Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/oI7Af6poIkTCXzkvDRBgnDAlAPQ.roa
File: oI7Af6poIkTCXzkvDRBgnDAlAPQ.roa (raw, json)
Hash identifier: HD/FXZS92deQ4jz4Pdl8aUJ466K7rHy3ZI1KcrX9OHM=
Subject key identifier: A0:8E:C0:7F:AA:68:22:44:C2:5F:39:2F:0D:10:60:9C:30:25:00:F4
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 37A14B45
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/oI7Af6poIkTCXzkvDRBgnDAlAPQ.roa
Signing time: Sat 01 Jan 2022 12:55:26 +0000
ROA not before: Sat 01 Jan 2022 12:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204540
IP address blocks: 185.112.172.0/24 maxlen: 24
185.112.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933317445 (0x37a14b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 1 12:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a08ec07faa682244c25f392f0d10609c302500f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:46:8a:58:0b:1a:f3:22:1d:74:e8:33:50:
9a:d6:fc:f5:ee:fe:6c:71:00:2e:23:fa:a8:1d:f8:
3d:12:25:f2:f5:b5:6c:98:eb:63:35:b4:4d:ad:ff:
06:ea:f0:84:13:99:64:f6:e6:91:21:03:ca:4c:21:
9d:c4:2c:39:a8:56:fc:43:1c:a6:c3:eb:03:28:89:
c0:95:79:7c:33:bb:b3:cb:c8:f6:1f:47:48:fb:3c:
37:c7:e4:af:46:53:45:0c:d1:d0:cb:22:80:a5:b9:
16:89:6f:a1:8f:34:5f:86:ba:e2:9c:33:f1:22:bf:
6e:59:e6:91:5c:3b:a3:56:f0:93:67:ad:46:16:12:
51:10:a8:f7:bc:60:2a:9d:e4:eb:b5:6d:17:ca:49:
30:ae:59:50:c1:0b:a9:28:18:c6:cc:18:a5:a0:74:
87:2f:ab:04:57:e9:c1:a3:31:93:6b:e3:31:dd:9e:
69:a8:2a:50:64:88:fd:6d:32:31:06:ba:d7:cd:72:
53:72:61:36:df:52:33:b5:04:67:27:37:0a:d8:03:
57:79:b1:e3:a7:a7:63:ff:14:16:06:9a:96:61:5e:
b4:0b:e3:f0:20:28:c0:49:35:7f:51:95:2b:31:c3:
01:2f:9c:77:d3:c7:af:f3:ef:51:e5:de:c3:10:81:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:C0:7F:AA:68:22:44:C2:5F:39:2F:0D:10:60:9C:30:25:00:F4
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/oI7Af6poIkTCXzkvDRBgnDAlAPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.172.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:f8:76:0a:36:ac:1a:b2:d6:18:67:c0:9c:bc:7a:84:a4:01:
75:ae:10:27:76:c0:73:95:c7:f6:af:9c:9b:3e:89:f8:ec:1b:
d5:d6:c2:0b:01:45:8b:a1:54:fa:a5:7a:3a:c2:b7:d4:3d:cb:
a8:1d:2b:c9:c0:7d:9e:3d:dc:e1:74:3f:cb:bd:4e:d3:b4:5d:
7b:19:22:6c:5e:ef:b5:88:ff:b4:ca:cb:cb:b2:d0:36:8f:bd:
be:b4:28:a0:06:db:91:b6:e0:09:59:c6:aa:e2:8b:f9:57:40:
e9:71:db:35:6e:a5:3e:45:1b:30:ba:ae:62:27:17:53:39:4e:
9d:36:a5:4d:2e:b9:89:f2:bc:9c:d8:ec:12:ea:d3:fa:44:62:
c0:31:2a:5f:3e:d6:3d:79:f6:a8:a0:c3:72:8a:b8:b8:c7:30:
4d:a4:16:0e:9c:7b:0b:ae:d6:d1:06:cd:95:91:5c:97:f0:6a:
da:7d:38:fa:e6:0b:a7:fc:d2:ce:7e:5a:e6:5c:fb:b9:89:86:
a7:37:45:a8:90:25:8e:bb:13:15:73:3f:fa:b1:27:10:7b:6d:
e6:11:b7:3f:72:2c:3d:d2:66:29:d3:c0:d8:96:e0:7b:9b:2c:
4c:0f:4d:e9:4c:e6:b2:e5:0c:72:ed:6d:d3:b7:9c:c1:b7:8e:
23:d1:fa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:11:26 2025 by rpki-client