Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/ig3Zlz3VoeH5CgRMYX9St0kS_gg.roa
File: ig3Zlz3VoeH5CgRMYX9St0kS_gg.roa (raw, json)
Hash identifier: K5ylutpGV8KuXroeFaIrxT5hMrNX5fPq5VBLdmfE0oI=
Subject key identifier: 8A:0D:D9:97:3D:D5:A1:E1:F9:0A:04:4C:61:7F:52:B7:49:12:FE:08
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 01857169B2283B823BB99516A2F9001CCCF2
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/ig3Zlz3VoeH5CgRMYX9St0kS_gg.roa
Signing time: Mon 02 Jan 2023 07:37:10 +0000
ROA not before: Mon 02 Jan 2023 07:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 185.22.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b2:28:3b:82:3b:b9:95:16:a2:f9:00:1c:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jan 2 07:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a0dd9973dd5a1e1f90a044c617f52b74912fe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:b1:ff:00:e0:ca:3a:d4:df:f1:3e:0e:46:
2e:3c:e0:23:03:80:74:52:eb:46:83:96:86:c7:0a:
a8:27:7d:36:a0:aa:a0:2e:74:fd:78:85:72:8f:56:
84:f4:c8:43:1f:97:25:a0:2d:fb:1b:6b:31:f4:0e:
81:23:f0:d6:52:e8:6f:93:f9:58:f8:6c:64:51:1b:
ff:32:4b:5c:8e:13:87:c6:3e:5a:03:67:c3:4b:c6:
17:87:fc:a6:8f:c2:e2:ff:3d:f8:17:e0:9d:6a:9e:
72:98:2e:9d:96:64:fd:f2:9d:ed:c7:35:af:2f:22:
e7:6c:16:4f:91:ee:a2:4a:bd:ae:cc:2d:10:f6:80:
40:8f:3e:ea:0c:34:e2:e8:14:89:19:28:eb:55:fa:
6d:c7:df:bb:aa:f9:69:94:09:7f:b1:8a:67:bf:d2:
b6:16:27:2c:2e:32:cf:99:0f:19:a0:12:0d:e2:e5:
df:5d:8f:5d:73:1d:6f:82:61:95:17:3e:4b:c1:a5:
63:54:d5:bc:48:8e:de:91:8e:02:40:e2:24:51:72:
4b:12:7e:58:fe:ec:c7:cf:34:39:c8:98:52:ac:66:
66:ce:28:5a:30:16:67:71:d6:c0:1e:94:a6:16:96:
8d:05:dc:e7:95:ce:d1:80:2e:ab:c9:9f:9e:13:77:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:D9:97:3D:D5:A1:E1:F9:0A:04:4C:61:7F:52:B7:49:12:FE:08
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/ig3Zlz3VoeH5CgRMYX9St0kS_gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
65:38:44:2c:0a:0c:a6:10:c6:26:5a:26:5f:6c:ee:3a:af:be:
95:f3:1c:65:0e:23:8d:7f:c7:8a:e7:4d:10:90:5e:95:5a:7d:
99:2e:41:49:11:d8:87:2e:20:d7:0b:c9:0b:ff:58:64:c9:e5:
f0:82:bc:1c:95:11:c0:82:a9:99:95:6c:4a:99:5f:4f:0a:f7:
f3:3b:f9:a5:e0:cc:88:36:7e:4a:7d:31:29:37:21:26:d6:c6:
a3:c7:0d:0f:9e:6a:e1:af:40:e0:1f:31:09:13:93:72:ec:3d:
c1:cc:cf:9d:93:b2:73:f4:fa:64:c8:52:e3:61:4c:56:a2:b9:
2c:b5:73:34:98:e9:a9:c0:8e:61:2c:e4:4d:e1:4f:8d:44:13:
b5:db:81:f8:be:55:0c:ca:3d:ff:b5:1d:f0:a9:82:ad:e1:ba:
a6:a9:e2:f4:9e:45:c9:a4:16:c8:58:76:f8:1e:16:43:87:ac:
82:88:1e:ed:f6:c4:e3:e0:f5:84:f7:3b:23:73:97:4d:06:2d:
20:d3:d4:dd:85:f5:bb:d7:78:1f:95:c0:48:15:8f:b5:9b:72:
01:73:b6:d1:39:0c:40:ee:c4:e7:54:7f:0b:ad:51:c4:ef:7f:
60:2a:29:ca:43:d7:97:bf:13:f6:1f:28:82:a4:46:ae:58:16:
c7:94:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:26 2025 by rpki-client