Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/tgVJwsxzQ8T3fIVt-n2GN74gwFY.roa
File: tgVJwsxzQ8T3fIVt-n2GN74gwFY.roa (raw, json)
Hash identifier: i2DX7odXQ+TZIqa1rNOgKDMpUjOukYjrvjUtKhdWS0o=
Subject key identifier: B6:05:49:C2:CC:73:43:C4:F7:7C:85:6D:FA:7D:86:37:BE:20:C0:56
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0185724C6897DDD4828D3CCB79237063DCCD
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/tgVJwsxzQ8T3fIVt-n2GN74gwFY.roa
Signing time: Mon 02 Jan 2023 11:44:48 +0000
ROA not before: Mon 02 Jan 2023 11:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210135
IP address blocks: 185.221.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:68:97:dd:d4:82:8d:3c:cb:79:23:70:63:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 2 11:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b60549c2cc7343c4f77c856dfa7d8637be20c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:3e:06:95:54:58:02:9d:19:0f:de:28:06:
5a:c4:23:b9:a5:eb:1e:48:03:4a:c1:51:73:95:56:
75:05:76:fd:f1:42:33:2c:25:e2:22:13:a9:94:db:
35:61:ae:a6:37:dc:0c:1f:94:d6:a7:f1:d4:22:04:
11:a9:ff:a1:61:ce:47:e5:5d:16:bb:ba:c5:06:13:
b1:9f:8b:92:78:58:c8:a9:79:fb:ad:a6:85:d2:d6:
08:92:ef:d9:81:db:84:24:42:4e:b6:f1:b9:0a:44:
26:3e:26:7f:86:09:cd:73:03:68:d0:c9:a8:bf:28:
60:c2:28:be:b1:c6:71:37:92:16:5a:62:cb:41:50:
85:38:f2:d4:39:42:ec:e7:77:44:b7:18:e4:0c:ae:
52:d7:4d:16:53:b1:73:34:f0:15:14:76:8a:e4:c8:
eb:1d:72:f4:c2:f6:9f:85:98:33:6a:a9:c3:cc:e5:
3c:71:93:6a:fc:c6:e1:99:9c:d1:c9:53:7f:db:50:
34:d3:93:0d:df:71:f5:8d:72:7f:76:13:25:b7:34:
a6:45:c9:8b:5f:22:98:3e:42:62:13:c8:72:50:02:
28:0e:dd:b0:9b:e7:d0:4a:e4:c7:ab:b7:3c:f0:79:
52:02:65:46:04:6f:49:b0:65:e8:1b:d0:37:31:4c:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:49:C2:CC:73:43:C4:F7:7C:85:6D:FA:7D:86:37:BE:20:C0:56
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/tgVJwsxzQ8T3fIVt-n2GN74gwFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1f:30:37:5d:8e:54:60:04:25:f0:76:d4:69:fb:55:29:43:
fa:c9:2c:ab:8f:f4:17:1c:e2:2c:05:92:9a:56:9d:ad:0e:29:
21:6d:e3:25:d7:94:2e:fb:11:37:8e:2c:59:ed:35:e0:f7:9b:
e3:f6:ae:8c:9f:88:32:8c:f3:f5:75:3d:de:c0:ed:4e:4b:dc:
4d:13:03:aa:59:e7:a5:10:b7:06:b6:d5:27:04:a8:c0:03:f9:
d8:c1:e7:ea:a4:24:b9:01:c8:47:f9:65:26:00:da:a0:20:0e:
eb:12:06:b0:7b:60:88:f4:cb:15:f9:2a:97:fd:6a:71:99:47:
e2:af:02:ee:1e:36:24:13:48:7d:4a:14:61:96:95:4e:a0:d3:
9f:95:15:fc:0c:8b:18:92:af:79:9e:1d:a5:eb:86:9e:9b:7a:
4d:16:4c:9a:87:fa:93:bc:31:9b:07:68:0e:de:90:9d:8a:8c:
25:61:af:93:e0:1e:d1:95:a7:cb:af:bd:76:8d:63:dd:2b:e8:
af:01:90:21:ac:2c:c5:88:49:66:b3:59:e8:66:49:d0:9c:ab:
59:62:30:14:1c:45:72:f3:dc:39:f6:c6:0c:ac:a3:10:c9:74:
61:11:37:ec:6c:9b:fc:7f:f1:5c:e4:8f:e3:a6:67:35:c6:f4:
93:ad:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:20:50 2025 by rpki-client