Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/Z3jQTfBMuNA0SYbMVcOUMtRQSOk.roa
File: Z3jQTfBMuNA0SYbMVcOUMtRQSOk.roa (raw, json)
Hash identifier: xKsOT4qTYbw29+BHHOfDtSjIrg/2mSt/1PUHxB1+xrE=
Subject key identifier: 67:78:D0:4D:F0:4C:B8:D0:34:49:86:CC:55:C3:94:32:D4:50:48:E9
Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial: 03D73F9D
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/Z3jQTfBMuNA0SYbMVcOUMtRQSOk.roa
Signing time: Sat 01 Jan 2022 14:54:43 +0000
ROA not before: Sat 01 Jan 2022 14:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203206
IP address blocks: 185.204.101.0/24 maxlen: 24
2a10:8400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64438173 (0x3d73f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Validity
Not Before: Jan 1 14:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6778d04df04cb8d0344986cc55c39432d45048e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:7a:3d:cd:f5:ad:ac:40:44:4e:ae:90:42:
3d:6d:e5:81:c7:8d:ac:e8:04:87:4d:98:d1:a4:d9:
64:e7:b8:5a:a8:5d:a3:2b:e5:61:5a:6e:a6:80:76:
86:f8:aa:7b:ba:b2:f8:b3:74:09:12:2b:5b:62:96:
06:99:ee:43:65:23:3a:09:6a:3b:29:2b:0b:1d:ec:
7f:01:63:0a:97:d7:a0:39:24:bf:9e:a7:26:f6:19:
86:ed:96:03:98:05:bd:57:95:ff:4a:e1:39:93:68:
32:5d:16:bb:7d:7e:41:ee:8d:5f:42:48:ec:0d:b4:
c2:9e:fc:e4:f2:c3:50:3f:b7:ee:d3:56:f3:cb:57:
c0:63:2f:24:af:a0:9b:27:33:22:85:05:b9:fe:ee:
3e:e4:60:34:56:7d:7d:4b:01:5e:a1:38:37:be:97:
f7:45:4a:f5:0b:a9:fe:b0:aa:6d:4f:d0:86:cf:c6:
6f:49:b5:7f:44:91:bd:a0:1c:4e:1b:c2:13:95:49:
27:e3:c7:7f:92:d5:39:c3:59:34:01:7c:ce:e6:3f:
4b:a9:41:a6:e8:3d:71:ef:cf:80:c1:05:5b:b8:76:
71:cb:c5:5a:a9:53:c5:e7:c8:1b:2b:7c:50:39:07:
63:49:7d:40:e0:0c:60:f0:6b:20:f9:18:d9:5c:81:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:D0:4D:F0:4C:B8:D0:34:49:86:CC:55:C3:94:32:D4:50:48:E9
X509v3 Authority Key Identifier:
keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/Z3jQTfBMuNA0SYbMVcOUMtRQSOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.101.0/24
IPv6:
2a10:8400::/29
Signature Algorithm: sha256WithRSAEncryption
68:36:76:b5:6d:3c:95:b8:0e:8a:0d:5e:e5:56:f6:0b:d7:f1:
a9:b0:6a:b5:f3:be:a4:3a:ef:c7:33:42:6d:b7:61:cf:b2:44:
cc:8d:fe:65:ba:e1:3c:f6:88:b8:5f:77:07:c3:df:be:72:93:
26:07:3b:1d:81:83:bc:33:56:31:b8:65:27:61:a7:2a:e1:80:
c4:32:a3:15:6e:54:76:8c:94:03:6d:f1:58:14:4e:6d:3c:c1:
1c:46:b1:73:f6:73:3e:3f:9f:0e:6d:22:af:24:bd:9a:17:a9:
83:51:83:8d:4f:a1:c2:ee:20:ff:cd:72:97:91:05:01:fb:1c:
19:12:cf:51:c4:ba:07:65:ce:40:84:f0:53:1e:d1:15:30:a7:
29:55:2f:3c:7c:0d:b1:35:c6:83:33:6c:af:85:b4:35:9f:8f:
f3:f9:d1:a1:53:c7:01:61:74:ed:fd:3f:6f:39:7f:79:38:22:
03:84:19:05:65:2f:94:6c:35:49:fa:93:ee:ee:c9:12:30:81:
d5:99:62:71:e1:91:57:a8:1f:b5:19:d5:e5:40:0d:e3:3f:1a:
54:b9:27:c4:54:a1:2a:79:81:3a:bd:94:c8:22:e1:cf:ef:93:
8e:cf:f8:ac:f5:09:07:4c:01:a7:1d:3f:9e:e2:44:e9:54:a0:
f4:ed:e9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:33 2025 by rpki-client