Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/51Xxtl1TcKehkapq7R5aANJtuiY.roa
File: 51Xxtl1TcKehkapq7R5aANJtuiY.roa (raw, json)
Hash identifier: GaYWlbq/rJvNd4sMnfkFTRHXX1dppmDu5akDY92z/sU=
Subject key identifier: E7:55:F1:B6:5D:53:70:A7:A1:91:AA:6A:ED:1E:5A:00:D2:6D:BA:26
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 0DB6A33D
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/51Xxtl1TcKehkapq7R5aANJtuiY.roa
Signing time: Sat 01 Jan 2022 08:58:16 +0000
ROA not before: Sat 01 Jan 2022 08:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205315
IP address blocks: 185.222.116.0/24 maxlen: 24
185.222.117.0/24 maxlen: 24
2a0c:3800:ff::/48 maxlen: 48
2a0c:3800::/40 maxlen: 48
2a0c:3800:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230073149 (0xdb6a33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 1 08:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e755f1b65d5370a7a191aa6aed1e5a00d26dba26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:1e:39:16:9e:63:fc:e2:31:7b:ea:41:db:
4f:f3:b4:fd:90:c0:2b:3c:27:c8:60:de:87:3e:5b:
97:69:95:e2:ff:33:1d:88:3f:72:9d:04:31:23:e8:
fa:28:8f:99:b8:8c:c7:90:74:4c:c8:42:e8:ad:83:
76:2d:14:85:87:94:21:0f:ef:ef:95:58:ae:cc:cc:
26:d3:ce:57:3e:b6:a8:a9:ec:20:36:8d:7c:c2:f7:
9f:85:fa:43:13:24:9d:5a:ae:2b:d4:e8:b0:e7:2d:
77:0a:ab:e6:5e:26:56:bf:ff:91:c8:d5:25:d1:07:
2c:14:69:ff:e6:2e:bc:c8:0a:37:f6:e4:93:d6:0b:
e5:c7:af:ec:3e:0d:43:5d:ad:be:60:ec:be:02:75:
38:cf:c3:8f:fa:33:16:a2:a3:c3:28:85:3f:af:bd:
70:90:1b:c0:2a:87:47:01:47:d5:9d:a6:31:49:2c:
9d:fc:42:18:8b:56:84:e6:c3:ed:b5:a3:11:29:7a:
af:c8:19:d0:46:fb:3a:42:56:a4:e8:13:c7:e5:59:
4a:a0:b4:20:80:92:87:be:0a:19:cd:8b:ed:4b:2f:
72:eb:a8:88:03:3d:a0:71:c4:a0:db:e8:88:b3:2b:
90:75:5c:25:03:4d:e5:e5:63:11:34:51:94:1b:57:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:F1:B6:5D:53:70:A7:A1:91:AA:6A:ED:1E:5A:00:D2:6D:BA:26
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/51Xxtl1TcKehkapq7R5aANJtuiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.116.0/23
IPv6:
2a0c:3800::-2a0c:3800:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:23:7c:57:ab:a0:99:f7:f3:0a:9c:b3:2c:69:ef:73:5a:d5:
01:3c:84:10:c0:dc:52:9b:d6:6f:6c:bf:4d:12:b0:ca:01:93:
54:c7:7a:c7:99:df:bc:c6:36:9e:c7:00:a3:9c:52:fe:4c:c3:
15:b2:54:ee:6f:fe:a8:b9:b3:97:73:51:21:04:c0:41:40:5f:
86:4e:40:94:05:e5:33:32:54:f9:14:13:31:0a:25:4b:db:95:
46:8c:3e:ab:0a:b2:4b:60:1f:a7:ac:f4:6b:7d:2f:8c:43:95:
eb:24:b1:b2:65:5b:15:8b:bc:85:90:d4:81:fb:b4:81:49:de:
34:07:ff:c6:89:02:62:d0:bb:be:cf:47:5e:7c:6f:f9:df:4b:
f9:80:16:9a:1d:aa:30:bc:d6:64:9e:69:5d:6d:db:0b:22:53:
bd:4c:66:2f:09:14:d7:4a:ce:66:7a:cc:29:24:d9:c3:9d:13:
e1:69:1b:ba:a9:81:42:65:a5:27:2c:d2:00:cf:34:1d:48:cf:
d8:30:04:50:80:2c:e0:0c:a8:20:88:97:56:29:67:9c:c6:d9:
5e:9c:6d:06:9c:2d:dd:ba:73:9c:c5:7e:2b:91:ed:a8:b9:86:
59:6c:81:82:75:57:d1:b3:ba:73:6b:d6:6e:f1:79:cf:a9:69:
56:84:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:30 2025 by rpki-client