Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/xKUfbfdn0ZmFyKU1T5L0tG5vsIo.roa
File: xKUfbfdn0ZmFyKU1T5L0tG5vsIo.roa (raw, json)
Hash identifier: qhiYw9XcTVKqbK8C0bDnPIVMxWsVhIMWZAB8uIzlnsw=
Subject key identifier: C4:A5:1F:6D:F7:67:D1:99:85:C8:A5:35:4F:92:F4:B4:6E:6F:B0:8A
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 52F9
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/xKUfbfdn0ZmFyKU1T5L0tG5vsIo.roa
Signing time: Wed 18 May 2022 05:31:32 +0000
ROA not before: Wed 18 May 2022 05:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31549
IP address blocks: 185.110.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21241 (0x52f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: May 18 05:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4a51f6df767d19985c8a5354f92f4b46e6fb08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:ca:f5:ab:26:17:53:40:44:9f:17:ae:25:
64:19:bc:64:37:7b:e5:45:c6:4f:18:73:ea:e8:05:
f6:04:30:a1:67:6f:20:e8:d1:1d:d0:94:dd:1e:08:
88:3d:e9:4c:8d:eb:7c:22:c3:d8:85:4d:a8:5c:bf:
03:5f:a9:40:fb:7a:a7:4c:97:72:62:8c:00:63:f5:
54:ba:d7:47:cc:93:20:1a:28:35:d3:d6:34:17:5c:
df:72:09:98:4e:48:e7:2d:ad:6b:e5:75:09:cf:67:
5c:30:7d:80:2a:65:9e:e9:8b:71:db:7c:d7:ed:69:
53:b7:2f:17:8a:ff:f9:34:2f:ec:6c:f9:02:b7:36:
df:62:3a:58:39:e7:54:ba:09:fe:af:54:24:8f:3d:
44:5f:dc:6a:0c:79:5c:01:75:ef:e3:d8:df:d0:21:
72:8f:ca:5b:25:cc:45:25:77:f8:c6:a7:b8:3e:f3:
80:c5:52:cd:2b:f9:ee:9e:62:3e:0c:b8:91:1a:4b:
f1:4d:3d:ac:09:0a:21:ed:ea:18:37:16:4a:d2:6f:
59:ca:e5:11:c7:a0:af:12:8b:78:da:9a:93:59:1c:
51:7a:d8:75:93:a7:cf:af:f9:a3:4a:f5:30:ce:aa:
f6:ba:52:b1:7d:56:49:0e:2f:6f:4c:38:77:af:a2:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A5:1F:6D:F7:67:D1:99:85:C8:A5:35:4F:92:F4:B4:6E:6F:B0:8A
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/xKUfbfdn0ZmFyKU1T5L0tG5vsIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.244.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fb:44:86:6d:77:3e:d7:11:d3:78:18:1a:01:b3:05:74:a3:
8d:26:90:63:58:e7:22:94:79:94:0d:39:e0:33:93:8f:d2:02:
fb:98:6b:87:1c:f6:1d:c9:2b:7a:9c:ba:33:55:55:a6:8e:f1:
03:92:93:00:a0:8d:3d:49:72:b4:7e:6a:80:29:b0:fd:d9:79:
05:45:fa:f8:54:d5:01:86:84:08:83:e2:89:d5:84:87:b1:56:
7a:31:a5:93:fe:0e:58:22:57:10:dd:ad:5a:a2:c2:bd:d8:ff:
37:c4:88:48:42:c4:f2:48:6c:07:b1:1e:cf:6a:95:dc:db:71:
d2:72:1c:16:87:f5:43:52:9f:60:cb:5e:a1:17:f6:07:8c:0d:
82:14:07:24:eb:e4:be:80:bb:94:fd:81:bb:fe:70:b8:6f:4b:
86:4a:ca:ff:52:b4:a5:c3:62:d1:53:fe:4d:62:d6:a6:f3:c1:
8d:12:e4:5c:5f:98:28:7b:fe:8c:52:d9:b2:db:cf:56:ed:42:
00:af:ce:57:a4:05:db:52:b7:89:52:37:fe:84:af:5c:0d:e0:
5f:f6:89:b1:22:58:ad:05:e3:d5:2a:62:da:4f:66:e1:a4:29:
40:10:8f:86:90:8f:80:95:44:5b:62:4f:35:60:d8:ac:53:f9:
3d:af:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:52 2025 by rpki-client