Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/4c--5lD9rq8zRe7V9cO7U4w-tMM.roa
File: 4c--5lD9rq8zRe7V9cO7U4w-tMM.roa (raw, json)
Hash identifier: pDT6/QCbldaNpB7+UmKGno7Qlh10NNfmkG6qV6VTLlg=
Subject key identifier: E1:CF:BE:E6:50:FD:AE:AF:33:45:EE:D5:F5:C3:BB:53:8C:3E:B4:C3
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 01856C25EA43E4290F404B7108106DDDAFD3
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/4c--5lD9rq8zRe7V9cO7U4w-tMM.roa
Signing time: Sun 01 Jan 2023 07:05:02 +0000
ROA not before: Sun 01 Jan 2023 07:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205552
IP address blocks: 185.212.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:ea:43:e4:29:0f:40:4b:71:08:10:6d:dd:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jan 1 07:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1cfbee650fdaeaf3345eed5f5c3bb538c3eb4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:72:fe:d1:bd:cc:b9:6d:d9:71:0c:ea:88:
e6:b1:38:05:07:b3:a5:9c:ed:f5:47:34:40:11:a2:
da:54:4c:55:91:68:a3:65:46:fc:16:a3:c3:66:2b:
de:52:ef:9b:32:15:a5:d9:57:fd:29:7b:23:0f:b1:
4f:fb:63:7c:4d:e0:6e:04:df:da:3d:06:94:4e:19:
7b:67:bb:3e:65:71:d0:5a:73:d4:4f:2d:b9:08:72:
b2:fb:95:9b:84:ec:c4:db:50:9d:81:26:5b:03:c8:
10:7d:e4:77:11:4f:02:dd:41:d6:22:fc:de:49:aa:
22:24:71:e0:66:1c:82:4a:7b:30:86:c5:81:4c:93:
1d:d2:a3:4d:73:69:f2:ea:26:10:c0:e3:cb:ac:76:
09:b2:58:ad:97:f5:af:78:3d:68:b9:7e:6d:d9:ab:
d2:f7:a3:37:9f:a5:b4:86:e7:84:05:9b:eb:5a:4d:
13:10:a0:be:2b:3a:79:6f:b3:7f:b9:84:db:9e:b7:
bb:77:33:8d:a2:a2:69:5d:dd:1b:35:db:8f:85:a8:
a0:03:97:b3:9e:46:fc:4e:7d:b5:7f:9e:d2:df:c1:
6f:e1:a5:20:9f:e2:94:ca:26:46:3c:c8:22:58:0e:
7c:aa:e6:78:47:8e:34:82:87:5d:81:10:14:c2:b5:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:BE:E6:50:FD:AE:AF:33:45:EE:D5:F5:C3:BB:53:8C:3E:B4:C3
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/4c--5lD9rq8zRe7V9cO7U4w-tMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.91.0/24
Signature Algorithm: sha256WithRSAEncryption
79:64:1f:4d:37:aa:9a:0e:50:31:6e:d7:36:cd:22:45:5c:86:
f0:fc:f5:d9:83:2c:7e:7c:b1:da:07:94:a4:b9:16:00:d9:77:
6a:12:7d:93:35:83:f0:f5:89:37:e8:01:40:71:79:70:bd:6f:
06:c7:6b:75:aa:09:e4:6f:f9:07:4a:69:bb:f3:ab:5c:b0:60:
49:2d:c4:d4:6a:c0:44:e6:89:65:68:a0:6b:b3:ff:51:73:1c:
84:27:ce:6b:1d:38:76:f4:ae:f8:b0:39:11:d9:90:68:ce:7f:
2d:cd:41:7f:2c:4b:47:47:0d:96:4c:93:b2:36:e7:5e:f3:64:
d3:e3:c1:a1:67:c0:2b:5a:f0:cb:d3:7b:a3:ac:49:5d:4a:6d:
ae:e8:bf:5a:44:a7:f4:0d:b1:52:ac:64:d9:05:e5:aa:8c:53:
cc:06:9c:11:92:b2:17:07:29:86:13:50:ce:7c:be:bd:63:79:
99:20:52:df:e6:ac:47:53:f1:08:52:3c:66:77:74:73:b7:a7:
42:01:c5:81:ed:fe:bb:8b:7f:13:31:e5:0d:9f:e0:d0:fd:2f:
14:2b:e2:4b:98:1c:2c:a2:cf:43:28:56:38:08:31:c0:ee:2e:
d3:4b:08:e2:4d:6a:89:dc:99:62:82:4d:d7:77:6e:cf:66:0a:
d1:fa:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:58 2025 by rpki-client