Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/f0x5u6jBz82zXEZnX8h4easQokI.roa
File: f0x5u6jBz82zXEZnX8h4easQokI.roa (raw, json)
Hash identifier: mHB4ZqYt0WI4vRNNlRCjs1hoMi4/FIxTs9cxfhmNxi8=
Subject key identifier: 7F:4C:79:BB:A8:C1:CF:CD:B3:5C:46:67:5F:C8:78:79:AB:10:A2:42
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 115572DD
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/f0x5u6jBz82zXEZnX8h4easQokI.roa
Signing time: Sat 01 Jan 2022 05:05:49 +0000
ROA not before: Sat 01 Jan 2022 05:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5485
IP address blocks: 185.124.76.0/22 maxlen: 22
2a06:b0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290812637 (0x115572dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Jan 1 05:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f4c79bba8c1cfcdb35c46675fc87879ab10a242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:03:17:af:69:05:2b:55:c8:dc:e4:1d:7e:
e4:80:d1:96:ba:d7:42:af:58:77:41:49:93:06:2e:
cd:b3:b0:12:bc:f1:c0:5e:5b:df:70:90:1f:76:27:
26:ef:cc:ab:3d:67:6c:b6:71:7c:99:1a:90:9e:f8:
44:cb:36:56:3f:ed:15:86:bb:8b:2d:10:81:d9:fd:
19:14:68:4c:e4:10:fd:81:34:a5:0a:b7:1f:ca:3b:
3d:46:04:d7:19:21:e5:27:ab:2d:33:57:fb:4a:4b:
2c:84:6e:b0:05:e5:5c:92:e6:c7:cb:aa:33:1a:90:
ac:69:9a:47:e2:22:1b:a5:f3:bd:83:d8:64:07:91:
8a:e4:6f:82:91:34:aa:9f:cf:fc:c5:eb:ea:79:45:
f3:e8:c3:ee:0a:b8:fa:0c:91:3c:3b:fd:4b:bf:2a:
90:f6:b3:2e:23:87:a2:a1:61:a5:27:90:52:5c:44:
ee:d5:a8:5a:49:3d:85:bc:66:26:3d:37:16:c2:b0:
e9:b8:31:b3:d6:49:0b:41:1d:f3:c3:bc:84:6e:ea:
8b:11:5c:0d:71:f1:4f:aa:8a:72:f1:7a:38:2b:4b:
30:ac:65:cc:11:d0:d4:6f:7e:9b:bf:3c:f0:35:4a:
89:f3:50:20:22:e3:1c:b9:d2:ad:b0:11:9f:83:89:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:79:BB:A8:C1:CF:CD:B3:5C:46:67:5F:C8:78:79:AB:10:A2:42
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/f0x5u6jBz82zXEZnX8h4easQokI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.76.0/22
IPv6:
2a06:b0c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:4a:fd:78:16:35:a4:11:e1:89:5c:36:a6:2b:fa:0d:78:45:
c8:6c:bf:61:a6:83:c3:67:5b:79:36:5b:72:fd:f0:12:b4:6f:
f3:d7:ea:b5:f7:ad:e6:cb:fc:76:cd:12:df:27:cf:62:a5:70:
46:dc:13:88:6f:e3:b4:22:c0:7d:b4:0c:b4:d9:56:7e:96:e6:
68:19:93:be:d4:ce:7a:a8:91:30:b7:36:b0:de:c9:6e:ea:8c:
61:7b:14:08:03:88:fa:b4:f2:6a:40:24:0b:32:f4:96:6e:54:
99:2d:29:5a:03:03:51:03:7c:dc:1c:e6:a5:ec:2e:ed:05:47:
22:a1:da:71:cf:88:f7:2e:68:32:2d:99:d2:d4:91:18:93:41:
ec:50:f4:6e:1b:65:b3:df:54:84:aa:e2:59:12:da:c0:86:0f:
a6:f0:3e:25:1a:ac:0f:e8:50:7b:b9:7e:6b:7f:52:4c:db:b8:
82:0c:b6:47:c5:40:e1:ef:5e:ac:bc:67:7a:ef:9a:98:30:8e:
4a:ec:50:95:02:ad:0d:96:2c:fa:71:ff:9d:6c:c6:61:e0:21:
1b:79:e9:aa:fc:a0:36:75:0a:37:41:fc:c5:0c:41:c0:72:72:
c1:38:26:ca:c4:65:56:88:bb:b9:c4:9b:44:d6:5c:2c:84:de:
a8:00:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:21:33 2025 by rpki-client