Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/f9h5VQqJOD2Xn0Z4lU3blC3Pr7E.roa
File: f9h5VQqJOD2Xn0Z4lU3blC3Pr7E.roa (raw, json)
Hash identifier: zP2lGzYLIBllqWeQBWnSnv8KvZ8m5FJJ4ovtQBkeZHE=
Subject key identifier: 7F:D8:79:55:0A:89:38:3D:97:9F:46:78:95:4D:DB:94:2D:CF:AF:B1
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 06F885BC
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/f9h5VQqJOD2Xn0Z4lU3blC3Pr7E.roa
Signing time: Sat 01 Jan 2022 03:54:22 +0000
ROA not before: Sat 01 Jan 2022 03:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29413
IP address blocks: 185.214.120.0/22 maxlen: 22
2a0b:9940::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116950460 (0x6f885bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Jan 1 03:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fd879550a89383d979f4678954ddb942dcfafb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:16:3c:39:45:12:13:c4:bb:f2:16:cd:9a:
a8:bc:13:be:b7:13:a9:c6:82:d5:a8:4e:8c:1b:e2:
6d:fe:2d:34:36:cb:d6:b0:af:a5:51:1e:41:af:d4:
b3:71:59:51:5a:cb:81:31:23:42:75:6b:1a:d5:5d:
b8:97:bb:21:d6:3e:fc:6f:50:3c:f1:b0:4e:1a:7d:
94:45:b4:b1:9f:bc:d4:c4:60:9c:c1:62:5d:48:7f:
4d:29:ea:22:44:24:fe:4c:59:8e:b3:3e:f9:53:7e:
81:87:93:46:12:5e:46:64:b5:a4:cf:aa:fc:dc:69:
66:de:ce:fa:71:47:14:60:b0:da:ad:74:14:d4:89:
c5:b2:40:08:a4:20:d4:ce:c1:31:5a:7d:4d:97:a6:
30:4b:7d:5f:af:da:bc:a0:1e:3c:de:af:23:21:1d:
85:78:3b:a7:8d:e8:21:29:cc:a6:6d:0f:2a:ac:06:
b4:63:98:1d:0c:28:0d:7c:f4:2e:e4:bf:9a:33:e4:
44:08:ff:10:a1:d4:f9:bd:28:7c:b0:f4:29:17:ca:
fc:a6:a0:1b:20:43:50:70:d0:42:1b:c0:9b:96:22:
17:7e:19:37:b0:67:4b:57:f4:89:97:06:af:5d:0e:
5a:5f:b7:ab:19:84:98:2d:71:ff:da:4c:9d:26:62:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:79:55:0A:89:38:3D:97:9F:46:78:95:4D:DB:94:2D:CF:AF:B1
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/f9h5VQqJOD2Xn0Z4lU3blC3Pr7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.120.0/22
IPv6:
2a0b:9940::/32
Signature Algorithm: sha256WithRSAEncryption
a3:49:87:31:0a:a6:a9:a5:14:11:4b:61:1e:d3:1a:4f:d4:c5:
af:25:34:e1:16:6c:77:ca:37:f8:72:5c:b1:0e:8c:c5:c5:31:
4f:39:96:ca:27:90:ea:5f:4f:ba:ca:07:46:b1:aa:0b:17:27:
a5:64:53:89:2c:33:d1:fb:88:28:59:60:8a:19:b8:2d:05:56:
31:fa:3b:78:94:fd:fb:1b:65:45:44:ef:33:87:ef:11:f3:87:
93:28:80:0a:4e:10:19:da:6e:77:c4:39:4c:6c:ca:13:57:07:
3d:10:10:7b:b9:fc:b0:b9:01:e2:a0:49:06:0b:fd:9a:94:4c:
7c:bd:1a:9a:04:26:78:00:2d:89:4f:e6:69:31:f2:08:b8:cb:
69:da:8d:84:a9:9a:09:22:a4:da:a7:a9:91:43:54:e0:37:63:
8f:51:20:e5:85:4d:7b:82:42:ed:69:78:2b:ca:4c:38:ed:ba:
5f:7f:95:18:5c:b6:ae:99:96:ff:4d:50:7e:0b:aa:20:26:30:
60:9d:3e:75:8f:66:18:7c:89:4b:13:d2:a1:8b:63:0d:c6:9e:
bf:7a:44:88:77:e8:a1:f8:be:c9:cf:33:eb:33:ee:f5:a6:c5:
c5:0b:62:85:a2:d3:38:4d:6e:fa:39:e1:34:52:bf:ec:3c:61:
b6:9f:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:48 2025 by rpki-client