Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/5EMbrT8shkWMXk5RBNwVjCJ1dI0.roa
File: 5EMbrT8shkWMXk5RBNwVjCJ1dI0.roa (raw, json)
Hash identifier: Mud7oAs2cKkisyDgvPP4+IRDWUBud+9W6ZxYoKg8W1E=
Subject key identifier: E4:43:1B:AD:3F:2C:86:45:8C:5E:4E:51:04:DC:15:8C:22:75:74:8D
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 01856F66D86845206ABA0D09A4BEAEB9D6BD
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/5EMbrT8shkWMXk5RBNwVjCJ1dI0.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198701
IP address blocks: 185.236.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d8:68:45:20:6a:ba:0d:09:a4:be:ae:b9:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4431bad3f2c86458c5e4e5104dc158c2275748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:79:42:7c:67:3e:23:60:56:09:7b:15:73:
4f:03:19:e0:11:55:3d:de:ae:3c:68:43:68:51:46:
37:f0:c1:30:d5:91:b1:49:86:0f:17:52:00:0d:e3:
86:ea:7f:06:ac:ad:60:d5:e9:ed:e8:a3:d3:63:71:
6e:9e:64:64:66:4d:f8:6a:ed:4f:93:29:ac:35:64:
97:56:c0:b0:20:55:8a:69:aa:26:15:f1:50:f3:8a:
f2:4d:cc:99:2d:b5:6d:96:7c:80:8c:05:e5:12:19:
4c:15:d8:e0:d4:cc:f2:8f:44:6e:2c:3c:72:83:61:
db:96:c0:6e:af:1a:a4:18:70:c0:1b:58:a2:a4:a7:
06:f3:04:e8:f0:85:f7:59:19:d4:36:b4:fd:51:03:
82:20:cc:19:7d:22:c2:29:c0:f5:e2:92:4c:d0:65:
74:7a:61:1e:cc:d8:74:f6:be:df:a4:b4:e5:8c:bd:
e0:8b:23:06:ab:77:2e:87:5d:b3:f9:7b:74:15:66:
b6:8a:06:a9:2e:69:b1:85:7e:58:e2:ee:fa:00:9b:
c2:0c:68:56:d4:82:a3:c4:9a:f5:5d:0a:24:80:f2:
90:15:b7:70:b2:0a:d6:70:cb:80:5e:b6:fb:89:90:
36:ec:24:80:8b:7b:c5:44:36:5f:f5:12:51:70:d1:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:43:1B:AD:3F:2C:86:45:8C:5E:4E:51:04:DC:15:8C:22:75:74:8D
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/5EMbrT8shkWMXk5RBNwVjCJ1dI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.44.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a0:31:74:e2:37:ae:a9:fa:b1:ad:ac:f2:5e:e5:43:7b:ba:
31:9d:fc:05:8b:85:33:8b:10:c5:db:23:44:04:83:fe:9d:3c:
3e:c7:0f:c8:5a:15:01:48:9f:73:c7:31:22:37:c8:c9:ed:fe:
50:fd:d8:02:cf:42:8e:7a:24:0f:2a:3c:07:c4:32:1a:dc:0b:
10:3e:ad:80:e1:c2:00:f8:7d:11:95:4a:79:aa:5b:64:04:d6:
4b:a3:4e:bb:c9:a4:81:50:b0:6d:45:f2:ee:ba:63:75:11:f3:
70:de:0d:fa:1f:28:fe:26:53:22:65:2c:af:17:a0:1c:62:9a:
55:50:b8:03:89:91:de:6f:3d:53:54:cb:47:da:d4:f1:7e:94:
c2:2d:64:7d:e4:b1:66:aa:6c:1e:de:99:89:46:09:f8:c0:ed:
42:6f:a7:40:75:f7:40:ce:b6:0a:82:ea:60:33:7a:1f:02:5f:
3f:d9:84:34:a4:d3:bf:ab:cd:86:a7:72:09:bd:21:3b:f3:03:
4b:7c:83:98:5a:e0:21:97:7c:3c:79:6d:d8:f7:d6:20:45:54:
2d:c2:ad:88:65:26:dd:d6:33:00:65:a7:31:3b:ad:80:f9:e3:
66:05:b4:cd:fb:aa:57:5d:8e:9e:b6:0f:f3:24:a8:4a:0a:0c:
b0:fd:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:08 2025 by rpki-client