Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/xr8nNRXUQlMA1uHQXJLEjODp8lQ.roa
File: xr8nNRXUQlMA1uHQXJLEjODp8lQ.roa (raw, json)
Hash identifier: ZgHTZ+zxNENhhzOMKbFMnstJK9/a5Y4yHq3+dpT1kHY=
Subject key identifier: C6:BF:27:35:15:D4:42:53:00:D6:E1:D0:5C:92:C4:8C:E0:E9:F2:54
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 01893ABB7B11D2A085F427B8CCC5B386C46C
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/xr8nNRXUQlMA1uHQXJLEjODp8lQ.roa
Signing time: Sun 09 Jul 2023 12:58:32 +0000
ROA not before: Sun 09 Jul 2023 12:58:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205229
IP address blocks: 185.224.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:bb:7b:11:d2:a0:85:f4:27:b8:cc:c5:b3:86:c4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jul 9 12:58:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6bf273515d4425300d6e1d05c92c48ce0e9f254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:cb:3a:67:70:c7:0b:77:7f:ce:ad:88:19:
f2:7a:bb:22:7d:cc:cf:1e:7f:41:4e:91:f5:d3:f6:
af:3e:5f:81:76:0d:75:1d:d1:08:50:ba:90:19:bb:
cd:1b:47:05:45:20:55:e8:6a:c2:ab:e1:89:53:45:
e1:12:78:e5:7f:8c:c0:03:8d:7c:11:a9:50:6c:17:
72:5b:a3:64:9f:9c:3f:a3:2f:b2:ce:68:de:79:8b:
28:ef:6e:05:fe:08:1c:e6:a9:bf:1a:9e:b6:8c:52:
f5:8e:e1:21:b7:36:a5:21:05:0f:1f:b3:09:61:14:
91:88:07:73:a8:c5:32:ec:89:ce:91:c9:3a:b8:83:
d5:34:3a:90:18:9c:4c:e6:88:95:18:12:96:f4:bb:
53:20:15:df:6b:6d:bb:e8:2e:04:60:21:5a:1b:4a:
f2:9d:8a:e7:26:15:79:26:2b:bd:10:21:b6:3c:cb:
d2:49:33:01:a6:62:81:ec:f0:10:46:05:48:4d:30:
aa:f5:ec:ba:75:eb:e1:b0:d6:1a:99:51:19:55:97:
f0:87:4f:ae:ce:58:4d:72:eb:30:01:b6:8c:45:2b:
de:ec:46:77:78:ee:31:24:5e:b2:95:fa:4f:f9:30:
68:a8:c1:6d:43:32:ae:aa:d3:bc:26:50:97:e0:bc:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BF:27:35:15:D4:42:53:00:D6:E1:D0:5C:92:C4:8C:E0:E9:F2:54
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/xr8nNRXUQlMA1uHQXJLEjODp8lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:8a:02:c0:6c:d6:35:09:27:ea:60:ab:23:9c:f9:1c:43:76:
a3:1f:98:b7:97:89:45:d6:d7:4d:28:aa:8f:26:8a:5e:2f:42:
cd:0f:79:ff:de:89:be:50:93:13:25:09:fe:ca:4c:8b:0d:46:
7c:cc:71:5d:0d:87:32:0e:b7:24:71:19:3f:2d:d9:eb:44:40:
4a:71:f2:00:00:f5:b1:7b:57:ad:8e:0f:3c:cc:a6:3f:6b:f4:
ed:74:55:a8:d6:ec:07:2e:7f:ca:05:7f:09:e5:c1:76:ed:da:
ee:43:91:c5:3f:55:94:46:78:96:c0:0a:d1:c6:5e:32:7f:71:
74:d7:e3:7d:ec:be:2a:15:75:28:3b:5e:ed:43:28:04:fc:7c:
27:1f:21:92:5a:bd:30:2d:15:69:37:b4:08:d7:0d:95:3c:15:
3e:fd:e0:16:3f:cd:ee:21:3e:bc:eb:73:7c:39:7f:96:83:01:
05:e1:06:6b:bd:c9:a5:bd:c1:0a:4b:dd:81:5d:2a:0e:0d:d7:
cc:f4:23:e3:b4:34:d5:ab:a9:58:bf:e7:4f:0f:e3:98:6f:f7:
38:41:87:3d:ac:ce:30:a0:c8:69:b3:3a:9b:34:9c:95:16:82:
7e:2f:3e:70:85:ba:d1:fc:6e:24:13:73:88:c4:9a:8b:45:5a:
b3:73:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:26:01 2025 by rpki-client