Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/Dq1YZNseV6lJfTEcnwPRu2mZhdc.roa
File: Dq1YZNseV6lJfTEcnwPRu2mZhdc.roa (raw, json)
Hash identifier: QKMOw2U2WSP/fpoKn469D2M/FiIuMgWLhCu4kKzml5M=
Subject key identifier: 0E:AD:58:64:DB:1E:57:A9:49:7D:31:1C:9F:03:D1:BB:69:99:85:D7
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 0EA8E81C
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/Dq1YZNseV6lJfTEcnwPRu2mZhdc.roa
Signing time: Sat 01 Jan 2022 00:52:02 +0000
ROA not before: Sat 01 Jan 2022 00:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57866
IP address blocks: 185.114.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245950492 (0xea8e81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Jan 1 00:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ead5864db1e57a9497d311c9f03d1bb699985d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:ad:9b:79:1f:d4:03:06:bb:32:63:98:ad:
01:89:50:9f:b8:bd:e5:14:d2:d1:9e:5f:54:49:c8:
25:75:7f:fe:ad:2b:2a:a2:f7:b6:7b:3e:62:a9:27:
cd:28:44:8f:7b:02:a6:f9:3f:00:e6:89:1e:2a:f7:
28:ea:79:ae:dc:11:a0:f3:09:bd:6a:83:cd:1c:81:
5c:38:30:d3:7b:dd:1b:7a:f0:5e:31:ac:f5:17:c4:
50:b6:6d:d3:98:d7:61:4f:fa:49:e3:c9:45:29:3c:
ea:c8:e3:bf:d5:d3:e5:c8:24:a3:7b:4e:dd:49:b3:
c0:ae:11:44:0f:21:a5:18:b7:e2:5d:c4:e5:36:97:
b3:94:a0:99:99:23:3b:a6:ea:ff:89:02:3a:eb:f9:
11:f1:bd:fa:0e:c2:29:08:a3:d3:32:81:31:e1:96:
f3:bc:02:9e:d4:31:43:f9:91:e9:9e:b3:b9:a4:d0:
9d:3b:e7:2a:2e:f1:f1:26:ba:ba:de:83:80:ec:27:
88:34:47:9a:5f:95:f6:71:b0:c6:15:e7:23:41:e7:
a4:36:fc:ef:0f:91:c7:1d:f9:57:42:a7:ee:3f:40:
d0:d8:ff:59:8f:c7:66:67:70:49:db:ba:75:f8:36:
35:eb:8e:cf:63:e4:86:66:64:e0:df:39:47:9e:cd:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:58:64:DB:1E:57:A9:49:7D:31:1C:9F:03:D1:BB:69:99:85:D7
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/Dq1YZNseV6lJfTEcnwPRu2mZhdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:66:40:6a:f3:4b:fc:cd:4c:5b:aa:6c:a2:fe:fa:f2:84:f7:
17:d8:f2:ae:44:57:bd:be:61:8c:de:be:05:34:6e:0c:44:29:
f4:9f:cb:5a:76:ae:fb:84:23:1f:b8:e7:84:1e:c6:86:f7:14:
98:36:3c:87:34:a5:2e:f2:03:f1:ca:e4:af:6d:e5:a7:1e:87:
65:06:6c:7b:cf:26:f6:b7:18:9d:4c:9e:81:43:e3:98:a7:39:
0f:e3:eb:d2:f4:23:16:53:ac:63:e0:75:6d:28:6a:64:b5:ea:
ce:b0:91:2c:73:fe:f3:86:24:fa:50:bd:6c:cc:04:62:82:2c:
3a:6d:be:9e:58:9a:cb:60:c7:ee:42:d3:29:1e:23:13:b1:1b:
95:1d:a6:f0:08:1d:52:6b:95:c3:aa:2f:e1:53:e6:74:9b:67:
07:8d:e0:69:53:c1:2f:68:0d:0a:54:15:9f:5c:98:ab:d8:70:
70:ad:d7:23:cb:02:6f:e9:6e:50:be:1e:75:64:e0:3e:35:a6:
25:fd:82:d3:d4:bc:1a:c3:cb:2e:dc:06:8e:cc:24:e0:04:15:
6a:cc:70:74:c2:f1:87:89:a5:c4:29:59:6f:2f:8c:20:c2:c5:
17:ed:7d:dc:b7:21:42:a4:41:ae:8c:ef:8a:3c:a2:02:ff:6a:
d9:36:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:54 2025 by rpki-client