Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/3Wy76QlFeT6BhJ1pQafcSLbWDvc.roa
File: 3Wy76QlFeT6BhJ1pQafcSLbWDvc.roa (raw, json)
Hash identifier: WemIPFEUJw9fZ29ynzJ8jsNZ9kdTPw6/ZUQsINuuHLI=
Subject key identifier: DD:6C:BB:E9:09:45:79:3E:81:84:9D:69:41:A7:DC:48:B6:D6:0E:F7
Certificate issuer: /CN=f071e437982cc346f6e817ca64892723edb5419a
Certificate serial: 01856D53E8BE96EC2CE94A200FCA15C606FC
Authority key identifier: F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/3Wy76QlFeT6BhJ1pQafcSLbWDvc.roa
Signing time: Sun 01 Jan 2023 12:34:53 +0000
ROA not before: Sun 01 Jan 2023 12:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49475
IP address blocks: 185.246.156.0/22 maxlen: 22
2a0d:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:e8:be:96:ec:2c:e9:4a:20:0f:ca:15:c6:06:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071e437982cc346f6e817ca64892723edb5419a
Validity
Not Before: Jan 1 12:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd6cbbe90945793e81849d6941a7dc48b6d60ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:8a:c6:9e:0b:b4:7a:44:8a:11:31:8f:44:
e8:e6:fa:c7:9c:a3:5e:73:c1:62:2e:28:e8:30:44:
c2:23:46:f6:30:47:4b:82:cf:a8:de:14:6b:ae:a8:
6a:3d:91:aa:48:69:d7:dc:d4:7c:eb:f5:1a:a9:06:
80:62:a1:0e:82:94:56:ed:2e:e4:4b:f3:c7:37:52:
97:1a:1f:75:c4:76:03:6e:c7:9d:db:8e:92:10:a0:
9e:17:3d:8d:08:3d:12:22:e4:4c:b0:61:da:0e:6f:
d5:d2:f7:b7:25:55:d7:e7:fd:1a:e9:ed:e4:ea:47:
f4:9a:e7:a3:f5:de:1d:77:c0:50:6b:83:6a:f2:88:
e7:80:9d:c5:53:7e:70:ec:e2:15:79:21:f0:e2:35:
8b:f1:ec:e9:18:53:e5:e9:fa:21:57:f1:8b:24:13:
60:30:16:32:a0:a3:e4:2b:bd:da:60:ac:d3:32:fa:
49:7a:90:d1:bc:fd:0e:69:03:c7:8f:1a:41:a0:42:
a6:25:ee:3a:15:a4:4c:e5:68:d5:14:cf:8c:ed:2e:
e4:60:af:27:2b:32:18:4e:7d:90:3f:93:1b:e0:23:
9a:9a:40:6c:a6:68:db:0a:8f:fc:e8:ea:5e:d2:67:
23:d7:9d:fa:f8:ed:c5:f1:00:b1:af:03:6a:bc:4f:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:BB:E9:09:45:79:3E:81:84:9D:69:41:A7:DC:48:B6:D6:0E:F7
X509v3 Authority Key Identifier:
keyid:F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/3Wy76QlFeT6BhJ1pQafcSLbWDvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.156.0/22
IPv6:
2a0d:8780::/29
Signature Algorithm: sha256WithRSAEncryption
b3:73:49:88:0d:c0:41:ed:77:0a:5e:01:4c:81:fa:72:68:fb:
49:48:23:03:41:07:80:3a:cc:18:87:50:9a:3d:7f:4b:d9:51:
93:2a:30:bb:54:4d:b5:f7:61:3c:72:1d:28:cf:c7:48:fb:2f:
3d:e8:0d:6c:72:9f:22:b4:7b:c8:1e:49:04:2c:47:73:31:27:
22:05:6c:10:43:b6:ab:8b:d6:f1:84:10:ec:22:b7:1d:07:b7:
c7:4e:6c:ef:b0:90:27:a1:35:35:dc:c0:cd:3c:2f:b3:d4:9d:
a6:7d:fd:08:e2:9e:f7:d5:6a:be:dc:e8:a5:f9:27:62:4f:73:
9d:26:1e:bb:62:8d:ed:ab:f1:13:8d:86:61:31:43:71:35:f9:
17:4b:0a:4c:f9:f4:f2:58:a0:26:35:b4:40:55:55:03:45:ac:
f8:1e:c4:dd:ff:c3:99:b1:74:8e:6e:c2:60:15:62:85:43:77:
de:2e:a2:9b:ef:23:93:39:20:3b:b0:56:0a:c5:bb:f3:4d:ce:
08:c6:9e:58:c9:96:99:52:c2:8d:f3:01:3d:b3:a7:4d:5a:2e:
92:7b:e7:b0:ff:62:40:09:ab:95:53:67:6b:ce:28:52:33:e3:
90:86:f2:02:64:1a:1a:17:7a:14:2e:99:b1:22:80:91:ea:39:
7b:f7:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:39:10 2025 by rpki-client