Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/a3EpX4BSPZarM1GsaeUEurFPxOw.roa
File: a3EpX4BSPZarM1GsaeUEurFPxOw.roa (raw, json)
Hash identifier: zJBUfFbU/DpfAUQ1UHHAlggzdxEf8GtgPk+6eJccp/k=
Subject key identifier: 6B:71:29:5F:80:52:3D:96:AB:33:51:AC:69:E5:04:BA:B1:4F:C4:EC
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 092A7FE1
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/a3EpX4BSPZarM1GsaeUEurFPxOw.roa
Signing time: Sat 01 Jan 2022 00:55:56 +0000
ROA not before: Sat 01 Jan 2022 00:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205269
IP address blocks: 185.247.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153780193 (0x92a7fe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Jan 1 00:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b71295f80523d96ab3351ac69e504bab14fc4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:41:bf:41:c0:8e:a4:69:41:1f:78:e1:45:
c1:40:77:7b:69:26:7b:f5:27:c5:07:62:05:2f:b4:
92:d4:bb:8a:2e:24:b8:01:d0:e5:0f:ca:70:fb:bd:
4a:74:11:b9:b9:36:fb:ca:ba:a0:51:0b:6e:75:04:
1d:ab:f1:8b:51:c0:8d:8d:f9:1f:02:71:59:c1:e3:
bc:82:7b:03:ae:00:b1:0b:18:61:d2:9e:64:43:a7:
5d:d9:84:2d:93:38:b3:38:eb:2c:17:52:97:32:90:
bb:8b:ff:ba:65:f7:7e:57:31:2d:dd:6d:e9:dc:19:
da:e0:e5:06:42:7a:58:77:46:d0:19:48:7b:ce:90:
eb:5b:85:df:25:6f:f5:ca:6a:c3:18:8c:5c:37:08:
31:91:0d:32:55:cd:82:93:56:66:77:15:e8:82:21:
82:f9:90:41:04:f1:a3:4a:6d:96:61:54:4a:24:02:
8f:dc:f2:62:8c:20:04:f8:8d:ad:3e:60:dc:eb:d6:
8d:d2:4d:8c:f7:f0:be:5c:48:c1:bc:c5:cd:52:06:
be:a8:b0:6b:54:db:17:c6:ec:72:83:81:c9:b0:e1:
f5:a2:5b:88:c0:91:f0:20:b8:85:4a:32:0b:50:2a:
cc:2f:66:89:e3:23:3a:29:55:df:82:23:d6:74:92:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:71:29:5F:80:52:3D:96:AB:33:51:AC:69:E5:04:BA:B1:4F:C4:EC
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/a3EpX4BSPZarM1GsaeUEurFPxOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:eb:41:37:c4:02:49:9b:20:be:31:34:f2:b9:9c:f1:98:6d:
fd:96:e3:17:5b:92:4e:ac:67:8f:e4:dc:07:91:e5:5c:73:72:
34:1c:59:f0:ae:d0:ec:8a:dc:a4:3c:7f:98:ae:35:df:7f:08:
52:ec:39:c9:be:bb:6c:4f:60:e9:9f:52:48:f0:45:f8:cd:36:
a4:e8:34:b4:94:1f:b4:62:51:95:54:a6:3e:d0:30:f4:02:f0:
5d:24:37:8a:09:40:4d:69:c5:31:7b:6c:b8:24:8d:70:d8:61:
d9:a1:f4:6b:9d:c3:0d:67:9e:3c:10:43:d6:ec:35:d7:3e:e0:
5c:12:08:37:1b:54:4a:e9:3e:93:e3:4f:20:a0:e1:c3:b9:10:
1a:37:7a:bf:98:6e:77:fe:ca:22:17:08:a5:41:55:7e:c9:08:
c5:4e:3b:83:fa:9d:8e:80:e9:18:30:84:19:c9:79:cf:ef:b3:
71:c2:4a:27:b1:a0:2d:52:07:fa:9a:a4:f6:ee:68:cf:ad:24:
83:50:4b:bc:6f:da:fc:ed:6d:a5:07:3d:a7:21:8e:62:5e:fb:
10:6e:39:f3:0a:39:cd:54:8b:51:a5:3e:3d:c3:87:5d:41:79:
9a:13:39:94:a1:ce:90:be:fd:1c:04:5f:d8:28:19:20:8d:71:
f1:bf:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:14 2025 by rpki-client