Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/xEwm5Uf4HVq42XMCOCDDtY3qjTE.roa
File: xEwm5Uf4HVq42XMCOCDDtY3qjTE.roa (raw, json)
Hash identifier: iw4T37N1EeSBOZb0hKOwfR44Js70tQWMg+Zo+lJavqM=
Subject key identifier: C4:4C:26:E5:47:F8:1D:5A:B8:D9:73:02:38:20:C3:B5:8D:EA:8D:31
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 047D9E9A
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/xEwm5Uf4HVq42XMCOCDDtY3qjTE.roa
Signing time: Sat 01 Jan 2022 09:02:04 +0000
ROA not before: Sat 01 Jan 2022 09:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203684
IP address blocks: 185.186.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75341466 (0x47d9e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 1 09:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c44c26e547f81d5ab8d973023820c3b58dea8d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:85:7d:3a:db:39:00:a3:5a:0d:1d:8f:4b:
b1:32:c6:e6:c8:5c:57:01:b2:95:60:5a:b8:af:2c:
5d:b5:3a:0b:8e:fa:6e:6a:b1:9c:5e:5a:90:42:55:
50:df:e8:6d:dc:c4:86:6b:89:ff:f1:a0:00:d5:7c:
8a:85:0b:8b:15:d6:16:6d:57:d5:46:65:1a:3e:cf:
c6:21:bd:1d:b8:2f:c6:7d:c7:11:9c:44:23:8d:25:
c3:b2:ed:10:3b:f9:8a:16:c0:dd:c2:cc:f4:69:d6:
5a:ca:90:f8:e1:33:31:e0:3d:85:c8:f6:9a:fe:33:
8d:77:6d:68:2d:45:7a:bd:98:0c:67:97:f4:1f:eb:
50:61:2a:c8:2b:0f:42:53:4e:40:9e:ff:4e:ec:d9:
5e:cc:a1:ec:56:1c:ad:70:26:8d:86:72:d6:61:fa:
1a:c4:e6:32:f0:7c:b6:1a:7d:77:75:05:21:58:74:
08:b9:93:90:83:44:74:9b:24:b4:cc:a2:7f:8c:cd:
3a:5c:0d:42:4f:a0:e9:42:1b:2b:70:9c:3e:63:c5:
9c:76:f9:54:b7:ef:79:36:00:c8:63:78:e9:58:57:
0b:6c:05:4f:74:f8:d2:51:5c:76:e0:c6:db:fb:c0:
88:ea:2a:48:f0:cf:69:0f:19:b1:33:ad:11:74:91:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:26:E5:47:F8:1D:5A:B8:D9:73:02:38:20:C3:B5:8D:EA:8D:31
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/xEwm5Uf4HVq42XMCOCDDtY3qjTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:35:14:ff:b1:85:57:07:4b:75:c6:0c:2f:fd:92:f5:3c:0b:
13:78:e2:30:92:0d:de:3e:5d:b2:db:36:a4:04:62:d8:3d:7b:
8d:9a:22:14:60:17:45:85:f2:f7:a7:ee:4d:eb:25:24:8b:f1:
22:f7:fd:cf:5a:09:03:33:3a:80:1d:e4:1b:75:5f:38:96:5f:
2b:48:c9:de:fa:70:e3:ab:9b:6f:d4:5a:ae:35:ab:bc:70:74:
aa:a8:48:f0:57:ff:99:b2:8f:e9:04:d5:51:31:4f:ac:6a:8a:
7c:30:60:c1:a5:44:d1:a2:d5:c8:5d:18:0d:32:84:e9:55:a1:
2a:b8:6b:a5:76:b0:2a:33:45:82:8c:1a:43:85:4a:c7:26:59:
5e:c4:9e:51:17:8f:0a:f5:ff:a3:f8:64:bb:5c:d2:25:7d:2e:
93:f2:04:35:71:42:72:46:ce:af:c4:4a:a7:c2:bc:5d:9e:67:
91:fe:78:a8:12:44:70:d4:bc:17:aa:36:13:71:e1:b1:8d:e5:
0b:73:24:44:6f:da:94:73:7b:5e:7d:48:1c:18:93:dc:54:c5:
49:a4:c7:c1:25:53:3c:7b:a5:70:a1:21:74:fe:ea:14:b9:f8:
19:22:7e:d8:00:a3:47:33:fa:15:aa:07:36:da:a6:af:17:8a:
f0:49:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:46 2025 by rpki-client