Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/x7t9pEAjhf9HuU9osAdkAK3BtBY.roa
File: x7t9pEAjhf9HuU9osAdkAK3BtBY.roa (raw, json)
Hash identifier: uaul13vDw2xEPXLirsPm84HqSBGY7ClFitBSkBuEdys=
Subject key identifier: C7:BB:7D:A4:40:23:85:FF:47:B9:4F:68:B0:07:64:00:AD:C1:B4:16
Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065
Certificate serial: 1AB82878
Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/x7t9pEAjhf9HuU9osAdkAK3BtBY.roa
Signing time: Sat 01 Jan 2022 10:03:04 +0000
ROA not before: Sat 01 Jan 2022 10:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60941
IP address blocks: 185.21.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448276600 (0x1ab82878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065
Validity
Not Before: Jan 1 10:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7bb7da4402385ff47b94f68b0076400adc1b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:a7:ea:13:a1:58:94:c6:96:69:9f:f7:d5:
42:af:e0:1d:75:da:1f:7d:f2:d1:da:62:bd:23:18:
09:99:a5:8a:44:e3:8d:7b:27:91:03:92:29:1f:41:
ac:33:a8:16:b2:80:da:89:bb:9f:1d:7e:c2:bc:ab:
ec:cc:2a:c5:9e:c2:45:c6:28:9f:be:30:03:bc:61:
fd:5e:bb:00:12:d1:f1:e3:ff:95:9b:e3:45:1d:87:
f9:91:e4:67:0f:fc:8b:63:98:16:21:a9:60:e3:d4:
5b:3f:6b:27:2c:eb:de:d4:f0:72:f8:15:14:90:5a:
55:ff:63:48:fc:96:d4:cd:2c:1e:d7:2b:1f:80:6b:
91:5c:b6:a6:b3:13:24:5f:34:c7:96:cc:46:87:e0:
5f:dc:4a:f0:a2:7d:97:3c:a1:a5:71:74:a7:fe:78:
9c:2e:60:d4:df:e2:0c:d6:11:dc:30:8a:fe:a1:43:
01:bf:41:9e:1b:c3:72:91:85:a6:c4:2c:a6:ea:ad:
59:7a:64:ba:f8:fe:d6:a1:5b:cf:95:77:e1:d8:7b:
97:67:2c:ee:df:8a:f0:7f:5f:cf:75:54:4b:98:53:
33:1d:40:66:03:39:b9:17:d0:60:8f:71:7c:1d:49:
dd:d7:e5:c8:de:d0:15:ff:73:78:86:ab:e2:1f:07:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BB:7D:A4:40:23:85:FF:47:B9:4F:68:B0:07:64:00:AD:C1:B4:16
X509v3 Authority Key Identifier:
keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/x7t9pEAjhf9HuU9osAdkAK3BtBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:94:b3:86:d2:cd:94:e1:29:53:02:31:5a:ff:0d:50:5b:19:
3b:72:96:8c:63:8b:c5:f0:a8:f9:32:4b:a4:52:0b:92:f4:9f:
a0:1f:e6:fb:61:84:42:90:76:3a:f7:bb:b8:09:f2:0f:cb:17:
32:c7:24:10:2b:8a:cd:dd:61:5f:62:73:75:b1:4e:76:07:86:
25:94:52:0d:b8:c2:31:b1:7c:e1:ac:a9:c0:84:5b:32:e2:cc:
4b:4e:94:ef:8b:12:96:d9:04:ed:4e:32:d1:a4:46:ae:49:99:
2a:7c:90:e2:4a:18:3c:5b:f8:12:ea:2c:34:fb:0c:7b:4d:42:
01:1b:eb:b3:49:4e:3b:06:33:9a:f7:1d:cf:75:f3:95:ac:61:
2b:f5:2a:c4:51:39:9d:a0:83:7e:21:04:5e:67:e6:c2:b0:cf:
56:7b:15:c9:4e:55:86:12:e8:04:a3:3a:07:60:6d:d5:bf:cc:
50:88:57:5b:69:97:25:98:59:74:2d:dd:b1:ce:1e:90:d9:52:
02:1d:3a:c8:61:a9:7c:28:94:b9:9c:7f:72:64:9e:c5:a3:c3:
5e:c8:ca:dd:e4:48:57:5e:7e:1c:eb:7c:c1:25:0c:5e:68:e4:
a8:0f:c9:68:3d:20:17:a4:ee:49:b5:6b:34:37:29:fc:b4:d7:
6d:c9:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:49:57 2025 by rpki-client