Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/4InULqXEEhPojyyJU0wYQpOVH3U.roa
File: 4InULqXEEhPojyyJU0wYQpOVH3U.roa (raw, json)
Hash identifier: aT1fF4hobCeuYuMoy2sbSyuae9O0HK7j22QrUSEWpIY=
Subject key identifier: E0:89:D4:2E:A5:C4:12:13:E8:8F:2C:89:53:4C:18:42:93:95:1F:75
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 01856EF431C1C3E4387DFD7C6BEB726DEE22
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/4InULqXEEhPojyyJU0wYQpOVH3U.roa
Signing time: Sun 01 Jan 2023 20:09:35 +0000
ROA not before: Sun 01 Jan 2023 20:09:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44384
IP address blocks: 92.61.192.0/20 maxlen: 20
185.111.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:31:c1:c3:e4:38:7d:fd:7c:6b:eb:72:6d:ee:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Jan 1 20:09:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e089d42ea5c41213e88f2c89534c184293951f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:c1:f2:1c:11:9f:97:75:80:2b:a2:d2:63:
0e:31:0c:f1:ac:66:23:e4:1c:dd:6d:0d:c6:e2:78:
5e:9a:e5:91:47:05:3d:3b:54:3a:96:b6:bc:66:f3:
70:e6:27:f8:c8:93:f5:71:d4:a2:5d:24:62:eb:75:
9f:bd:84:2f:a5:80:1c:29:9d:6f:5e:47:7e:ff:a6:
81:d9:6f:d9:ee:47:ee:8c:53:15:d5:4b:1f:30:73:
2e:a1:a0:ea:0a:c6:f9:fa:9e:e2:f2:ff:d3:23:5e:
bc:da:71:3e:22:dc:04:c2:74:b2:48:4f:11:b5:85:
14:a0:83:f0:27:25:46:50:4b:c7:a9:98:8d:db:3c:
ee:32:fd:a3:9a:8b:d4:8f:63:7d:51:0c:51:ef:22:
26:d5:0e:e1:bc:2f:5b:4c:77:d8:5b:f7:3c:58:05:
eb:fb:ed:b9:c3:f5:a9:3e:8b:5b:64:db:f1:aa:74:
2c:53:4f:3e:af:32:fb:97:81:c5:eb:2e:08:9a:e2:
83:39:c3:04:55:ed:52:b8:b2:39:ab:4e:fe:72:2a:
44:43:28:fa:72:18:23:0f:f0:bc:25:70:e1:2c:53:
77:bf:7b:6c:65:cb:a0:7a:79:3c:e7:12:a7:a1:bb:
df:73:f5:73:18:98:ea:71:93:cc:85:c7:61:3e:8a:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:D4:2E:A5:C4:12:13:E8:8F:2C:89:53:4C:18:42:93:95:1F:75
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/4InULqXEEhPojyyJU0wYQpOVH3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.192.0/20
185.111.140.0/22
Signature Algorithm: sha256WithRSAEncryption
61:6a:43:77:1f:78:18:a7:cf:61:95:b0:ef:be:01:f5:41:b4:
d6:83:d1:79:a2:74:33:a4:2d:a9:ca:ca:b8:c8:c2:f5:67:5a:
ed:7c:f0:0e:98:3b:21:22:c1:0a:3c:9a:d8:8e:8a:1f:9a:a6:
a2:a1:f6:50:57:a8:10:7b:34:60:31:b5:f1:f2:51:a4:8a:de:
76:a8:bf:e4:24:dd:5b:99:fa:80:21:f7:8e:d3:13:7a:47:52:
71:a6:1f:b8:ea:da:c6:af:3f:91:18:ec:50:15:c3:d5:16:19:
8d:74:fd:2b:a1:83:a1:05:24:01:0e:66:ae:c0:47:63:24:11:
60:02:9d:1d:9c:eb:1e:17:0b:fd:22:05:09:d8:fd:d1:a1:b2:
59:b1:d6:27:ee:d5:d2:f3:e9:5c:b7:9b:e8:f7:88:69:cb:75:
60:44:ba:3a:6a:17:ea:6f:0a:1b:7b:db:c9:49:cd:80:e9:f9:
5c:7a:8c:ba:56:f3:11:37:20:d3:1c:50:39:f2:1c:44:61:9a:
98:ed:9b:04:96:50:25:a3:49:bb:0e:72:e8:c7:ce:55:3b:0f:
a0:c0:ed:2f:36:72:8b:f8:9b:4a:5a:c0:5c:da:52:75:ab:20:
5c:44:a2:f4:93:33:1c:3c:37:5e:ec:0c:8c:d2:d5:26:1f:7a:
60:cc:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:23 2025 by rpki-client