Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/m_FZN9ckRFcz-MtuQMISQATCP5E.roa
File: m_FZN9ckRFcz-MtuQMISQATCP5E.roa (raw, json)
Hash identifier: 9JFtCen/6iQJzwgn1G5Fso8eht39LqeFYpwEihTJuO8=
Subject key identifier: 9B:F1:59:37:D7:24:44:57:33:F8:CB:6E:40:C2:12:40:04:C2:3F:91
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 01C37173
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/m_FZN9ckRFcz-MtuQMISQATCP5E.roa
Signing time: Sat 01 Jan 2022 05:55:25 +0000
ROA not before: Sat 01 Jan 2022 05:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204576
IP address blocks: 185.75.221.0/24 maxlen: 24
2a0d:a640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29585779 (0x1c37173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jan 1 05:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bf15937d724445733f8cb6e40c2124004c23f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:90:df:29:9d:c8:5d:ce:7c:95:04:2e:fd:
90:a9:d8:e3:8c:38:05:9b:04:dc:a0:33:3a:ec:f9:
56:ee:d2:d7:b6:c8:7b:43:27:5c:84:cb:2d:ff:b5:
1a:67:76:f2:fe:5a:d0:3c:fc:34:0f:b5:6a:62:bf:
0f:45:6b:8f:2a:72:3c:68:85:b7:61:a1:3a:34:c5:
f4:47:7b:b1:90:7c:ac:49:a4:af:e5:14:5b:c8:c5:
2b:e7:77:6f:fa:3d:60:a8:77:9c:06:af:86:16:8b:
d5:cf:90:9f:84:91:7a:c4:ff:2e:35:07:99:ec:07:
09:ef:a3:0d:36:e2:d2:66:12:e6:ac:70:2c:3e:c6:
ca:c1:86:4f:f3:08:4f:42:77:70:53:d4:c4:6f:c7:
40:48:f7:10:d5:a9:4a:71:3e:87:05:04:aa:71:48:
04:8b:59:37:97:b3:55:9e:25:13:23:df:b8:dd:fc:
69:cf:a7:67:b2:c6:06:34:18:c8:4c:37:ab:91:57:
e8:1b:d1:07:2a:e2:14:b2:2a:8e:4f:00:f0:80:23:
f2:36:aa:e2:3b:e5:da:ff:81:d9:c0:b3:c6:ce:84:
66:e2:4f:46:87:7c:59:99:1d:95:c3:83:d4:20:f6:
5c:c0:0f:2e:96:13:6e:83:4c:f7:29:bf:fb:5e:9f:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:59:37:D7:24:44:57:33:F8:CB:6E:40:C2:12:40:04:C2:3F:91
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/m_FZN9ckRFcz-MtuQMISQATCP5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.221.0/24
IPv6:
2a0d:a640::/29
Signature Algorithm: sha256WithRSAEncryption
ab:a4:cd:b6:d5:a4:6f:e0:ad:ff:e5:19:23:d5:d1:bd:42:4e:
df:c1:17:f1:e4:40:d8:5e:ed:18:b6:f4:59:34:ff:2b:c9:6d:
ed:ca:f9:6b:6a:fe:bb:bb:23:ba:99:72:8c:2e:fb:41:98:08:
d0:ab:89:1d:3d:4d:ae:1a:d1:cd:90:e3:81:60:87:29:45:94:
46:2c:00:32:d1:f6:69:45:c5:6d:8e:43:fd:55:df:84:5c:66:
44:0b:8c:b2:74:c3:90:9e:01:c0:fe:e5:57:43:a1:ab:19:22:
f3:08:04:69:78:73:67:67:0e:37:16:88:85:93:ea:b4:e9:67:
7e:b0:7e:8e:31:09:56:00:74:d5:f5:71:76:22:4d:51:0f:8a:
1e:f8:db:7a:07:06:53:7b:ca:bf:c3:1f:0d:68:63:93:a8:0d:
68:1f:03:3f:99:ea:d9:6f:7d:d8:03:00:86:ca:0f:ba:ad:21:
3a:19:b1:22:9c:c8:4f:ca:90:37:58:0b:6d:f0:36:7e:54:ab:
30:54:35:29:1e:4b:1d:b7:94:a9:43:97:1b:c9:c3:4e:ab:a4:
bb:87:52:19:da:83:27:46:54:24:74:18:42:19:88:ba:b4:44:
5e:14:2b:2b:e9:f4:32:16:56:0c:c8:31:48:4c:b7:0f:92:24:
73:5c:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:54 2025 by rpki-client