Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/TW0xnXwAiAdAJrK8pTwUEcsvvXo.roa
File: TW0xnXwAiAdAJrK8pTwUEcsvvXo.roa (raw, json)
Hash identifier: Vfw5Iu84NQRbR04o5r8aLRIWe+Tf+qnOGk3TmIc2uek=
Subject key identifier: 4D:6D:31:9D:7C:00:88:07:40:26:B2:BC:A5:3C:14:11:CB:2F:BD:7A
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018CB4DA0CE01B91DDB0C50E31AED094BA3F
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/TW0xnXwAiAdAJrK8pTwUEcsvvXo.roa
Signing time: Fri 29 Dec 2023 09:13:58 +0000
ROA not before: Fri 29 Dec 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:da:0c:e0:1b:91:dd:b0:c5:0e:31:ae:d0:94:ba:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Dec 29 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d6d319d7c0088074026b2bca53c1411cb2fbd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:73:f6:f7:43:24:ea:77:6f:94:3c:e6:c6:
e7:00:c9:b0:f9:cf:52:95:ec:2c:a9:d7:0b:56:9c:
2d:8b:b5:db:a5:cf:37:4d:c7:b1:ae:d2:59:dc:e3:
3f:c3:82:ed:8e:df:b7:7e:79:4c:8f:c4:9d:08:0d:
d0:d5:63:a4:b7:18:66:a4:37:27:7a:12:31:df:66:
eb:96:f4:65:43:1d:a1:b6:3b:8c:c3:12:63:af:9e:
55:02:fa:71:15:66:d7:41:b2:55:8a:84:77:37:d8:
bf:a8:ce:3b:25:1d:72:35:ce:09:4f:b5:39:df:4d:
6f:4f:4c:30:79:65:a8:c8:7d:da:2f:94:a7:85:5e:
23:19:c1:65:0a:aa:b1:42:af:e4:82:98:3b:38:fa:
f7:d3:80:b4:45:87:ee:b5:90:83:ea:ba:2b:01:d1:
dd:68:23:99:a3:1b:89:3d:23:3c:97:d3:a8:34:d7:
7b:fe:e7:5c:15:35:3f:71:15:d3:91:92:9b:fe:bc:
ae:a1:3a:58:35:79:92:51:2d:d4:4d:bc:2f:f0:da:
4c:14:9e:98:51:1a:43:99:23:a4:37:1c:bc:c3:2a:
2c:77:fd:6c:38:20:30:0d:71:a4:53:ad:d1:ba:b8:
c7:14:61:af:4d:fd:01:d4:d5:66:b3:68:a1:ed:51:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:31:9D:7C:00:88:07:40:26:B2:BC:A5:3C:14:11:CB:2F:BD:7A
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/TW0xnXwAiAdAJrK8pTwUEcsvvXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5a:a5:09:e3:d9:51:9c:33:1f:0b:a7:36:58:03:aa:8d:f4:
11:63:00:ef:e8:bc:a3:ca:f4:db:9f:30:6d:c5:67:c0:33:e1:
a9:bd:3d:ea:07:d4:d6:d1:54:48:d5:27:68:5a:d2:02:d7:5b:
cd:2a:ef:86:08:72:a3:dc:f8:af:99:cb:76:c0:82:83:1a:a5:
fa:13:bd:e3:02:8c:6a:74:75:ef:98:9a:d3:d9:61:42:e2:47:
a1:22:1d:18:64:37:67:9d:aa:5c:7a:49:01:f1:39:f3:06:47:
a5:bf:ab:a8:22:bd:5e:5a:b7:6f:94:e4:b2:0e:25:ac:4d:e4:
66:92:5d:31:9f:4e:66:89:b0:c2:ac:e8:68:d4:1a:b0:dc:57:
fe:27:78:dd:d2:5b:1a:c6:88:b1:41:0a:e6:7a:b9:c5:58:dd:
a8:bf:22:b5:f9:d5:fd:b8:76:81:cc:f9:87:80:c0:c1:18:61:
b3:73:fb:82:1e:0d:c9:bc:b1:8e:09:65:93:20:a0:3c:a3:d9:
65:97:09:eb:88:6f:7c:14:2f:57:99:40:c3:e4:82:cc:86:8a:
83:75:de:8c:0c:51:56:37:cd:34:ae:d6:23:5f:e1:34:71:be:
10:d2:75:29:7b:e0:c7:92:71:0e:48:ed:47:1c:8f:ec:a3:35:
8b:60:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:52 2025 by rpki-client