Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/PxvB7ooEEexiHW46yyrJXKXQ3Lo.roa
File: PxvB7ooEEexiHW46yyrJXKXQ3Lo.roa (raw, json)
Hash identifier: FVZnVjRKvJmuVL2eCmLKbP+d9Qzm8bt//ybOOyLMid0=
Subject key identifier: 3F:1B:C1:EE:8A:04:11:EC:62:1D:6E:3A:CB:2A:C9:5C:A5:D0:DC:BA
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 0186C0B3EA567CD4E5AF0437AE64E740D203
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/PxvB7ooEEexiHW46yyrJXKXQ3Lo.roa
Signing time: Wed 08 Mar 2023 10:11:01 +0000
ROA not before: Wed 08 Mar 2023 10:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204732
IP address blocks: 185.63.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:b3:ea:56:7c:d4:e5:af:04:37:ae:64:e7:40:d2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Mar 8 10:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f1bc1ee8a0411ec621d6e3acb2ac95ca5d0dcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:f0:6c:56:50:fa:48:a3:bd:ca:5b:67:64:
c4:a3:ee:2a:ec:4c:6d:ca:0a:c1:5a:a5:2a:d5:1f:
fa:fc:c3:05:be:d4:33:56:bd:da:fd:9f:72:73:c1:
9d:d7:99:cc:06:54:5a:8e:5f:e7:bd:2b:8b:db:d5:
19:4f:fb:b6:e4:11:9a:cc:43:1f:cd:eb:f2:1b:c9:
08:0a:3c:f2:51:e3:a0:c1:d0:a7:72:d2:c1:a4:0f:
88:36:d8:31:b1:0d:5f:a9:6e:e7:93:c5:d2:f3:f2:
c5:49:d0:e7:d2:20:81:a2:b7:2d:76:e0:f5:c1:cd:
46:bf:8c:c7:07:67:6e:3b:f0:fb:e8:99:29:03:f9:
e4:54:d1:36:5c:c1:b7:93:32:bd:e3:f7:58:7c:31:
ac:a2:dd:8f:53:a7:e0:23:ee:58:71:6d:35:34:db:
d4:f4:ea:75:06:36:b0:9e:a1:f5:15:b4:72:9e:63:
94:b9:9f:81:f9:48:60:01:ac:90:d4:0a:6d:79:6f:
69:fa:3d:ee:ce:b9:7b:33:f1:68:40:55:54:3c:00:
59:74:24:96:2c:62:fc:cc:8a:01:1a:e6:fa:bb:ca:
b9:0d:f9:81:c9:ec:2f:be:3e:4e:bb:ed:0c:e1:86:
99:dd:65:02:35:09:dd:26:9a:34:00:43:39:e9:50:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:C1:EE:8A:04:11:EC:62:1D:6E:3A:CB:2A:C9:5C:A5:D0:DC:BA
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/PxvB7ooEEexiHW46yyrJXKXQ3Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:cc:09:55:9c:b4:72:4f:53:ae:03:bc:d4:cd:11:5f:75:d1:
bb:7d:e3:55:54:f7:02:5e:aa:55:65:07:26:d4:f8:ff:a0:d4:
fa:4c:b0:40:71:71:b3:38:37:63:bf:7f:9f:69:4d:b8:69:72:
a3:b1:ed:55:08:27:b9:2f:42:19:28:3c:58:55:0a:8e:df:e6:
2f:c4:0a:a1:90:01:92:87:23:6b:0e:7b:8b:fd:61:4f:5d:6c:
7e:e6:76:b9:35:33:53:eb:e1:83:f3:8f:b5:5d:e0:e3:6a:01:
68:46:49:73:91:ee:ee:dd:b5:a5:7c:88:56:c0:e5:aa:b9:42:
75:66:e6:85:8e:fa:75:03:76:e2:01:80:88:7a:8e:54:da:ef:
49:d6:d6:ce:4c:3a:79:04:7a:19:7d:37:34:d0:af:fc:d9:d5:
93:92:1c:68:ed:c1:70:36:9d:17:8b:26:32:51:93:e6:f7:ff:
2d:a8:df:ad:7e:d1:c8:9b:c5:6a:30:fb:36:72:6c:83:77:86:
bc:98:57:33:bf:8f:ab:ac:99:9e:12:51:05:b1:46:14:b7:57:
37:53:59:67:c5:6d:d4:58:a5:b4:3f:78:64:f3:90:80:2a:13:
15:8c:33:62:a9:0e:53:0b:e1:fd:e9:03:e2:89:31:39:e2:b1:
77:57:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:28 2025 by rpki-client