Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/XI01jR8HReOSttWdsSrj10oGKAg.roa
File: XI01jR8HReOSttWdsSrj10oGKAg.roa (raw, json)
Hash identifier: 0EZPA/SmDBoa1CTPDMC5crf6C7otjKA26hIXMb8O6SY=
Subject key identifier: 5C:8D:35:8D:1F:07:45:E3:92:B6:D5:9D:B1:2A:E3:D7:4A:06:28:08
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 34211A0D
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/XI01jR8HReOSttWdsSrj10oGKAg.roa
Signing time: Fri 04 Mar 2022 10:28:10 +0000
ROA not before: Fri 04 Mar 2022 10:28:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24643
IP address blocks: 185.72.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874584589 (0x34211a0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Mar 4 10:28:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c8d358d1f0745e392b6d59db12ae3d74a062808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:85:df:1a:97:54:cd:97:75:1f:73:d2:a7:
e9:f7:c8:22:f3:02:81:6f:91:24:40:10:d6:0d:5b:
64:57:88:d6:e8:13:a5:5a:60:89:ed:9e:c7:fc:17:
d8:c6:d9:0c:06:cd:63:21:57:14:89:34:f4:5e:d6:
89:26:7e:03:ba:8d:14:57:59:65:92:7f:59:ff:a5:
9e:04:84:14:fb:d0:98:5d:c8:87:92:b9:da:a4:9a:
b8:fb:97:07:f1:06:06:b3:12:8a:e7:07:1f:38:4e:
03:08:e2:eb:42:11:28:5a:95:7e:a7:64:3e:cc:e0:
1e:82:10:f6:80:f1:c3:d1:6d:af:2a:7e:1b:7d:3e:
99:f2:c4:5d:3f:ca:fd:5d:b6:e6:50:60:5a:92:45:
eb:c8:66:1f:2a:57:35:ef:7e:12:fe:6e:bf:0d:8f:
5e:6d:d3:ba:fd:bc:25:c9:02:09:85:88:e0:54:61:
7f:fe:9f:df:2b:52:c5:23:ea:df:6f:9f:91:0a:0c:
92:2b:0d:b9:9d:05:84:68:69:43:6e:d5:8a:9f:95:
4d:4c:5a:3d:6e:95:4a:ce:16:05:d9:e3:61:a7:4d:
f5:fd:d4:ae:0c:5f:e8:f7:fc:85:f4:bb:23:6c:77:
cb:cd:a9:75:3c:6b:de:31:2d:37:fa:e2:e8:9e:1b:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:35:8D:1F:07:45:E3:92:B6:D5:9D:B1:2A:E3:D7:4A:06:28:08
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/XI01jR8HReOSttWdsSrj10oGKAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.122.0/24
Signature Algorithm: sha256WithRSAEncryption
18:83:d2:b9:32:49:a2:9d:86:da:68:49:ec:ae:bf:0b:92:b9:
b8:8f:72:6c:d0:d4:79:bd:24:4d:47:4b:ef:d4:c0:4a:84:48:
95:85:4e:19:19:b2:a8:fa:77:c1:42:8d:a2:94:65:7f:a0:a0:
a9:98:94:e7:b1:f2:80:2c:8f:d0:cf:a5:ea:e9:98:49:8d:77:
aa:e9:95:b8:a7:62:c7:cd:36:04:f8:6e:be:5e:cf:e8:9f:d4:
16:bf:71:18:4e:fb:07:46:0e:92:02:91:42:a8:6b:4a:da:a4:
bc:fc:67:d6:8c:05:5b:a8:e6:df:bd:74:5f:8d:a9:3e:6b:3f:
17:36:36:d5:0f:29:34:f3:e6:13:bc:21:db:f0:de:37:38:8c:
34:fb:12:af:83:ac:c5:53:34:77:22:91:f5:53:f2:de:6f:8e:
86:db:b8:5c:f3:f7:c7:ef:5f:95:f1:73:1e:d2:5a:cb:f8:36:
52:c7:79:dc:55:67:80:1a:b7:25:37:d3:a0:a4:95:53:70:31:
e2:fd:66:25:b4:2e:2e:9b:01:ec:01:98:71:7a:76:93:dd:f8:
9d:3a:52:0b:c8:7b:7b:c1:56:93:a7:cf:e2:a1:e4:11:4d:5f:
75:df:8a:90:ac:82:11:e6:be:e8:b0:bc:f1:c5:a6:98:39:28:
56:24:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:44 2025 by rpki-client