Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/PJu1Zu-HLEKy0rapd4tns8M15IQ.roa
File: PJu1Zu-HLEKy0rapd4tns8M15IQ.roa (raw, json)
Hash identifier: x/wykbAV5YbWtEFlWQZosGMN+DlUKN9xtf3KvFMflws=
Subject key identifier: 3C:9B:B5:66:EF:87:2C:42:B2:D2:B6:A9:77:8B:67:B3:C3:35:E4:84
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 1A6B832E
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/PJu1Zu-HLEKy0rapd4tns8M15IQ.roa
Signing time: Tue 17 May 2022 12:54:03 +0000
ROA not before: Tue 17 May 2022 12:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57428
IP address blocks: 185.57.44.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443253550 (0x1a6b832e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: May 17 12:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c9bb566ef872c42b2d2b6a9778b67b3c335e484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:94:22:3b:92:38:3f:b4:df:93:5c:55:03:
c3:50:a9:c5:d7:d3:e7:c5:12:2e:ca:64:14:8a:6c:
72:86:d2:d4:a9:93:f6:72:50:14:43:ec:6a:7d:96:
e5:70:e6:7a:4c:8c:68:cf:51:f2:48:c3:1c:e0:bc:
5c:2a:45:c3:e1:c4:11:f1:24:17:d8:60:5f:75:a5:
33:f2:cf:c6:a7:df:b6:6a:ff:31:fa:d1:5b:9d:93:
bc:04:ec:f1:aa:b4:e5:bd:c4:a3:52:28:4c:ad:b3:
5a:b6:1c:3f:cb:d6:cd:f4:35:f9:2e:bd:bc:ce:88:
a1:60:59:b6:de:f6:9a:2a:b2:68:b0:0a:87:0f:88:
32:2f:8b:5b:08:68:e1:03:fc:f1:58:a3:e7:7a:16:
9a:eb:93:5e:c6:98:46:39:7d:72:2a:c9:1a:35:05:
5b:3e:21:ed:e4:06:b8:37:45:c4:ef:e4:fc:d0:06:
ab:c6:18:2e:9e:20:74:ee:74:f5:e9:ab:ae:7b:c1:
df:40:6e:49:e5:f0:c6:7c:f0:82:17:36:a2:b3:da:
60:04:92:d7:df:f9:87:ab:81:c6:18:9c:4c:d8:6b:
95:f0:dc:3d:63:1f:3b:7a:f1:7d:d6:03:2e:e0:66:
5e:59:e5:2d:52:38:a7:18:10:65:b3:71:73:ec:68:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:B5:66:EF:87:2C:42:B2:D2:B6:A9:77:8B:67:B3:C3:35:E4:84
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/PJu1Zu-HLEKy0rapd4tns8M15IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.44.0/22
Signature Algorithm: sha256WithRSAEncryption
17:24:7b:99:4e:86:eb:60:61:df:ae:cd:e1:1f:19:38:89:33:
3b:af:68:42:39:b7:8d:d2:20:b3:23:d8:21:03:a5:01:53:29:
a8:98:b9:b0:76:fd:5d:1f:2a:7b:cd:32:19:ae:a6:18:5f:e1:
92:d4:ab:9d:b7:4a:98:17:52:64:4f:a5:30:d6:2c:0b:36:b6:
44:40:d0:91:c7:21:c4:ee:ca:42:52:67:08:bc:2a:47:1a:07:
bb:b3:0f:54:7a:a2:f5:20:cf:23:04:7c:eb:fd:ed:d4:30:2c:
4c:58:34:f0:c9:bd:47:c7:2f:01:11:e5:2a:97:44:df:c2:28:
3a:c2:8a:e3:82:66:7a:04:b2:0a:97:06:6a:92:8e:86:5c:36:
38:11:f6:c3:a3:8e:6d:c8:74:cc:81:ac:58:9a:b3:36:bf:e0:
49:86:f6:e4:60:76:e4:03:48:75:97:62:de:b0:5e:c8:be:59:
38:57:84:f3:59:db:e2:b7:52:aa:23:a2:79:22:93:19:d7:06:
55:b9:0b:e5:14:e7:a5:c9:60:b6:b6:25:9e:79:7e:11:1b:ee:
c6:38:1a:ec:76:54:e5:51:32:6b:6e:96:d0:60:ea:78:37:1b:
d0:a6:3e:1c:ae:e9:21:0c:18:e7:51:76:e8:cb:e3:7f:36:8b:
7f:aa:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:18:55 2025 by rpki-client