Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/Rt9EyR4CQ5zGBPeBFbU3ISbkTVA.roa
File: Rt9EyR4CQ5zGBPeBFbU3ISbkTVA.roa (raw, json)
Hash identifier: HVwgDrh2OAmQpRjG6nvk8AeierUbAkfRQEwZbdD1YF0=
Subject key identifier: 46:DF:44:C9:1E:02:43:9C:C6:04:F7:81:15:B5:37:21:26:E4:4D:50
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 01856C81362ABB5020524E000159DDDE7290
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/Rt9EyR4CQ5zGBPeBFbU3ISbkTVA.roa
Signing time: Sun 01 Jan 2023 08:44:45 +0000
ROA not before: Sun 01 Jan 2023 08:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58150
IP address blocks: 185.56.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:36:2a:bb:50:20:52:4e:00:01:59:dd:de:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Jan 1 08:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46df44c91e02439cc604f78115b5372126e44d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:d4:81:a1:42:ca:89:9e:cd:53:7e:62:eb:
9c:42:03:5d:ab:d8:dd:a5:bd:f6:ef:b0:37:c8:ad:
8e:67:8b:4b:2d:47:6b:78:6a:c2:51:c5:93:c2:97:
e2:77:19:ed:28:7a:40:a6:54:da:14:50:29:ff:ce:
3d:5b:c7:06:25:64:fa:bc:15:f1:ef:ac:a9:bc:7a:
86:86:77:d6:dd:e8:0b:64:60:b9:17:c4:e1:f1:36:
f1:d1:ef:f2:c9:ba:5b:4e:65:5d:8f:f9:45:36:b3:
ad:43:8e:e1:34:76:f4:8f:65:de:b0:29:a9:f9:bb:
3e:f4:9c:d2:ee:89:40:34:95:19:de:f3:a4:76:7a:
b9:98:b6:0e:78:5d:74:9f:c7:8b:79:8a:76:d8:89:
36:42:98:6b:5c:ae:cc:b5:dd:5b:fd:85:fa:23:54:
85:18:67:de:fd:9b:e2:1f:5d:7a:59:92:c7:83:7b:
3e:1c:f8:db:90:7c:b9:1f:98:c2:6e:06:13:a7:9e:
04:84:6d:af:3b:df:2e:e5:70:04:45:5b:40:26:16:
c8:97:47:bc:f3:b3:6f:7b:83:61:fa:11:fc:c2:53:
d0:8a:3c:44:04:9f:ae:6c:73:3c:29:01:4d:cd:09:
6f:bd:db:55:49:c0:f7:b6:8f:e8:cd:a8:91:de:c1:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:44:C9:1E:02:43:9C:C6:04:F7:81:15:B5:37:21:26:E4:4D:50
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/Rt9EyR4CQ5zGBPeBFbU3ISbkTVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:51:94:19:a5:ca:1d:6c:7a:b4:4d:51:51:d5:83:01:be:14:
58:86:45:5c:d4:1a:af:6f:cc:05:8e:84:6e:46:e0:89:05:21:
1a:f7:55:fc:82:3e:7f:06:0c:59:2b:fa:35:0d:76:0b:84:64:
80:4d:fc:8e:ea:e4:51:ee:85:f5:7b:5d:3d:9e:b8:7c:d7:73:
78:77:99:86:f8:79:f9:e2:8c:40:e2:c3:ce:66:ba:51:a7:43:
c6:9c:a4:46:8c:01:ed:22:c5:2a:5c:f4:c6:56:3e:ee:bb:31:
a1:60:11:0f:98:5e:da:fe:05:4a:f6:b5:9d:87:10:cb:d8:c3:
f7:1b:6e:08:e1:31:42:48:8a:db:35:12:05:f7:c8:87:43:b4:
b8:21:25:05:a8:3d:ce:47:16:3a:24:d6:ff:6d:4c:11:a3:f5:
46:f6:02:75:22:64:d7:99:24:3c:c6:80:8c:fc:1e:12:c6:9c:
dc:59:f0:aa:54:cd:4f:aa:51:ea:2a:6a:d0:68:28:96:e6:a5:
13:66:32:5d:3b:af:bb:5b:f6:89:18:e2:19:35:f8:43:0d:90:
e8:60:ed:bb:20:e7:13:a4:dd:a8:cb:a3:9f:11:b7:cb:ca:cb:
21:79:da:97:c9:2c:de:60:ca:35:8b:86:ac:8b:21:6d:b3:9e:
e5:c4:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:10 2025 by rpki-client