Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/__DD7LI_JnzFmRDHMYP6QyMpvDE.roa
File: __DD7LI_JnzFmRDHMYP6QyMpvDE.roa (raw, json)
Hash identifier: dkoxqPTuZm/N7DC4cFtr6TTJceQAEYhmYss1t+3q8r8=
Subject key identifier: FF:F0:C3:EC:B2:3F:26:7C:C5:99:10:C7:31:83:FA:43:23:29:BC:31
Certificate issuer: /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial: 018571F0E2F2759058FB5347B97C8ADF6F3C
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/__DD7LI_JnzFmRDHMYP6QyMpvDE.roa
Signing time: Mon 02 Jan 2023 10:04:50 +0000
ROA not before: Mon 02 Jan 2023 10:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34766
IP address blocks: 185.138.56.0/22 maxlen: 22
2a07:a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:e2:f2:75:90:58:fb:53:47:b9:7c:8a:df:6f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Validity
Not Before: Jan 2 10:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fff0c3ecb23f267cc59910c73183fa432329bc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:c0:c7:3d:da:70:b8:cc:d3:b1:f7:b0:dd:
ae:9e:c1:ba:a0:1e:28:24:12:e8:88:42:77:d1:8d:
c1:3a:f1:ca:01:31:06:2b:44:d6:ed:b4:1f:9d:64:
31:59:4b:9c:82:5b:fd:c3:2e:51:cf:33:21:2f:98:
51:54:ee:6a:59:2b:81:c1:61:31:6a:ce:3c:e7:39:
dc:bf:73:b3:b7:4c:d4:5d:9d:8c:cf:25:d2:d8:c5:
8a:98:30:97:1c:8a:cd:83:2a:67:4f:69:82:c0:cf:
3f:85:29:c2:e8:b4:d1:a8:44:56:23:71:5d:c5:52:
3e:43:f0:a8:98:09:06:e2:9d:49:8f:ab:6b:ce:00:
8f:e7:3b:f7:56:97:a0:0d:3c:e7:37:2a:32:31:7c:
43:6e:11:bb:ad:6c:26:fe:9d:57:7f:b6:6e:7e:92:
45:b7:d8:85:b1:c6:3a:58:21:67:9d:64:45:ca:b0:
7e:30:76:7f:66:62:1b:93:f2:d7:c7:1a:e9:34:b1:
6f:64:94:f4:71:3c:12:76:ce:f1:6c:23:e2:0c:58:
ac:83:14:21:42:a6:a2:f5:45:09:c9:d3:70:4f:1c:
2b:25:db:46:3c:c6:2c:18:b0:ca:b4:d3:ba:92:9d:
e9:74:73:12:af:e8:ed:22:d0:4b:58:c6:40:58:d3:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:C3:EC:B2:3F:26:7C:C5:99:10:C7:31:83:FA:43:23:29:BC:31
X509v3 Authority Key Identifier:
keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/__DD7LI_JnzFmRDHMYP6QyMpvDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.56.0/22
IPv6:
2a07:a80::/29
Signature Algorithm: sha256WithRSAEncryption
74:32:79:55:c7:d2:95:23:d9:8a:19:7c:32:78:b8:b9:32:80:
d6:af:92:95:be:e6:34:ee:b7:aa:62:a2:1b:bd:2a:55:11:8a:
27:3d:d3:29:07:24:ef:18:36:ee:7c:53:cd:e9:41:fa:60:f4:
aa:2f:9a:0d:bd:9c:a4:23:e5:0a:7e:8a:93:39:c6:7a:01:9c:
c7:5d:f1:28:66:97:1c:c3:aa:04:74:5d:ae:a0:f1:62:5b:32:
34:21:96:5b:6b:9d:b9:98:55:bf:4c:03:08:eb:b1:80:e6:ab:
8d:58:72:06:f7:69:73:55:21:d4:fb:29:9c:53:87:f7:67:0a:
0f:49:d2:85:6f:07:83:49:73:d7:65:d8:00:eb:a4:da:2f:02:
7e:21:e9:d5:27:88:1f:6f:15:da:c5:af:19:06:1a:92:ce:06:
a0:ca:e8:6e:64:88:b7:5a:56:5f:a6:13:10:53:ad:6b:c4:45:
57:7a:ae:26:b5:dc:d6:19:41:a4:57:c2:f8:41:cc:fe:e8:b0:
43:15:07:1c:0f:20:e5:f6:22:0f:e4:79:7a:b0:24:b1:94:1f:
c8:00:15:2d:9b:26:07:9d:f6:e2:b2:3b:a4:a2:d1:6f:a8:ce:
b7:c8:d0:49:eb:85:ef:7c:ca:27:95:d4:82:a2:e8:3d:a4:96:
e9:ee:21:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:10:10 2025 by rpki-client