Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/m5RvrheBRvCZk7eFIUuMgVSNK-g.roa
File: m5RvrheBRvCZk7eFIUuMgVSNK-g.roa (raw, json)
Hash identifier: I35MAmOFrFuiRPaDdY3b+jM/1j53wYwjy/TTpJ9Xav4=
Subject key identifier: 9B:94:6F:AE:17:81:46:F0:99:93:B7:85:21:4B:8C:81:54:8D:2B:E8
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 055F3878
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/m5RvrheBRvCZk7eFIUuMgVSNK-g.roa
Signing time: Sat 01 Jan 2022 06:59:17 +0000
ROA not before: Sat 01 Jan 2022 06:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205514
IP address blocks: 185.201.0.0/23 maxlen: 23
185.201.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90126456 (0x55f3878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: Jan 1 06:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b946fae178146f09993b785214b8c81548d2be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:34:18:58:de:1c:36:39:09:00:4b:01:a3:
11:f6:16:de:fe:46:8b:1c:78:b2:19:25:30:6b:b1:
c1:a5:e4:db:5c:26:c5:ad:72:13:5a:69:ab:d4:16:
11:58:36:18:a1:36:6c:75:64:77:3d:4e:c2:0e:68:
fb:83:75:52:dd:82:44:05:a8:4e:d1:58:19:fa:6a:
93:9b:95:30:06:b9:df:a8:80:e5:30:b5:2c:37:71:
a2:7d:12:22:f3:13:d7:b2:f6:f9:1d:1b:12:f5:23:
4c:d8:73:64:4e:2c:35:4e:c2:de:da:e7:5d:d4:ac:
86:4c:af:1c:e6:38:02:a3:b7:5e:fd:72:4c:06:52:
13:62:09:db:72:bc:a5:43:e7:45:eb:2e:05:47:29:
c6:59:fe:ba:e6:95:7e:08:03:38:94:ae:f8:fb:eb:
e6:a2:da:b2:1b:ff:95:66:ec:c9:04:8d:72:33:d6:
9a:74:04:d5:25:da:f0:fe:c0:98:3b:34:52:b0:09:
0a:4a:4a:6e:b8:f9:12:2a:3a:0c:bf:d9:b2:eb:b8:
e2:f5:c1:81:ba:04:c3:17:c2:76:da:eb:5c:06:62:
b1:2b:a1:14:fa:d8:23:ed:44:00:12:a9:f7:e3:c0:
03:ff:de:5e:27:ed:2a:16:97:29:c2:2a:15:36:9f:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:6F:AE:17:81:46:F0:99:93:B7:85:21:4B:8C:81:54:8D:2B:E8
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/m5RvrheBRvCZk7eFIUuMgVSNK-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.0.0-185.201.2.255
Signature Algorithm: sha256WithRSAEncryption
2a:e5:ee:9f:ed:0d:1f:c9:2e:fd:b7:d8:93:e0:42:72:5a:ec:
49:e7:f4:e3:62:95:a7:52:b8:32:55:f0:3d:23:ec:bb:5f:36:
37:26:9e:5a:81:d7:03:1a:e3:1b:c6:8a:7f:2d:46:78:29:d9:
15:91:da:60:9d:2c:e0:9d:63:a6:58:ad:53:f6:1b:35:f0:84:
64:9d:39:67:ad:a2:0c:f0:7e:62:c2:51:58:9f:0c:f4:8b:ed:
b6:5b:8c:fa:65:e1:2a:81:9e:fc:04:3d:1c:85:d1:d0:26:d0:
30:67:d2:c7:fe:9e:f1:e1:55:41:40:69:02:18:37:4a:56:cc:
83:7a:17:85:8b:6b:eb:41:1e:b4:04:88:ba:3e:70:50:53:bb:
f2:f8:a1:6a:06:d6:f0:76:c4:e2:ab:06:34:8c:89:bf:e0:c9:
9f:00:41:99:a2:21:77:7a:b3:b3:6f:96:e2:ac:da:34:00:55:
80:ce:cd:cd:52:04:6e:14:92:fc:e6:2f:25:e1:a7:4a:98:6c:
bf:1c:66:65:82:90:ea:5e:bc:45:57:7e:0b:a5:40:22:62:0a:
dd:dd:8b:98:76:08:76:d9:1c:88:25:b6:a0:6d:ee:18:9b:7a:
37:26:4e:47:17:17:1c:25:54:41:56:1f:49:b7:79:b1:4b:bb:
2c:39:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:20:26 2025 by rpki-client