Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/fQPs8VZ3bu4ZzE39m3eRHwoM6Ok.roa
File: fQPs8VZ3bu4ZzE39m3eRHwoM6Ok.roa (raw, json)
Hash identifier: 9hdlJDHktsx6HOEYpffPTNAd7LokfnEIcYrYnTHV5Kw=
Subject key identifier: 7D:03:EC:F1:56:77:6E:EE:19:CC:4D:FD:9B:77:91:1F:0A:0C:E8:E9
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 01329E48
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/fQPs8VZ3bu4ZzE39m3eRHwoM6Ok.roa
Signing time: Wed 29 Jun 2022 11:19:58 +0000
ROA not before: Wed 29 Jun 2022 11:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213052
IP address blocks: 185.244.162.0/24 maxlen: 24
2a12:4440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20094536 (0x1329e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Jun 29 11:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d03ecf156776eee19cc4dfd9b77911f0a0ce8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:65:9b:43:6b:a2:72:49:ba:e7:97:30:e4:
55:82:ee:c1:88:da:03:f1:dc:3c:14:fa:c2:0a:1c:
b5:1e:89:94:7a:25:99:31:85:3c:f9:37:14:68:76:
23:b3:3a:90:50:7f:b9:9c:0f:cb:33:60:b3:f7:be:
ea:49:ab:50:c0:29:6b:45:00:0b:ed:2a:54:ef:1a:
d9:6d:e2:f9:c3:bb:e8:40:f9:da:23:15:e1:14:df:
71:e3:e1:d5:81:f4:1e:08:48:79:b8:ac:c7:99:4e:
6b:92:06:15:51:d7:1b:b2:7e:77:e7:b3:74:93:e2:
a4:5e:1e:7d:e7:2e:9e:8a:6e:39:5b:56:9e:91:d5:
fa:30:ec:01:1e:cb:88:ae:0d:be:4c:7a:98:6f:cc:
c5:3e:7a:f1:26:eb:ca:69:e4:b4:98:b6:a0:b6:f8:
ab:c4:8d:c1:52:36:07:4e:c4:c3:2a:e8:22:ff:ee:
20:51:5b:90:d7:c6:3e:ef:11:68:42:5b:ca:86:de:
c0:97:63:da:97:8f:a5:4f:9b:d2:77:44:31:8c:52:
b9:c0:f8:13:a2:b1:f0:e0:93:23:4f:22:e5:74:95:
25:2f:99:4e:72:ed:22:20:72:05:af:76:22:a8:40:
b8:de:1a:f8:d7:9b:c6:d1:27:ee:10:86:14:10:a3:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:EC:F1:56:77:6E:EE:19:CC:4D:FD:9B:77:91:1F:0A:0C:E8:E9
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/fQPs8VZ3bu4ZzE39m3eRHwoM6Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.162.0/24
IPv6:
2a12:4440::/32
Signature Algorithm: sha256WithRSAEncryption
78:6c:03:bd:5a:f0:25:46:18:97:a4:2b:bf:51:8f:8d:f2:25:
0e:68:02:2a:52:4a:e7:c3:dc:68:14:ec:52:bb:1f:23:c5:c5:
ab:da:14:66:06:45:83:e9:e9:5e:dd:a1:73:25:30:90:c8:c3:
31:67:2f:6a:1c:47:f4:05:20:e0:77:54:f4:4d:53:3d:76:9b:
be:d0:c7:09:d6:15:3b:bc:4f:3f:1d:1d:62:ab:c3:58:89:a9:
83:61:8b:d9:f9:4b:d0:60:a4:a9:50:bd:7a:4f:f2:99:42:ff:
25:5c:5f:bc:26:2b:25:bb:9d:f0:c6:c0:ec:40:9b:7e:7f:2f:
bc:a5:a1:89:b7:d2:87:4f:0f:ee:b6:4b:9d:fc:81:07:2c:fa:
bc:c8:41:8f:55:9f:79:39:3c:f5:54:27:ae:6d:5a:37:e6:13:
76:12:bf:33:3f:d4:0c:bb:7c:3a:7a:11:2e:20:42:18:af:d7:
75:c1:59:65:10:45:91:19:d9:c1:0a:1a:9a:f4:13:af:68:36:
9f:a1:18:54:73:1a:b0:96:39:cf:59:72:dd:44:aa:7c:c9:95:
9d:65:41:a8:f5:db:e5:b6:e6:61:8b:10:e8:c0:a7:98:b5:b5:
a7:f0:b2:04:c7:9c:01:a4:02:fe:1b:f7:ea:14:d8:de:5a:eb:
b9:4b:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:37 2025 by rpki-client