Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/p8r6ORWqaVT6AIPFUdyUXR3s3Dw.roa
File: p8r6ORWqaVT6AIPFUdyUXR3s3Dw.roa (raw, json)
Hash identifier: FKlhXr0nDsW1iTi9utGuTd+wCcOu+i5B1YC8FE66fe4=
Subject key identifier: A7:CA:FA:39:15:AA:69:54:FA:00:83:C5:51:DC:94:5D:1D:EC:DC:3C
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 09244161
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/p8r6ORWqaVT6AIPFUdyUXR3s3Dw.roa
Signing time: Sat 01 Jan 2022 01:00:55 +0000
ROA not before: Sat 01 Jan 2022 01:00:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 185.160.4.0/22 maxlen: 24
2a02:d880::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153370977 (0x9244161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Jan 1 01:00:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7cafa3915aa6954fa0083c551dc945d1decdc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:a0:97:56:dc:a6:54:80:e1:36:8f:33:a4:
42:d8:a3:72:d0:0f:f4:6d:24:92:13:9d:64:3f:1a:
54:99:3f:1e:f5:7d:65:f4:48:1e:12:73:b0:2f:eb:
8d:9a:f4:19:98:99:61:63:36:26:1f:c9:20:2b:18:
6e:8d:d1:23:c2:31:2a:31:77:0f:57:85:3a:d5:d9:
84:cf:cd:5f:aa:ca:de:ec:58:b8:8b:77:de:ab:25:
44:b0:34:22:42:0a:6e:fc:b8:3f:50:94:68:ec:37:
ba:de:ff:07:49:77:82:c7:d7:b3:54:97:9b:16:0f:
27:91:22:2f:ba:0a:f9:2d:31:00:41:94:9a:3e:41:
7a:46:8d:08:3b:b2:a5:4e:e0:eb:6b:7e:06:8d:48:
04:9d:c6:55:5b:24:be:4f:b0:ac:03:88:fe:15:fe:
e0:aa:e5:b5:14:2a:f4:05:46:56:36:78:87:a9:67:
f4:65:f4:39:81:90:17:1e:1c:99:7c:13:51:1b:09:
3c:c2:df:e7:ab:32:c0:c3:92:2f:ff:25:db:e3:39:
26:16:ba:3e:ab:94:d9:6f:ad:80:38:0f:2d:c5:45:
f5:28:8e:09:71:80:43:fb:d9:51:da:f6:93:e2:94:
22:d5:ee:91:23:16:09:04:42:67:ee:b8:11:d9:6a:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:FA:39:15:AA:69:54:FA:00:83:C5:51:DC:94:5D:1D:EC:DC:3C
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/p8r6ORWqaVT6AIPFUdyUXR3s3Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.4.0/22
IPv6:
2a02:d880::/32
Signature Algorithm: sha256WithRSAEncryption
6f:ef:02:1e:7e:b6:56:bd:90:d9:ff:63:35:5b:ef:1a:6a:51:
14:2b:68:e7:81:c2:09:7d:8d:08:38:c1:f6:d5:4c:3a:32:ce:
21:2f:d8:17:1d:4b:50:0d:c9:06:97:18:bd:b6:05:9a:d8:e0:
e2:98:82:19:70:cd:14:9f:37:8e:e5:e7:dd:ad:fe:f9:71:c3:
f5:a9:2e:e3:93:03:8a:ef:89:b0:ef:07:39:84:7c:2c:ae:89:
dc:8b:9b:41:74:e3:52:cb:f4:b2:78:0b:92:e5:b0:86:7d:c7:
e3:eb:17:ad:d2:f2:7b:be:60:f8:9a:f7:0f:83:c7:c2:93:c8:
b1:64:2f:f3:84:cc:cb:de:09:50:dc:52:13:a5:5c:8f:ce:dc:
ee:50:94:c5:ab:5d:2c:aa:60:74:98:75:68:70:d2:1c:2e:41:
34:ea:19:a6:b9:76:c6:9d:fe:cb:c1:fb:47:13:0c:6d:8d:84:
d2:25:4d:2b:f4:f1:8d:b7:76:74:76:62:f8:2f:3b:53:30:bd:
c7:44:4d:fc:52:82:55:b3:d3:78:1a:64:96:a0:0e:61:46:d2:
65:96:ef:de:42:35:fb:22:99:8b:f9:2a:26:02:91:3e:e7:59:
d1:1d:f8:e6:01:41:25:63:09:9f:a4:a0:9e:16:88:b2:d3:59:
bf:d6:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:04 2025 by rpki-client