Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/hy4waqI9zY5sXVszxHhoQNuP7Fw.roa
File: hy4waqI9zY5sXVszxHhoQNuP7Fw.roa (raw, json)
Hash identifier: EGKZ6gtRXm7rTiquqD8qwdGKZvI0/QZw9jdjEVFZ51c=
Subject key identifier: 87:2E:30:6A:A2:3D:CD:8E:6C:5D:5B:33:C4:78:68:40:DB:8F:EC:5C
Certificate issuer: /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial: 03012127
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/hy4waqI9zY5sXVszxHhoQNuP7Fw.roa
Signing time: Sat 01 Jan 2022 07:54:16 +0000
ROA not before: Sat 01 Jan 2022 07:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211799
IP address blocks: 185.40.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50405671 (0x3012127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Validity
Not Before: Jan 1 07:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=872e306aa23dcd8e6c5d5b33c4786840db8fec5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:69:62:c4:41:ab:41:2f:0a:2e:a4:96:39:53:
c6:2e:cd:e4:4b:ad:f5:05:15:9b:d0:a1:2a:a2:e5:
c3:78:8b:82:a0:78:b3:29:0b:2a:92:95:d2:c7:15:
bc:ec:58:cb:b4:81:9c:b3:5e:f0:39:18:28:72:bf:
56:3e:ce:6f:e1:76:ff:ff:c4:3e:87:9a:b3:ea:7e:
18:3b:f2:0e:4a:78:fd:d5:2b:73:c9:48:26:1d:63:
96:d7:e0:bd:55:1b:c2:5f:ca:9a:96:d0:ef:28:23:
eb:d1:b3:5b:22:92:42:96:4a:62:42:56:97:55:d1:
43:b8:02:6f:53:be:30:32:bc:dc:97:4b:2c:5a:10:
ec:43:87:72:01:c9:9e:8f:d1:70:d8:c4:44:d8:0a:
f7:44:0a:50:97:71:d1:17:8b:bc:76:23:d7:be:75:
b1:dc:33:36:f8:05:0d:5f:2b:e5:58:b4:15:85:73:
0b:9d:a2:8e:f3:7d:02:64:11:08:3c:1f:36:2e:e1:
ec:28:8a:5d:b1:12:97:84:b2:02:19:6f:b0:8d:4d:
50:a7:b4:d3:61:00:98:0c:ca:45:ee:9d:c9:d7:7c:
a1:89:a8:13:bf:40:26:84:2b:fa:7f:e7:23:99:d6:
cb:fb:59:c4:34:7a:33:6c:ad:5f:50:06:4d:23:fd:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:30:6A:A2:3D:CD:8E:6C:5D:5B:33:C4:78:68:40:DB:8F:EC:5C
X509v3 Authority Key Identifier:
keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/hy4waqI9zY5sXVszxHhoQNuP7Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.17.0/24
Signature Algorithm: sha256WithRSAEncryption
22:74:07:d1:67:02:56:76:28:e6:0e:e7:04:f4:ee:72:50:20:
6d:73:94:f9:c2:f2:15:f0:e4:5b:da:f3:f4:97:d2:64:bb:f4:
10:d3:5f:d4:bd:e1:91:1d:35:1d:84:f0:8a:1e:d7:38:ad:2b:
7e:4b:cd:72:aa:f6:f2:30:a2:30:1f:7b:5e:96:63:5c:f5:d9:
98:a0:99:fc:b9:d3:15:0b:47:aa:c9:56:9a:62:c2:8f:05:f1:
e1:9a:f8:9d:bb:4f:14:53:cd:d4:5b:e9:a0:28:a5:34:27:91:
7a:8c:fc:f6:30:78:aa:a9:12:74:8f:f0:fc:a6:5b:cf:ab:5f:
03:7a:28:ec:f4:86:8a:c3:69:4b:95:a2:cb:70:c1:57:e9:28:
1f:ff:0c:33:a7:40:97:77:43:9b:0b:36:d3:8a:08:66:bf:3c:
10:5c:d1:64:b0:a3:ef:09:60:89:c0:ab:1f:2d:09:7d:f2:2a:
e7:6f:56:d3:62:10:0f:aa:c2:57:2b:d1:6a:2f:97:8a:56:83:
d8:b6:b6:08:c4:3b:e6:06:fd:7b:81:1b:d4:75:c5:16:5c:cd:
07:80:5a:b8:b3:98:55:7d:cf:a3:b5:45:69:9e:04:4b:ed:7c:
cc:fa:5a:be:6e:69:c8:b1:12:95:22:eb:3c:12:1c:fe:c2:f1:
bb:c5:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:35:24 2025 by rpki-client