Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa
File: r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa (raw, json)
Hash identifier: rsbOyuNDkaRuakE/BdIspVRS/mzeb73VCwIR+7KumBU=
Subject key identifier: AF:95:F6:2B:0A:FC:0D:82:4B:74:5A:5F:21:F1:A9:79:89:07:20:9B
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 043FA705
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa
Signing time: Sat 01 Jan 2022 16:02:16 +0000
ROA not before: Sat 01 Jan 2022 16:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207715
IP address blocks: 185.229.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71280389 (0x43fa705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jan 1 16:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af95f62b0afc0d824b745a5f21f1a9798907209b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:39:1c:aa:56:de:1e:0b:18:e7:8a:06:2e:
16:cf:d5:5a:a7:50:f5:ac:dd:7d:40:56:95:ff:9f:
e7:38:e9:ea:83:8e:8a:0b:2f:36:6b:36:c6:81:4a:
a2:82:28:9c:4d:23:c0:d9:6d:1a:c1:91:56:9b:43:
e5:2e:4b:b3:cb:6e:c4:4c:36:b4:7d:78:e6:67:78:
02:ca:cc:45:8c:0e:e1:ea:e1:e4:82:60:c5:40:d3:
f8:56:34:de:11:63:b0:25:14:37:11:7f:78:9f:62:
84:78:24:d1:6f:2b:89:fe:b8:df:02:ba:e3:36:c8:
17:84:96:21:7a:2b:bc:c5:db:8d:d4:ad:3d:47:25:
7b:77:66:0a:86:95:6c:5e:ad:ce:4a:08:54:dd:75:
99:d7:d8:d5:23:37:33:21:82:02:82:fb:34:d6:47:
b9:09:f2:c9:84:0d:33:76:5f:ae:23:8a:e1:91:b3:
32:41:cf:8c:01:e8:ea:2f:a7:2a:2a:a0:64:cd:f2:
1e:0f:c4:a1:99:e9:03:c8:1d:83:80:cc:72:92:f8:
cf:af:4d:d6:8e:67:b9:d9:5f:a5:5d:b7:9d:87:e1:
74:78:31:f6:87:15:7f:e8:42:18:88:ca:75:da:de:
6e:38:37:8f:ba:3c:0a:51:8b:ca:04:89:4e:36:3a:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:95:F6:2B:0A:FC:0D:82:4B:74:5A:5F:21:F1:A9:79:89:07:20:9B
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/r5X2Kwr8DYJLdFpfIfGpeYkHIJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ff:55:6f:7b:cb:35:81:02:1a:14:76:2d:02:4e:15:99:70:
bd:4e:ef:ed:58:42:27:e3:5d:69:26:f7:e7:4f:7d:bd:eb:5a:
50:37:3b:a7:f0:f0:a6:85:8a:c1:03:4e:64:3a:10:58:20:08:
52:0b:e3:12:9d:5f:5c:94:ef:de:44:b1:80:89:ba:23:ba:d1:
3f:ff:5a:53:45:34:ba:79:e4:07:47:27:27:a1:1d:60:f0:5c:
99:45:34:84:b7:7f:bd:4e:6a:18:75:66:f8:ee:7f:24:a5:da:
81:53:6c:30:7e:88:1a:47:b3:7e:7e:a6:81:81:39:9f:c6:7c:
5e:d3:77:07:59:b4:fe:0a:ea:f6:6f:14:78:4d:0a:10:1d:76:
f4:8c:a7:29:0e:c6:e4:56:fd:99:18:2d:84:93:3d:fc:d3:6a:
88:3d:d0:03:3e:7d:9c:c2:2f:a3:db:74:c2:c7:b2:d6:e6:22:
3e:05:e4:d7:df:50:c6:47:69:e3:18:d4:d4:b4:9c:f5:16:5a:
a7:62:99:78:84:05:fc:fd:45:8a:96:92:16:98:de:77:5f:f7:
94:5b:c3:76:a7:42:a5:9a:3e:5a:4a:8c:13:78:a9:71:93:30:
ef:fa:ae:23:c4:05:28:77:a5:f6:c6:38:d4:03:ca:ae:42:51:
08:2e:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:58 2025 by rpki-client