Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/7cOXbm1MZRnQRvWXN0mGRdTArNg.roa
File: 7cOXbm1MZRnQRvWXN0mGRdTArNg.roa (raw, json)
Hash identifier: Vj8I0ZSmRIiJfPTCgv9ta2pl0fLR021Ud2RhXquYq6o=
Subject key identifier: ED:C3:97:6E:6D:4C:65:19:D0:46:F5:97:37:49:86:45:D4:C0:AC:D8
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 0DECB665
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/7cOXbm1MZRnQRvWXN0mGRdTArNg.roa
Signing time: Sat 01 Jan 2022 13:56:24 +0000
ROA not before: Sat 01 Jan 2022 13:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 185.190.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233616997 (0xdecb665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jan 1 13:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edc3976e6d4c6519d046f59737498645d4c0acd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:7f:7f:d7:43:e0:4f:34:7e:20:2c:b7:ed:
24:39:3e:3e:95:fa:0a:52:28:0b:00:5a:e7:8a:cd:
6c:38:b1:99:59:c8:5a:ab:4a:34:59:a0:34:24:68:
76:29:9c:2a:8f:1f:5b:0b:71:c4:dd:0a:bc:0a:da:
ba:67:45:b5:73:15:49:26:47:b0:df:c6:48:87:49:
2c:12:09:70:24:c0:36:94:e4:43:1c:b6:8e:75:b5:
c6:f6:39:c5:f6:31:cf:79:15:a4:ea:f9:bb:1d:3a:
65:17:ba:da:79:72:2c:48:74:f8:81:e0:0a:20:08:
87:f3:2b:d7:26:69:c0:bc:28:83:9e:8a:30:fd:11:
8f:03:b3:bd:3b:7e:3c:64:21:0d:2f:fd:ef:f3:af:
e9:d5:af:6a:08:1b:37:85:f9:ee:cb:81:0e:6f:be:
54:b5:04:c9:ac:5e:1c:aa:e4:f7:8d:cd:98:ba:9f:
0e:e5:92:43:0c:1d:10:84:55:02:e4:75:fb:0f:e4:
e8:91:2f:97:76:47:e2:02:3b:40:a7:e7:94:c7:b7:
5e:45:ce:d9:9e:d3:3c:e2:ee:52:aa:79:5c:0f:15:
b1:61:f6:7f:c6:4b:c4:f9:b9:fa:ed:7e:3c:87:fc:
9e:20:06:55:66:f5:a8:0f:ed:a6:25:35:db:35:c2:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:97:6E:6D:4C:65:19:D0:46:F5:97:37:49:86:45:D4:C0:AC:D8
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/7cOXbm1MZRnQRvWXN0mGRdTArNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.18.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:8b:0a:9e:a2:83:d6:63:ef:67:b9:06:1d:2f:0d:54:07:b3:
d6:8a:36:75:af:d9:a6:87:9c:b2:a7:1e:75:6c:62:47:02:5a:
88:af:78:83:0b:80:f2:35:8c:6e:78:80:0c:32:d5:fc:89:b1:
c4:1e:f1:57:30:93:0b:7a:c9:f0:06:87:21:5c:93:74:1c:eb:
69:b8:28:de:6b:c0:72:13:03:08:a8:5b:89:bf:a6:2c:24:3b:
ed:4e:12:40:d0:e5:f8:5a:bb:e3:20:d8:1c:df:72:43:c0:5c:
62:6b:4b:f2:89:cb:b6:fe:cb:28:17:6b:60:e4:70:0f:b8:a8:
0a:61:5b:fd:48:a6:c5:84:57:cd:d6:e8:9a:82:77:31:26:82:
8f:5b:cd:5d:1f:d2:4e:52:70:32:cb:f6:dd:94:2a:47:2f:4f:
16:cf:a9:3c:04:4e:9d:ff:c6:eb:57:ee:cd:6e:a0:e1:82:e2:
04:b2:57:93:80:6f:e9:31:fc:6c:d0:31:7a:bd:b0:ae:d4:15:
10:0b:fc:f5:6c:9d:74:f1:7c:1c:6e:85:2f:7a:92:92:86:c0:
b0:4b:a8:3d:0a:99:8d:5a:f2:43:e9:ad:01:49:34:a1:1c:5b:
84:2d:96:55:c7:23:9a:8e:1a:7c:64:db:93:00:45:ee:49:cb:
bb:2f:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:52 2025 by rpki-client