Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/4iQlVi4IhhnIpYQ6ndYJFXI8lIY.roa
File: 4iQlVi4IhhnIpYQ6ndYJFXI8lIY.roa (raw, json)
Hash identifier: Bvpbgtc/mWZRmmk4Vpkr31MtLo6TyQfM5G9tnCLnUmM=
Subject key identifier: E2:24:25:56:2E:08:86:19:C8:A5:84:3A:9D:D6:09:15:72:3C:94:86
Certificate issuer: /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial: 01856E5D69C05CB39A620E4E9FBA73C62D91
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/4iQlVi4IhhnIpYQ6ndYJFXI8lIY.roa
Signing time: Sun 01 Jan 2023 17:24:53 +0000
ROA not before: Sun 01 Jan 2023 17:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35425
IP address blocks: 185.128.221.0/24 maxlen: 24
2a03:9ba0::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:69:c0:5c:b3:9a:62:0e:4e:9f:ba:73:c6:2d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Validity
Not Before: Jan 1 17:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e22425562e088619c8a5843a9dd60915723c9486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:06:f4:e3:b8:a9:2e:60:47:f8:c2:43:48:
38:6a:47:40:94:53:f3:fd:3d:75:42:f0:90:b8:88:
0c:52:ae:a2:50:1d:8e:a3:a0:1d:50:11:dd:dc:a2:
f7:3b:05:d7:74:08:95:59:23:7e:1a:14:7f:15:f4:
d6:f3:d6:b1:92:a1:c8:3d:d0:38:7d:d3:ef:02:f0:
70:82:d1:28:58:d4:6f:c1:00:d3:fb:f8:96:1f:5d:
03:d0:4c:f7:75:10:c6:ad:ec:4d:5c:53:f7:13:57:
ff:28:12:ce:0f:ec:33:18:50:1a:01:f0:20:b5:12:
a7:97:90:72:93:1d:65:38:0f:5e:1f:c4:03:ed:73:
ef:b7:66:d0:32:bb:15:2e:22:28:3b:3c:36:3b:9d:
a9:4d:ab:00:af:ee:86:23:98:39:70:0a:0f:17:c1:
29:0c:b6:cb:a4:6e:08:5e:df:45:23:bf:0a:22:a9:
a9:c7:dd:b4:b8:46:27:61:ef:2a:b2:97:b5:76:15:
88:82:17:17:59:fe:f2:e8:b1:69:a9:8a:fc:ec:ef:
08:91:9b:ee:bf:2a:4e:4e:5d:da:49:61:3f:f2:42:
84:0e:6d:bf:34:32:f0:d2:98:a5:10:18:56:91:e1:
88:7c:fd:15:b6:32:bc:bf:b2:6f:88:75:f5:25:84:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:24:25:56:2E:08:86:19:C8:A5:84:3A:9D:D6:09:15:72:3C:94:86
X509v3 Authority Key Identifier:
keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/4iQlVi4IhhnIpYQ6ndYJFXI8lIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.221.0/24
IPv6:
2a03:9ba0::/40
Signature Algorithm: sha256WithRSAEncryption
10:bb:26:7f:fa:31:5b:17:fb:e8:78:33:8c:dc:6f:16:ab:b5:
31:ed:9d:a7:92:84:9f:b1:b5:95:a1:4f:47:d8:bf:e4:31:e5:
5e:0e:74:e6:8e:5d:a5:7c:d4:8f:c2:60:2f:2b:1e:9c:0b:27:
4d:ba:4f:7c:c5:40:85:98:29:9b:41:f1:56:5e:e8:6e:44:44:
15:cb:89:89:40:5f:73:55:c5:2b:84:92:39:03:34:1c:7f:4b:
4b:ff:26:ba:40:96:4f:0b:a8:b5:d0:7e:00:6d:d7:28:3a:56:
34:6b:c3:6d:ec:8e:b8:af:ec:27:85:8e:8f:a0:5c:e3:4f:7d:
46:62:b8:d7:40:6d:90:d6:86:d7:69:99:73:e1:ec:9f:86:d0:
75:08:e6:7d:42:57:2c:99:34:22:42:0f:80:37:4b:06:5e:96:
91:9f:69:8c:87:9e:dc:3d:f0:aa:ea:76:d0:b6:30:10:eb:f8:
b1:03:09:cb:37:6c:75:4e:76:5a:ea:ed:8b:6f:bf:48:66:a5:
02:b3:dc:8c:95:5a:c7:80:91:26:7f:2a:92:ed:14:8b:74:7c:
d9:b4:35:fe:dc:c2:08:9e:62:33:6c:44:46:e3:3e:f0:ec:aa:
fc:6c:26:06:ff:eb:da:7e:84:08:ab:25:b0:90:c9:a4:d9:af:
0f:40:72:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:54 2025 by rpki-client