Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/inlComKnG5V__IXWtNVDuxt6XME.roa
File: inlComKnG5V__IXWtNVDuxt6XME.roa (raw, json)
Hash identifier: PuQSemHGWFbpuQBhW+SgbxvuFlWxeJJIFjCpf6HDwgQ=
Subject key identifier: 8A:79:42:A2:62:A7:1B:95:7F:FC:85:D6:B4:D5:43:BB:1B:7A:5C:C1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 3469EA05
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/inlComKnG5V__IXWtNVDuxt6XME.roa
Signing time: Fri 29 Apr 2022 06:08:01 +0000
ROA not before: Fri 29 Apr 2022 06:08:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62451
IP address blocks: 185.35.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879356421 (0x3469ea05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Apr 29 06:08:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a7942a262a71b957ffc85d6b4d543bb1b7a5cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:70:bb:bc:8d:31:d7:9c:77:69:c8:7b:55:
cd:f1:9b:6a:ee:ae:68:67:39:ea:ec:06:37:a8:7e:
b6:18:96:f7:a5:a3:fe:fa:21:e5:cb:20:e4:a8:1b:
36:87:a8:6b:8c:85:af:cb:c2:80:1b:9a:73:48:e6:
84:6c:da:d5:97:fd:fe:a9:5d:12:4e:75:8e:62:3b:
31:bd:a6:ff:b0:f7:f9:e1:b4:2b:60:ca:33:b2:40:
5c:5f:88:e8:a4:fb:da:5c:74:3d:5f:39:18:77:64:
a1:8b:52:66:47:55:59:b0:a5:07:9a:a9:ef:eb:92:
da:ed:08:50:40:ab:5e:d1:47:a8:17:b6:59:5d:fe:
eb:5c:3f:ca:79:79:60:82:d8:5d:d6:42:71:18:ef:
68:ee:7a:8f:49:27:29:d7:df:66:94:8d:bf:2f:bd:
8c:35:02:2c:e9:2b:61:40:c0:c3:62:93:67:57:83:
ca:4f:29:2c:cd:f2:8c:e7:1a:cb:1e:0d:b8:e7:f8:
f0:e3:8a:3b:1f:ae:9a:bf:2a:03:72:7f:be:f9:15:
7c:33:91:f8:6a:31:b4:f8:5e:79:f1:90:f2:b0:83:
ca:51:52:28:8d:3e:65:74:82:27:c7:d2:a0:48:6c:
36:6b:ec:1e:55:b5:4d:d7:64:5c:d8:b8:4b:e1:31:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:42:A2:62:A7:1B:95:7F:FC:85:D6:B4:D5:43:BB:1B:7A:5C:C1
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/inlComKnG5V__IXWtNVDuxt6XME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:66:1b:a9:98:5a:cd:3c:dc:03:8d:2c:26:f9:ea:b2:b5:50:
30:a1:26:b5:8b:f5:32:9c:88:78:82:39:e2:0b:c5:18:ff:cc:
bb:a0:e1:99:42:6f:99:e0:c0:84:84:ef:57:f9:7b:8a:e0:a4:
50:a4:fc:9f:b7:58:e0:77:73:09:ea:49:8e:df:d2:ce:d1:ba:
19:fb:db:42:0a:59:5f:42:2e:47:f9:ba:81:13:da:31:d5:d5:
b6:0f:00:7f:ca:28:6e:53:75:a4:3f:63:01:8b:3b:d8:e3:40:
fb:6b:61:3b:37:ae:18:f1:c8:e6:8c:d5:23:52:29:e7:dd:91:
a0:7b:15:ad:fc:45:00:02:b7:52:2b:14:b2:aa:a8:76:6c:34:
f4:4a:f7:f8:6f:7c:f8:14:41:a0:06:7d:02:80:65:32:3e:6d:
9c:a9:18:0e:f0:82:55:56:ca:3c:12:b2:fa:4e:b2:80:59:86:
b6:ea:b1:b5:cd:2b:50:b2:91:d0:05:f4:4e:30:a8:91:ef:82:
a5:40:e3:62:08:2c:17:2b:8c:a1:3b:c5:2a:4c:f5:b4:30:e4:
79:77:98:98:a0:08:24:25:15:ba:49:c1:a2:21:6e:c0:0a:3b:
ef:fa:b5:79:97:88:f5:27:7c:3c:84:25:5d:4e:3d:54:02:fd:
54:fb:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:42:34 2025 by rpki-client