Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/RhxO2FknMgezvn2PNYuM_9MfA1Q.roa
File: RhxO2FknMgezvn2PNYuM_9MfA1Q.roa (raw, json)
Hash identifier: TYjcNrNn4K2lRImyANjZNPDk0ZwS7e8InQdAYN3NX7o=
Subject key identifier: 46:1C:4E:D8:59:27:32:07:B3:BE:7D:8F:35:8B:8C:FF:D3:1F:03:54
Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Certificate serial: 1973D5C5
Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/RhxO2FknMgezvn2PNYuM_9MfA1Q.roa
Signing time: Sat 01 Jan 2022 01:56:28 +0000
ROA not before: Sat 01 Jan 2022 01:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204896
IP address blocks: 185.143.148.0/22 maxlen: 22
91.142.112.0/20 maxlen: 20
2a00:17b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427021765 (0x1973d5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779
Validity
Not Before: Jan 1 01:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=461c4ed859273207b3be7d8f358b8cffd31f0354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:af:59:73:5e:38:32:c5:42:4b:d8:c5:fc:
bc:e0:f6:9b:f4:47:d8:96:29:7d:59:76:4e:a2:56:
06:93:ae:a0:4b:67:d8:6d:37:0f:a1:c8:4a:63:cd:
f3:0a:7e:98:de:e8:50:59:db:9e:6f:2b:db:f7:86:
3d:5d:36:fd:40:e5:cd:43:ad:7f:78:3f:a7:03:46:
9e:db:a0:a7:3b:9e:ce:ec:f7:0a:04:15:37:a3:4a:
6a:d8:72:01:39:05:dc:00:3c:aa:76:6d:03:dc:6e:
0c:1c:07:45:80:39:d4:30:44:3d:c0:ed:96:4a:18:
1f:c9:3a:a5:fd:82:1e:fc:40:ca:50:02:4d:99:57:
2d:77:f3:30:7d:62:e1:e2:cf:7b:24:a1:39:09:7d:
15:43:ca:d1:0b:e1:30:c5:a1:fd:9c:a2:47:c7:89:
a5:53:6a:6c:2b:8e:4d:cd:54:6e:83:ee:2c:5b:f9:
a9:19:ba:f3:e3:4e:5d:01:4f:75:a7:64:72:8b:25:
1d:5f:57:ef:94:7f:53:83:ea:cf:a2:7c:c7:89:09:
b8:24:f2:bb:e3:65:b2:c4:ae:0e:80:9b:ad:fa:32:
1f:2f:12:12:e9:f6:f5:e3:df:e1:55:90:22:2d:1f:
b6:94:7d:f5:16:cb:41:e8:77:df:d0:45:b0:a5:81:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:4E:D8:59:27:32:07:B3:BE:7D:8F:35:8B:8C:FF:D3:1F:03:54
X509v3 Authority Key Identifier:
keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/RhxO2FknMgezvn2PNYuM_9MfA1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.112.0/20
185.143.148.0/22
IPv6:
2a00:17b0::/32
Signature Algorithm: sha256WithRSAEncryption
93:9e:59:12:cb:00:70:80:58:67:1e:ac:93:53:88:c9:71:56:
90:cc:8d:fa:8b:2d:57:5a:6f:10:b5:98:b9:f6:f7:00:f4:9c:
87:83:f1:fe:22:06:31:7a:9a:11:8e:0d:c3:62:c3:fa:9d:e5:
40:9b:75:f8:5e:eb:2f:78:69:23:c2:56:77:ef:5f:ed:64:da:
2d:06:d3:9d:fb:b0:ef:cb:4e:d2:0d:3a:f4:35:33:59:f7:a3:
52:41:40:2c:ce:fa:cb:f9:74:37:8e:dc:1d:a1:1e:a5:fc:ad:
ba:ec:d3:32:79:00:2f:66:d0:c7:24:34:e6:cf:1c:8f:af:ad:
9c:a1:e7:cf:30:ac:68:65:15:60:ab:80:57:44:6d:e3:04:2f:
ed:a9:69:16:da:0a:39:27:83:65:bf:0a:c3:7e:45:f4:7f:10:
b7:cf:bc:28:11:c0:9f:a5:48:64:f4:50:c9:3a:fd:92:be:b5:
9f:2e:7e:e5:6c:69:8a:6a:62:04:82:d6:3f:9e:96:b7:9c:d4:
05:52:59:e0:c9:86:84:cc:72:0b:2b:97:e6:44:f2:4d:e0:03:
cf:f3:6c:d9:3f:d4:8a:62:c9:9b:0b:82:b4:06:bf:2d:44:4c:
a8:9a:77:f1:85:79:98:e1:22:dd:bd:32:7f:99:de:75:21:b2:
4e:11:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:27 2025 by rpki-client