Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/RWtK6gt5F1LzrrjRb5d0UdzY-6M.roa
File: RWtK6gt5F1LzrrjRb5d0UdzY-6M.roa (raw, json)
Hash identifier: gneWze5aEkuhSCznLuetiMt3cHdAXzxgRvkH8+tcCG4=
Subject key identifier: 45:6B:4A:EA:0B:79:17:52:F3:AE:B8:D1:6F:97:74:51:DC:D8:FB:A3
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 02247872
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/RWtK6gt5F1LzrrjRb5d0UdzY-6M.roa
Signing time: Sat 01 Jan 2022 05:57:13 +0000
ROA not before: Sat 01 Jan 2022 05:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60609
IP address blocks: 185.112.3.0/24 maxlen: 24
185.112.0.0/24 maxlen: 24
185.112.1.0/24 maxlen: 24
185.112.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35944562 (0x2247872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Jan 1 05:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=456b4aea0b791752f3aeb8d16f977451dcd8fba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:05:b7:3d:3d:89:3e:ff:5b:cf:3e:06:c1:7a:
e6:dc:17:c4:97:16:52:d6:b8:29:ab:65:8e:6f:4c:
0c:cd:15:ce:d2:5c:b8:a7:92:4f:48:e0:cd:6e:ca:
eb:16:89:7a:18:38:54:16:38:40:95:b1:98:fc:11:
7c:63:4a:25:81:80:77:87:6a:d2:e1:8c:8f:29:61:
08:ec:6d:87:f1:9d:84:5c:10:af:0b:ba:e7:71:84:
42:e3:c2:6e:7d:f5:bd:0f:4e:1c:df:56:0a:20:e6:
97:4b:df:2a:00:57:36:6d:33:4b:ee:14:b3:b6:18:
23:29:8f:64:96:f7:08:14:05:7a:57:20:f3:e0:e9:
c3:18:68:4a:87:4b:d8:85:d9:38:bc:d2:11:dc:8c:
43:4b:88:42:be:84:fb:81:49:82:c7:30:7f:96:b2:
f0:25:5b:44:dd:02:9e:2d:be:b3:cf:2a:28:6e:56:
4b:0a:82:71:83:08:b7:87:8c:a1:b9:f9:e8:9e:43:
92:ea:ee:3a:09:cd:05:d7:9d:c0:60:d4:9f:3e:c4:
1c:9a:1e:3e:6d:c8:dc:4a:a9:6c:82:c3:e1:06:3f:
2c:44:9e:8c:ac:45:53:58:b3:80:b7:03:8f:7c:8f:
af:bd:6a:91:f9:66:19:b0:71:4f:39:8c:47:05:4f:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:4A:EA:0B:79:17:52:F3:AE:B8:D1:6F:97:74:51:DC:D8:FB:A3
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/RWtK6gt5F1LzrrjRb5d0UdzY-6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:be:15:10:3a:53:0b:33:6a:66:7d:79:99:76:9a:12:70:8c:
0e:4d:3c:33:33:d4:8a:f2:0f:bd:50:d4:d6:ba:0a:ce:5a:4d:
a8:63:9c:e0:7c:1c:4e:41:01:5f:47:ca:d1:3e:99:41:52:ff:
a6:0d:69:61:d3:23:48:bb:3b:22:78:61:04:d0:bb:87:06:89:
d3:a8:13:af:84:b2:12:47:9b:e2:80:f1:11:b6:29:58:1e:46:
4f:23:cd:a7:7c:3c:4d:8d:9f:de:ee:c2:6d:df:ab:03:e7:3f:
8a:fe:c2:4f:df:e6:8e:78:0b:ca:2c:e4:f7:a3:25:7b:db:c2:
22:e8:ac:3d:24:b8:4c:4d:b6:8f:d9:a6:c5:e5:68:ba:38:ff:
af:6a:1b:4d:15:fd:50:bf:92:b3:e6:51:6e:57:2e:c4:f2:50:
6f:0f:69:f5:2c:ff:71:b3:01:e6:d8:d3:16:ce:c4:56:d5:1d:
35:a2:dc:63:83:42:cd:d2:d5:72:06:c4:a0:f2:b8:1f:de:30:
85:ae:2d:11:a1:2e:c3:d3:72:f4:6d:c2:ae:0a:dc:07:87:c6:
0e:5c:3a:21:f4:e7:2d:71:62:45:8b:9f:76:5d:df:ab:0b:40:
3f:2b:d3:9c:41:d3:70:8e:f7:82:4a:24:8b:95:e0:d1:0c:13:
c0:c3:84:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:48:11 2025 by rpki-client