Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/1-ifwigCNnyPCkSkk2Xwa56sr6Mw.roa
File: 1-ifwigCNnyPCkSkk2Xwa56sr6Mw.roa (raw, json)
Hash identifier: IWDOzf2pyaraV5Z46rtZunVjAAloqpJvWigU31p9L6g=
Subject key identifier: FA:27:F0:8A:00:8D:9F:23:C2:91:29:24:D9:7C:1A:E7:AB:2B:E8:CC
Certificate issuer: /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial: 01856CAF44A92EB263914B94DCF4C44272A7
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/1-ifwigCNnyPCkSkk2Xwa56sr6Mw.roa
Signing time: Sun 01 Jan 2023 09:35:03 +0000
ROA not before: Sun 01 Jan 2023 09:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212693
IP address blocks: 185.175.89.0/24 maxlen: 24
2a10:4440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:44:a9:2e:b2:63:91:4b:94:dc:f4:c4:42:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
Validity
Not Before: Jan 1 09:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa27f08a008d9f23c2912924d97c1ae7ab2be8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a2:13:75:60:4c:a6:60:b4:22:71:09:28:fd:
8c:06:ff:41:ff:5c:1f:53:ff:d1:f8:e4:6f:dd:a5:
bf:0e:93:04:01:f6:28:28:eb:85:62:03:3b:f3:bf:
f7:eb:c9:73:d0:dc:99:68:0d:01:53:cd:43:cc:1d:
7c:59:80:64:5e:c3:32:17:74:93:4c:fd:7c:37:25:
b6:da:70:53:47:a4:55:8b:ab:c7:f3:48:e0:94:da:
3d:dc:9c:6f:38:28:d7:12:3f:f8:c5:4f:f2:52:ae:
ad:65:2a:d2:4d:a7:e6:20:08:82:39:1b:4e:4a:0b:
26:ea:bf:92:07:38:1b:de:29:f8:a0:38:95:b4:fd:
4c:b2:53:bd:0d:12:4e:cb:90:1f:cd:24:bd:ea:f4:
00:f4:51:a5:c1:50:3b:33:14:82:d3:c9:10:73:1f:
42:38:60:a1:a8:dd:a0:a1:63:77:d1:b5:df:8a:2e:
f1:a9:4d:a6:3f:ad:48:df:d9:aa:8c:9a:01:ce:09:
e0:d2:4a:0a:be:5b:00:2b:8e:2f:79:32:53:b5:49:
d0:31:c2:9c:05:15:28:a0:8f:a0:8f:e9:29:87:53:
d2:64:f7:b5:07:c2:bb:97:9c:bc:01:6a:25:ea:99:
7d:5d:62:0c:ca:37:b0:47:36:f0:2a:c3:c2:5a:2b:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:F0:8A:00:8D:9F:23:C2:91:29:24:D9:7C:1A:E7:AB:2B:E8:CC
X509v3 Authority Key Identifier:
keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/1-ifwigCNnyPCkSkk2Xwa56sr6Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.89.0/24
IPv6:
2a10:4440::/29
Signature Algorithm: sha256WithRSAEncryption
31:bc:58:66:72:84:8a:ab:e8:e0:8f:e1:6c:92:f3:6d:1a:ac:
a8:e8:8a:ec:cb:2a:0c:b6:97:e6:7e:df:88:db:b5:78:20:c3:
3d:d0:8f:c8:3d:45:74:2f:5e:3c:5a:a1:fc:56:84:27:63:9a:
c7:3e:7d:26:ca:f5:37:4e:a9:aa:4d:1f:d9:ee:5f:e5:1e:db:
32:f2:df:59:42:48:53:3e:df:8a:79:06:0a:3e:c7:43:73:76:
31:c1:5a:c0:0d:13:78:4b:7f:3f:34:ed:de:30:c7:9c:c8:f3:
1c:83:e2:09:2f:a3:c6:5c:45:cc:32:1e:5e:0f:eb:52:05:f0:
2f:4f:f2:ad:c5:52:67:c3:06:dd:c6:13:3b:cc:3b:bb:9c:c4:
ab:57:a8:41:cb:86:d1:c8:6e:a3:26:6d:22:2c:04:3c:25:f7:
94:c0:dc:7c:98:77:15:e1:c3:b1:6b:88:f9:da:85:f2:6b:7c:
5b:73:23:a7:27:90:ed:f3:dd:f3:2d:44:78:5c:8a:3b:b1:28:
43:6e:f6:3d:f8:20:a0:5b:f0:57:6d:21:75:09:32:f6:eb:9b:
45:64:01:93:dc:8f:6a:b2:07:6c:0a:c5:20:da:56:90:16:e1:
05:32:3e:a0:55:ff:54:3d:c0:fa:ed:36:50:6e:57:54:fe:35:
6e:4e:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:54:40 2025 by rpki-client