Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/xuzb66FDv95BZ2b5-CF1JOuA4o8.roa
File: xuzb66FDv95BZ2b5-CF1JOuA4o8.roa (raw, json)
Hash identifier: y4uWcNoXQY/Uxisc7oSdPwKKfifgIDLqryCYXD/MxGs=
Subject key identifier: C6:EC:DB:EB:A1:43:BF:DE:41:67:66:F9:F8:21:75:24:EB:80:E2:8F
Certificate issuer: /CN=2205fe638024942555683d765edf7fa93f2e8430
Certificate serial: 03A6F4F1
Authority key identifier: 22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/xuzb66FDv95BZ2b5-CF1JOuA4o8.roa
Signing time: Mon 20 Jun 2022 14:17:45 +0000
ROA not before: Mon 20 Jun 2022 14:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211328
IP address blocks: 185.254.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61273329 (0x3a6f4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2205fe638024942555683d765edf7fa93f2e8430
Validity
Not Before: Jun 20 14:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6ecdbeba143bfde416766f9f8217524eb80e28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:cc:52:64:d6:09:2a:02:4c:63:0b:33:02:
a4:43:32:34:de:b3:80:c0:d1:26:e6:f0:fd:35:a5:
be:ad:1d:63:5c:9d:33:0f:3e:91:28:96:4f:14:e4:
8b:03:27:75:0f:6b:ac:07:93:61:e4:76:9f:0d:be:
b0:9b:87:68:80:72:25:92:b0:15:e6:b3:ac:bc:0a:
98:8b:8b:69:ad:fb:c1:43:6c:a7:c1:95:f6:85:b1:
15:03:e9:90:e4:83:3a:2e:c2:34:ee:0e:9e:f8:ef:
82:5e:85:5f:d7:b0:7b:e5:dc:ab:0f:33:2f:b9:d5:
bd:f3:e0:ca:86:71:92:4e:8e:d8:9b:6d:64:1b:fd:
20:62:1e:c7:80:d3:ab:87:42:df:b3:60:8d:98:bd:
f9:d1:75:94:93:92:a7:6f:48:54:f8:ca:f6:de:31:
5d:8a:e9:7d:67:23:ac:08:9a:6b:23:3c:da:f8:69:
5e:8e:35:cc:c5:0c:97:67:ca:50:c8:cb:f8:a9:59:
c5:73:9e:f2:5d:ae:f6:f8:7e:c3:cd:97:b0:76:f0:
16:c8:0b:fc:b9:2c:58:b7:7c:58:81:6b:be:9d:b4:
88:e2:b2:00:ec:ef:49:27:4c:c4:de:d3:c4:5a:b4:
98:0d:21:93:e0:1e:69:7a:ae:8c:84:25:b0:c8:a7:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EC:DB:EB:A1:43:BF:DE:41:67:66:F9:F8:21:75:24:EB:80:E2:8F
X509v3 Authority Key Identifier:
keyid:22:05:FE:63:80:24:94:25:55:68:3D:76:5E:DF:7F:A9:3F:2E:84:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgX-Y4AklCVVaD12Xt9_qT8uhDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/xuzb66FDv95BZ2b5-CF1JOuA4o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/589a5a-6bdb-40f1-a4f3-84e11e51f134/1/IgX-Y4AklCVVaD12Xt9_qT8uhDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.122.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ef:ec:22:f8:53:bc:be:c8:24:40:d6:fa:5c:3e:9c:33:79:
7b:8c:44:d7:08:16:1b:63:e0:e6:ed:11:7e:37:46:03:a0:3d:
0e:ca:fe:bc:b4:fe:02:be:a9:d3:3c:1f:23:4c:e3:a4:61:e3:
75:48:c0:8b:74:ac:85:d8:32:d3:19:b0:75:c2:6e:2b:9d:7c:
a5:fa:dc:ca:95:2f:71:82:73:64:53:fc:ba:79:15:41:ae:ae:
c3:8a:81:d9:27:d8:16:93:25:02:a4:5d:79:45:b9:67:a7:af:
60:98:b4:03:1a:a0:9e:9e:90:1d:4e:ab:f6:d8:2e:a6:4c:72:
04:9d:91:df:75:35:0b:5f:8f:ed:57:bf:2e:7f:58:b8:e2:f9:
a8:5a:51:6d:55:b1:df:2d:5f:58:74:a8:ba:c8:51:97:7d:48:
54:dc:9b:10:b9:aa:72:14:76:d1:ce:14:db:95:49:4c:12:8b:
e6:db:99:99:99:57:f6:a2:52:c8:06:be:41:02:51:5f:97:94:
fb:aa:61:d1:60:9f:f6:e6:2a:56:e3:cc:d3:15:7f:a6:c2:3a:
88:a3:c7:e6:e9:d6:1b:1c:11:17:49:ea:fa:f3:3a:81:3a:5c:
71:69:e3:37:05:75:25:d4:df:0e:86:7e:57:e3:1c:f7:fe:aa:
7b:c3:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:25 2025 by rpki-client