:58:3d:4d:6e:33:1b:53:fb:2b:c2:0f:44:a3:b0:c5:
2e:a9:81:ab:56:b0:92:30:1f:df:fb:86:9e:bb:83:d1:a1:69:
a2:aa:1b:27:d7:83:29:63:c5:44:85:9e:a7:60:37:51:21:3e:
4d:d4:33:84:e4:32:c8:e4:40:2b:8c:14:c5:6b:b8:f2:3b:27:
93:cf:a8:43:4e:d7:9f:c1:9a:97:d7:c9:cd:39:4b:bb:23:08:
14:ce:26:85:1b:ac:73:56:f7:b7:27:0d:99:e2:f7:ac:20:b8:
fd:f1:e9:5e:46:00:bb:ed:dc:0e:53:85:fc:ba:a4:46:2e:42:
e7:89:1e:22:21:09:03:41:2e:a7:93:9a:f8:0e:f1:75:1e:3c:
5d:c8:96:eb:a7:3c:36:c0:b5:e2:30:e2:5b:4c:c4:f9:ae:65:
bb:2f:24:70:88:d7:89:92:0c:03:5b:8d:b5:00:ed:80:28:0a:
8c:a3:b1:2b:d9:dd:c6:22:35:a6:69:e8:7a:97:7a:ad:0f:57:
31:a4:a2:7e:15:9b:4a:65:b3:a3:bf:0a:12:41:d0:dd:22:57:
36:0a:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:08 2025 by rpki-client