Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/Ru_6ak2kQE4vBeillfSwc_qRWSQ.roa
File: Ru_6ak2kQE4vBeillfSwc_qRWSQ.roa (raw, json)
Hash identifier: 7ZRzjdBZz/se4zuJzElnaYxh6oIoiyr2tyfnaMsz90I=
Subject key identifier: 46:EF:FA:6A:4D:A4:40:4E:2F:05:E8:A5:95:F4:B0:73:FA:91:59:24
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 05985387
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/Ru_6ak2kQE4vBeillfSwc_qRWSQ.roa
Signing time: Sat 01 Jan 2022 16:03:29 +0000
ROA not before: Sat 01 Jan 2022 16:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30437
IP address blocks: 159.245.16.0/24 maxlen: 24
159.245.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93868935 (0x5985387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Jan 1 16:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46effa6a4da4404e2f05e8a595f4b073fa915924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:cf:d0:5c:c9:c3:06:5f:90:e3:52:3f:df:
ea:a6:8a:91:09:d3:42:b7:67:49:70:d3:92:fa:f2:
b6:c7:d9:c0:5e:f5:b7:2e:be:ba:98:71:30:a0:85:
27:9f:c8:08:24:cf:23:96:86:e3:8f:04:06:a7:5a:
82:c5:7d:08:7f:9e:ab:fb:05:1b:20:bd:49:3d:ce:
64:64:60:72:88:0c:4d:66:6a:84:75:6f:37:5d:43:
94:d0:02:3e:7f:d2:90:2e:2e:22:96:e4:e2:d3:83:
84:29:4b:4b:73:6a:93:be:ac:74:1c:da:26:f3:53:
be:4d:8c:08:ee:8c:02:b3:16:42:75:81:9c:45:08:
59:14:04:ec:a0:aa:80:c3:17:9f:0d:b3:84:e4:0b:
9c:85:18:ae:2d:b2:b5:67:75:a6:ec:e5:8b:3c:07:
3d:3e:52:de:78:91:fc:93:d1:79:48:81:5f:3e:ee:
1f:70:52:2d:a2:21:f9:12:73:7d:2c:4c:9e:03:de:
9f:6d:e5:84:76:b2:01:90:c2:c0:a3:43:c9:d8:48:
70:ec:b4:99:8b:b2:79:ed:f8:2d:6c:11:3a:1c:7b:
ea:b9:40:0b:56:7c:53:c4:40:80:53:20:85:d4:23:
ab:15:5b:ab:44:45:e9:52:d5:ae:ac:5f:e4:a5:e9:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:FA:6A:4D:A4:40:4E:2F:05:E8:A5:95:F4:B0:73:FA:91:59:24
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/Ru_6ak2kQE4vBeillfSwc_qRWSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.245.16.0/24
159.245.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:13:ae:9f:80:55:dd:bd:bd:62:a0:b9:45:d0:02:f5:0c:98:
be:54:5c:7c:34:58:ea:90:fe:82:12:d0:39:c6:0c:8d:9c:16:
93:8b:6b:29:c6:07:22:4f:68:6f:30:d1:a6:88:ff:72:f3:b9:
27:4e:fb:70:f4:a0:06:4c:d3:83:5f:cb:93:e9:90:a0:e3:8a:
0a:bf:e6:bd:91:bd:6c:5f:3b:44:86:2f:6b:c7:28:ee:35:62:
5e:47:ec:a0:28:6e:61:e7:4c:99:97:0c:4d:c7:44:21:73:ea:
f4:f6:07:2f:7b:ec:03:72:da:8f:45:1e:da:75:b2:be:e8:18:
be:83:e3:f4:3f:51:82:3d:3d:7b:bc:df:a5:e2:30:0d:94:26:
7d:59:79:e1:2d:4a:03:7b:a0:dd:87:d6:ca:0c:40:11:b1:b9:
1a:fa:d8:4b:ff:f7:dc:7c:7c:ea:07:ff:77:e4:02:82:17:09:
ec:18:65:b2:14:71:59:3f:43:4d:a4:24:bd:3e:45:30:c4:e8:
3b:1a:f1:02:9f:d8:c3:93:d2:e6:bb:97:93:e1:8d:4e:d1:32:
70:69:4c:fc:d3:40:3e:a2:85:c1:92:aa:34:af:84:25:2e:b7:
eb:f4:ea:ad:7c:68:d1:23:13:21:7f:a9:61:17:91:8c:f3:42:
fd:26:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:13:55 2025 by rpki-client