Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/pcFEn8P6R7HamUmqBKIfjUrhaEI.roa
File: pcFEn8P6R7HamUmqBKIfjUrhaEI.roa (raw, json)
Hash identifier: 7pSgQJ13QSnLEHYVOKbaTOCHI2XKsVOyC2Biz9952j8=
Subject key identifier: A5:C1:44:9F:C3:FA:47:B1:DA:99:49:AA:04:A2:1F:8D:4A:E1:68:42
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 37AE7831
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/pcFEn8P6R7HamUmqBKIfjUrhaEI.roa
Signing time: Sat 01 Jan 2022 04:59:25 +0000
ROA not before: Sat 01 Jan 2022 04:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206734
IP address blocks: 185.36.98.0/24 maxlen: 24
185.36.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934180913 (0x37ae7831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jan 1 04:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5c1449fc3fa47b1da9949aa04a21f8d4ae16842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:c8:e5:d4:0d:cf:68:ee:1a:69:91:01:23:
44:53:77:6b:02:37:75:35:86:30:b1:da:5f:45:d9:
63:f4:c6:16:99:79:70:71:ba:35:0a:7a:3f:a1:52:
22:d8:c6:60:d8:06:2e:b6:fc:c8:7a:c3:15:4b:a3:
4c:c6:e7:52:18:21:5c:b9:33:77:72:2b:8e:da:13:
d6:e8:a6:9a:43:ab:48:a5:da:5d:6a:ca:f9:73:0d:
15:bb:e7:06:3f:c5:06:84:45:29:4a:df:17:87:ce:
89:51:43:0d:48:d1:af:f8:0b:17:8e:74:75:0d:3c:
3b:e8:e1:a8:5b:0c:01:c4:28:44:bc:ee:59:ce:62:
56:82:ff:f0:c1:90:95:59:3c:0c:c0:fd:b8:6b:57:
c7:77:0f:e9:89:9c:12:61:60:65:58:69:5a:e5:f7:
4a:d9:44:9f:61:2d:a9:43:c3:3b:fa:f9:bc:3e:5a:
21:56:82:9c:94:92:aa:4b:6c:04:4e:e4:57:c5:8d:
93:51:84:66:03:5f:68:8d:c7:22:94:11:8c:91:36:
c0:f3:07:3e:ae:db:c6:52:19:75:37:96:59:2b:3d:
30:08:5b:2b:34:8f:5c:c6:94:eb:fe:a9:bd:42:46:
9c:81:b3:b8:e6:56:8b:6d:c3:16:90:b7:b1:39:0b:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:44:9F:C3:FA:47:B1:DA:99:49:AA:04:A2:1F:8D:4A:E1:68:42
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/pcFEn8P6R7HamUmqBKIfjUrhaEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.96.0/24
185.36.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:08:e4:7f:c1:2f:af:0c:4d:ca:bd:48:79:07:1e:c0:2f:70:
47:53:54:ac:a5:be:bc:be:ac:35:e7:58:6a:a6:1f:7f:72:2b:
06:0b:65:60:5f:1e:17:c9:c3:bf:31:3b:d3:25:e8:28:26:07:
4f:c8:f9:48:c5:83:18:41:bd:2e:5e:a5:f3:bf:e8:72:0c:44:
0e:d5:65:a5:b5:4f:dd:68:d5:d5:a2:0d:33:98:33:7c:b4:49:
b9:1c:6c:85:bb:7d:1e:15:2b:db:5c:98:d9:b1:ad:be:f0:62:
75:e1:59:87:a7:c1:f9:3d:8c:c7:99:b6:35:49:37:0d:b0:f7:
72:51:a7:5b:28:17:0c:14:26:49:30:98:dd:65:92:79:75:66:
5f:c1:e0:d2:22:e3:6f:04:39:72:d2:65:58:a5:38:de:e9:64:
68:58:36:df:33:2c:b5:34:df:43:fb:ed:95:36:a8:89:d8:4f:
32:4a:a6:b0:21:03:11:6f:d8:4a:08:bd:98:9f:a7:48:23:92:
ad:57:77:d6:4d:97:e7:5c:a4:d5:11:00:fc:78:2c:86:8a:40:
a5:dd:45:28:4a:4b:49:03:b0:dd:57:29:b5:a3:21:50:96:9a:
fc:2d:d1:26:b1:04:43:41:fe:9e:25:1c:87:fe:5f:bb:29:be:
39:00:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:15:52 2025 by rpki-client