Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/xN8Az0JhVzRFX2AjzIXnp9OqPO4.roa
File: xN8Az0JhVzRFX2AjzIXnp9OqPO4.roa (raw, json)
Hash identifier: /O3a6QguEXA40C//ZRFdgp6AxwpxUeHxw/4uBQSElLg=
Subject key identifier: C4:DF:00:CF:42:61:57:34:45:5F:60:23:CC:85:E7:A7:D3:AA:3C:EE
Certificate issuer: /CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Certificate serial: 0D40FE7F
Authority key identifier: 3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/xN8Az0JhVzRFX2AjzIXnp9OqPO4.roa
Signing time: Sat 01 Jan 2022 14:00:51 +0000
ROA not before: Sat 01 Jan 2022 14:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57514
IP address blocks: 185.225.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222363263 (0xd40fe7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed79628b5a60ff1489f473be12d6cefdee135e6
Validity
Not Before: Jan 1 14:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4df00cf42615734455f6023cc85e7a7d3aa3cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:a8:8e:3c:7b:2b:01:30:de:e0:67:20:a2:
9c:59:ec:50:f3:2f:41:ec:d6:53:e3:e7:89:16:3f:
8e:11:e9:cb:2a:66:7e:b2:61:cf:0c:bf:42:b2:fb:
f1:5e:27:a6:cb:84:2d:bf:25:f6:8d:85:51:44:4c:
3b:8a:a6:5b:24:82:2d:41:50:65:8e:1a:af:74:35:
29:a4:ae:ac:68:66:b6:d8:7e:f9:58:52:5d:26:82:
fb:c3:52:86:97:70:a1:10:e9:14:34:8b:80:81:82:
d2:4a:62:32:bc:3c:74:4e:3a:f7:28:e0:ec:88:19:
c5:b4:4e:7e:96:ab:6a:5d:8a:89:6e:77:fd:23:08:
1b:f0:a3:a3:b8:b9:d3:76:57:87:62:37:84:13:b6:
92:d5:cb:c5:46:81:8f:45:cb:3a:c3:e5:67:af:63:
63:91:10:95:4b:3d:91:65:6e:9d:bf:78:05:ce:ee:
87:2e:1c:52:56:6f:d4:3a:36:05:60:d6:a7:82:92:
4e:ff:7c:ad:3f:35:5c:c7:06:f7:bf:0f:81:4a:e5:
e0:11:a3:67:2a:df:63:ed:2b:cf:00:80:84:b6:82:
33:0a:67:46:03:82:32:d8:f4:84:3f:2e:95:5c:58:
73:9f:b3:64:06:2f:c3:85:98:64:36:91:dc:76:7d:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DF:00:CF:42:61:57:34:45:5F:60:23:CC:85:E7:A7:D3:AA:3C:EE
X509v3 Authority Key Identifier:
keyid:3E:D7:96:28:B5:A6:0F:F1:48:9F:47:3B:E1:2D:6C:EF:DE:E1:35:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PteWKLWmD_FIn0c74S1s797hNeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/xN8Az0JhVzRFX2AjzIXnp9OqPO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7881d0-943b-4ab5-ad3c-268442bd7999/1/PteWKLWmD_FIn0c74S1s797hNeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.76.0/24
Signature Algorithm: sha256WithRSAEncryption
64:62:e9:c2:20:85:95:f4:47:65:ed:a7:a0:4a:07:49:cf:b1:
86:e9:b0:cb:46:7f:89:c5:5b:03:74:d7:d7:e7:8b:79:df:c4:
d9:4f:19:83:e1:10:e3:fa:c5:a7:56:86:67:03:f7:96:40:5d:
a5:6b:86:ed:ba:4c:6f:bd:8e:df:aa:9c:0e:0e:05:40:a8:8a:
06:43:c2:3d:50:df:30:02:c0:8a:89:0e:9d:88:82:82:82:9a:
f3:ee:a2:3c:f4:1f:f2:e8:b4:91:25:23:db:63:64:e5:5c:9d:
b3:a8:27:ae:bf:04:a0:aa:b9:36:27:3d:51:77:7b:f0:7d:95:
c4:d2:65:ee:3e:fa:70:8a:e5:b9:1b:5d:d1:c5:3f:96:5f:2f:
ee:6f:05:2b:f9:33:16:13:71:9c:11:9b:07:1c:4a:42:2d:45:
aa:64:02:3d:15:9e:55:4f:eb:b7:81:ae:f8:55:f9:c4:bc:61:
44:8b:e1:60:c2:ea:6c:94:1c:32:7a:38:b7:9b:11:c2:a6:2f:
a2:8d:dd:d2:f9:e8:fc:83:8f:4d:2f:3c:66:6b:3a:7d:24:75:
00:84:2b:92:5c:f4:7e:8c:3b:34:44:62:20:22:14:37:56:6e:
92:f8:02:5b:b6:02:d8:2f:4b:e7:f0:23:5c:f8:4e:0e:0b:4a:
85:ad:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:38 2025 by rpki-client