Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/d96en56QVt2Qv4-jhv-zh1w0-Y4.roa
File: d96en56QVt2Qv4-jhv-zh1w0-Y4.roa (raw, json)
Hash identifier: glYhV0+7JmmydQzCSnImUM7S/of9jDaasJ47NGAempg=
Subject key identifier: 77:DE:9E:9F:9E:90:56:DD:90:BF:8F:A3:86:FF:B3:87:5C:34:F9:8E
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 061AD0E0
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/d96en56QVt2Qv4-jhv-zh1w0-Y4.roa
Signing time: Sat 01 Jan 2022 08:56:22 +0000
ROA not before: Sat 01 Jan 2022 08:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.98.156.0/24 maxlen: 24
2a12:a900:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102420704 (0x61ad0e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Jan 1 08:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77de9e9f9e9056dd90bf8fa386ffb3875c34f98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:86:a8:90:43:84:af:f5:6d:59:54:6b:d8:
d1:da:b5:96:af:43:ba:21:3d:6f:15:f5:56:b1:e4:
ec:c4:b8:7c:fe:c2:af:60:8f:2f:a5:c0:93:3b:56:
d9:41:3b:44:16:f2:a7:7e:df:ae:35:33:bb:1f:be:
1a:bb:58:43:d6:07:b7:54:b0:fc:ee:79:41:b9:ca:
05:28:96:c4:7c:3b:1c:ea:ae:e7:ce:66:94:4d:2e:
fc:bf:d7:90:4d:39:3c:99:81:46:2b:a8:71:d7:2f:
c6:00:3a:f0:ee:99:f0:67:20:1d:42:6a:17:d1:8a:
10:d5:89:6e:fc:14:f7:8f:cd:26:cc:0c:ba:04:8a:
09:41:ad:1d:1f:4b:ff:6e:b2:d3:06:54:19:80:ac:
1f:c5:66:df:ab:26:53:69:56:8d:64:26:1f:bc:d8:
54:77:9b:b2:47:d9:84:76:c7:65:c3:a1:81:e6:7e:
63:d9:a8:e4:a8:9e:21:76:b1:22:21:2a:1e:3f:86:
ad:be:11:6f:5d:39:27:69:5a:93:11:b7:46:d5:84:
37:46:aa:9a:29:1c:5c:06:16:46:dc:db:05:ff:62:
09:01:50:f1:56:c6:6e:be:c4:96:99:2e:2c:74:f4:
10:cb:32:9c:7f:7b:83:07:49:15:9d:a7:52:d3:bd:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DE:9E:9F:9E:90:56:DD:90:BF:8F:A3:86:FF:B3:87:5C:34:F9:8E
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/d96en56QVt2Qv4-jhv-zh1w0-Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.156.0/24
IPv6:
2a12:a900:1::/48
Signature Algorithm: sha256WithRSAEncryption
16:e2:63:0e:95:ae:29:e3:93:40:16:25:b8:03:8c:cc:90:0b:
2f:75:87:76:49:ee:79:26:7b:ad:3e:be:e1:86:2b:c4:6b:bc:
63:38:da:e4:96:1e:63:ac:4a:51:49:9c:d6:71:10:a8:53:bd:
01:c7:a1:61:b4:f1:7b:1d:de:1b:f0:76:6d:fe:31:e5:47:11:
df:9d:a0:60:15:2f:d9:de:e8:5e:bb:ac:d7:41:9f:d7:8d:7d:
aa:85:ab:a4:5e:5e:8a:a8:be:89:c8:d8:ea:6b:ef:64:1f:ba:
5c:24:64:59:aa:7b:4a:5d:29:58:48:06:58:52:21:48:81:10:
70:d7:61:44:bb:55:ec:79:1e:4f:33:b7:43:75:12:07:07:05:
fb:de:64:11:a3:b7:a1:c6:b0:3e:4e:44:9a:73:53:0b:f8:94:
9e:28:7c:0d:2e:bd:da:f6:c0:43:a2:6e:96:c9:db:f1:77:ad:
d9:62:33:25:91:7a:19:5e:d4:a2:77:38:7c:fb:a7:d0:93:1c:
23:f5:a1:63:47:3f:2d:5e:7c:a8:b5:73:b3:13:32:31:70:85:
a4:25:70:e1:be:d3:f3:be:d4:d1:e7:f5:4a:fb:95:ad:93:f5:
48:b7:66:ca:fc:85:6f:c1:88:fd:e6:a0:f1:4b:2a:6f:90:6e:
f8:13:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:50:30 2025 by rpki-client