Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/7xa5Q-jXO8ki7xBv2gaq1fOiExM.roa
File: 7xa5Q-jXO8ki7xBv2gaq1fOiExM.roa (raw, json)
Hash identifier: /SyxTxmYdEeuZ6UfLke754iMbbWMa82fJ/l1GhpQG1g=
Subject key identifier: EF:16:B9:43:E8:D7:3B:C9:22:EF:10:6F:DA:06:AA:D5:F3:A2:13:13
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 02B8B2E9
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/7xa5Q-jXO8ki7xBv2gaq1fOiExM.roa
Signing time: Sat 01 Jan 2022 10:04:25 +0000
ROA not before: Sat 01 Jan 2022 10:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16167
IP address blocks: 185.243.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45658857 (0x2b8b2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Jan 1 10:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef16b943e8d73bc922ef106fda06aad5f3a21313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:95:a8:5d:47:f0:0f:ed:32:5d:00:20:ea:
d2:17:23:01:88:25:a0:ec:56:3a:b1:68:0b:08:30:
7f:27:a7:12:53:59:5a:05:e7:ae:99:6f:62:32:9c:
5c:66:ec:2d:77:0a:50:f8:74:3e:bf:2b:03:87:82:
f2:13:4d:dd:98:05:5f:33:7b:73:7b:cd:ba:ff:95:
ff:41:e4:82:b3:5b:ba:f9:fc:5a:c4:9d:c9:c2:b3:
12:9d:61:f1:0e:00:48:60:76:e8:14:52:57:04:03:
9b:47:8e:43:3a:9c:cd:dc:8b:bf:f6:e0:a2:8c:f1:
08:91:fe:94:ab:58:2e:65:df:45:21:da:f1:5b:7a:
23:17:3c:5a:1b:e6:7a:87:2a:8c:13:b3:14:d9:2b:
f1:de:19:bb:30:16:ea:6b:ee:78:a9:f1:2d:03:d3:
98:64:00:75:c3:c6:6e:11:20:a0:14:c6:51:31:62:
10:60:27:82:2e:7d:b4:8a:78:60:79:ee:5d:5a:89:
cc:37:d0:8e:b5:77:51:37:31:3c:0c:72:e7:94:9b:
16:9d:5f:a0:b8:dd:be:d2:b5:7c:57:73:ac:16:9e:
8f:66:6f:fa:c8:9a:4c:b1:de:1b:60:65:c0:6b:03:
e7:19:1a:d0:2a:20:b3:59:f7:dc:12:d1:ab:f6:02:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:B9:43:E8:D7:3B:C9:22:EF:10:6F:DA:06:AA:D5:F3:A2:13:13
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/7xa5Q-jXO8ki7xBv2gaq1fOiExM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:53:e3:79:7b:bd:79:25:5d:7e:ee:e4:b7:93:29:6a:7c:b4:
98:1f:6f:45:2c:bc:5d:45:d9:3f:c2:54:ba:52:4a:3c:05:2d:
9b:9c:b9:78:f6:aa:99:06:b0:0c:a7:42:68:bc:8d:eb:6c:4f:
94:2d:da:0a:df:4a:40:97:23:17:7e:e4:32:27:0a:3e:68:da:
c1:df:da:37:44:1d:7e:4a:ae:1e:23:21:f3:ce:38:89:b2:2d:
49:bd:e1:ac:ae:3b:4b:fb:29:eb:f2:8e:76:e8:ac:9e:d1:49:
b3:37:de:6b:49:2e:d5:30:be:4c:b8:7f:39:87:e4:ee:f0:ec:
b4:c9:20:b3:ee:63:45:c4:af:f0:c8:1f:e4:51:f5:28:47:cd:
5b:28:0f:4d:45:02:c1:30:d0:12:b8:71:14:7d:de:23:06:08:
ae:5c:89:cf:51:81:e7:4d:eb:c3:49:57:63:28:67:f1:fb:3c:
86:1e:da:8b:ba:81:cf:8b:41:52:12:44:1d:fc:ce:e9:23:63:
69:22:94:85:17:d7:7c:1a:24:6a:c7:e9:3b:04:af:87:c7:83:
ca:b7:ad:80:2b:32:c7:4c:34:88:87:00:1a:66:0f:45:f3:00:
39:33:a0:da:03:89:b0:2b:11:6e:97:9f:e6:cd:f0:c8:68:17:
cd:57:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:42:06 2025 by rpki-client