Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/agXIzO7-Kot4qzlX91zT-xulyVw.roa
File: agXIzO7-Kot4qzlX91zT-xulyVw.roa (raw, json)
Hash identifier: 99c6e7p2sW0YZDDoCUOeQafdGdKA+FuTb+cupbYisas=
Subject key identifier: 6A:05:C8:CC:EE:FE:2A:8B:78:AB:39:57:F7:5C:D3:FB:1B:A5:C9:5C
Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Certificate serial: 05854760
Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/agXIzO7-Kot4qzlX91zT-xulyVw.roa
Signing time: Sat 01 Jan 2022 00:56:26 +0000
ROA not before: Sat 01 Jan 2022 00:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20634
IP address blocks: 185.213.56.0/22 maxlen: 22
2a0b:83c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92620640 (0x5854760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6
Validity
Not Before: Jan 1 00:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a05c8cceefe2a8b78ab3957f75cd3fb1ba5c95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:d5:6a:14:02:81:a3:db:c9:db:d6:58:44:
21:24:e7:4e:8c:28:bd:d5:cb:ff:27:54:1d:a3:f4:
aa:63:de:26:a9:89:61:e2:8a:e3:8f:fa:ab:e0:dd:
43:27:28:e0:c1:27:61:b0:98:fe:20:2d:eb:11:9e:
fe:fd:b7:93:38:25:04:9e:5a:a9:b9:65:ec:a0:9c:
73:e4:cc:67:d1:b8:bc:96:35:db:da:72:19:9e:15:
a4:91:b5:11:94:16:e3:3f:92:32:48:b1:33:66:bf:
2d:5c:00:62:51:92:c4:bb:de:4f:a8:de:ba:15:d7:
7b:96:30:69:95:4d:08:00:bc:b0:e2:53:ea:47:d5:
75:27:2e:fa:21:d3:57:34:cd:23:03:61:ba:73:4b:
07:b2:31:cc:fa:e8:3b:38:a2:ce:71:6e:54:5d:9a:
0e:f4:53:86:c1:be:29:39:46:dd:6f:d7:d7:7a:2f:
8a:a2:5c:f4:12:e6:b8:b3:8f:57:a8:eb:f4:02:89:
e4:1f:bf:03:60:f1:b9:2c:e3:31:50:00:e0:0f:0d:
b6:30:b3:80:9e:b7:36:11:46:5f:6b:8c:d9:bd:7c:
4c:88:30:ee:61:3e:01:f1:9a:e7:13:3f:6a:9a:27:
3b:a9:9e:a2:11:78:78:0d:05:b4:ee:44:b0:d4:57:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:C8:CC:EE:FE:2A:8B:78:AB:39:57:F7:5C:D3:FB:1B:A5:C9:5C
X509v3 Authority Key Identifier:
keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/agXIzO7-Kot4qzlX91zT-xulyVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.56.0/22
IPv6:
2a0b:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:0c:20:a1:e8:fb:fa:b6:1b:3c:7e:df:84:d3:ce:bb:49:71:
68:cd:dc:6c:24:2b:fc:92:84:40:58:35:81:a9:d0:80:23:86:
bb:f1:94:66:91:10:07:66:df:98:d1:7f:96:7e:e8:09:23:13:
ac:02:4a:7a:b1:98:8c:a2:2a:e1:dc:f9:4d:fe:09:49:5e:97:
31:08:6b:9b:63:a5:85:1f:92:43:08:c7:52:a3:eb:43:c6:48:
f4:7c:ef:ef:f6:b6:8e:bf:59:81:5d:78:97:fd:46:db:94:92:
e8:8e:fe:6d:e3:8f:f6:26:a6:a6:01:05:00:cd:e1:b3:e0:ef:
09:ce:1c:28:49:41:00:42:d8:c1:c3:f8:9d:32:d9:09:bc:40:
1c:25:1a:67:77:1e:f9:b6:17:85:aa:59:76:1f:43:be:53:a1:
28:00:e6:96:a6:87:3b:8e:a2:86:6d:c1:37:92:c2:ca:6b:af:
8c:09:72:11:fc:6a:ca:06:dc:55:97:82:82:7f:10:ff:b4:8f:
5f:c8:c0:71:c1:2a:fc:94:4c:4b:ac:a6:b6:b4:e6:22:92:0b:
c8:84:74:0f:5f:de:b6:7e:ef:2e:de:16:fb:eb:44:76:98:9c:
00:76:cd:8e:b2:8d:e6:94:bf:34:f9:27:6c:71:1e:45:46:8b:
1b:5d:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:19:32 2025 by rpki-client