Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/pTm8N_1ucHYHbTKWAp5-lqbYR7E.roa
File: pTm8N_1ucHYHbTKWAp5-lqbYR7E.roa (raw, json)
Hash identifier: XX/NyXOn9zTyYFER41fagxcl2ZlKZCXP02KwYxJ5Q0M=
Subject key identifier: A5:39:BC:37:FD:6E:70:76:07:6D:32:96:02:9E:7E:96:A6:D8:47:B1
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 0A65111E
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/pTm8N_1ucHYHbTKWAp5-lqbYR7E.roa
Signing time: Sat 01 Jan 2022 10:56:50 +0000
ROA not before: Sat 01 Jan 2022 10:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57809
IP address blocks: 185.222.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174395678 (0xa65111e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jan 1 10:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a539bc37fd6e7076076d3296029e7e96a6d847b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:da:38:e2:d9:fd:88:67:86:7f:e5:c4:48:
f5:a0:ff:1c:bd:bd:dd:38:fe:84:4e:7d:b2:4b:47:
18:2a:62:26:28:0b:5d:c4:28:5a:37:d7:c6:3a:b2:
be:c5:01:1a:df:04:78:6c:c4:22:0c:db:05:70:93:
08:ae:b9:04:1c:7d:44:22:03:ac:fb:92:32:d7:7e:
f7:9c:dc:95:e2:dd:57:5f:91:1e:37:32:a4:c4:62:
9f:76:7b:ec:4f:a8:4a:31:53:e0:95:58:66:a6:56:
f6:7f:e2:9c:32:7c:10:de:d3:c5:28:db:81:6d:f5:
13:16:40:db:fa:92:d3:1c:82:f0:f0:c4:61:23:9f:
24:5a:8c:2e:c6:4b:59:31:c9:2c:81:93:da:f9:9e:
fb:d8:36:8a:82:cf:c5:0a:b9:0b:3c:0c:f0:89:ce:
f2:84:10:9a:e2:2b:7c:9b:47:e3:89:73:a8:0c:cd:
81:1d:21:ec:08:70:1d:11:95:5c:d2:6c:4d:25:92:
22:71:d9:6a:fb:5f:58:08:35:35:d9:ba:8a:eb:84:
67:a1:3a:20:eb:35:58:d5:87:6f:97:43:8d:36:a1:
3d:40:05:2b:1a:8a:f1:d1:31:57:18:fd:b3:58:8f:
81:fb:30:f8:7d:a4:6e:4b:b0:41:93:e8:d3:08:92:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:BC:37:FD:6E:70:76:07:6D:32:96:02:9E:7E:96:A6:D8:47:B1
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/pTm8N_1ucHYHbTKWAp5-lqbYR7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:36:7c:74:79:c7:40:c9:46:3d:a4:95:a6:42:e7:a2:6b:19:
4e:b0:d3:95:41:26:fd:6e:47:9b:2b:c1:71:54:18:23:79:3e:
da:1d:92:53:55:63:10:48:df:3e:42:76:dc:32:fe:f6:2f:b8:
f7:8f:ad:62:ad:41:e2:02:82:fe:3b:86:8b:4d:70:d9:7f:67:
0c:d3:2c:2d:fa:1d:52:9e:c4:04:58:05:03:51:26:de:13:69:
bc:0a:5e:22:fd:87:5b:68:10:f0:2c:5c:90:ad:13:32:17:ce:
df:b9:71:2f:59:2e:b4:4a:3f:7c:50:84:3b:32:45:0e:ad:cd:
65:07:7d:d9:63:91:f5:b4:86:ff:c9:7b:2d:ed:99:0f:b5:7f:
9f:69:46:35:07:cb:0a:1f:32:59:02:0f:78:1c:92:9e:a8:1d:
e6:04:69:09:04:ad:4e:32:fa:fc:0f:88:d3:46:bd:8a:36:74:
23:34:ab:aa:25:f6:52:30:f8:e9:04:c4:bd:2b:e0:9c:09:72:
58:11:18:42:87:9a:e4:ec:5c:9f:83:80:ec:cf:6e:62:a5:c7:
32:12:74:57:a7:45:6e:b0:06:3c:30:a0:85:c0:01:f2:6b:89:
6c:ea:e8:06:33:8e:3e:73:ac:39:4f:c1:9f:af:ae:4e:07:07:
35:cd:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:32:49 2025 by rpki-client