Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/tqWvj9tf6oLm96ww309IzwIL9OQ.roa
File: tqWvj9tf6oLm96ww309IzwIL9OQ.roa (raw, json)
Hash identifier: gPosYpxCbVUzfL/+H4/gmjHK1gArGqyD4h6OhelCVpA=
Subject key identifier: B6:A5:AF:8F:DB:5F:EA:82:E6:F7:AC:30:DF:4F:48:CF:02:0B:F4:E4
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 018A1734B52B2557E45B84BE6CFBD0F8B340
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/tqWvj9tf6oLm96ww309IzwIL9OQ.roa
Signing time: Mon 21 Aug 2023 08:27:24 +0000
ROA not before: Mon 21 Aug 2023 08:27:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203185
IP address blocks: 185.112.244.0/24 maxlen: 24
185.112.245.0/24 maxlen: 24
185.112.246.0/24 maxlen: 24
185.112.247.0/24 maxlen: 24
2a02:6e40:3::/48 maxlen: 48
2a02:6e40:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:34:b5:2b:25:57:e4:5b:84:be:6c:fb:d0:f8:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Aug 21 08:27:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a5af8fdb5fea82e6f7ac30df4f48cf020bf4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:67:42:72:dd:c2:6a:bb:10:f3:7e:e1:fe:
cf:d6:83:12:fe:50:50:1b:19:e9:41:33:85:5d:24:
7b:8e:aa:62:ec:f5:ee:a5:23:8f:88:c3:81:7a:e0:
04:48:99:6f:8f:07:41:8f:0b:96:00:31:0c:ef:9d:
f2:a3:b3:4c:07:5f:34:17:12:84:78:5d:96:2c:1b:
15:93:81:0f:25:e6:a7:00:69:ce:83:00:3f:1e:fc:
13:d4:a8:8c:21:a6:c9:88:41:55:14:70:d0:1d:91:
8f:d6:ff:7f:3b:28:40:4f:cd:59:76:ce:93:ed:a8:
bb:ac:45:72:07:7c:b0:45:b3:1f:0f:38:ec:c1:66:
83:54:d8:ea:81:ec:9b:a3:68:0c:8e:3f:c9:a7:26:
70:22:84:92:e5:8a:aa:d3:1f:4f:e4:6d:43:2f:cd:
7a:b2:e9:36:53:89:25:77:e6:90:37:bf:2e:93:ac:
8f:15:ad:21:99:53:68:64:f2:60:4a:c5:71:1f:cd:
7a:80:2d:7e:b6:0b:b5:c5:79:54:50:20:b9:1e:2c:
df:e1:63:f3:e5:c8:f9:2b:f1:cc:74:b1:4c:c9:82:
b1:99:bb:7d:6f:be:7f:f3:b2:dd:7c:2f:de:46:22:
23:b4:a9:ed:c1:32:27:26:5d:c8:e2:e7:bd:d4:a5:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A5:AF:8F:DB:5F:EA:82:E6:F7:AC:30:DF:4F:48:CF:02:0B:F4:E4
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/tqWvj9tf6oLm96ww309IzwIL9OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.244.0/22
IPv6:
2a02:6e40:3::-2a02:6e40:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:42:1c:b0:cb:a9:44:38:b0:67:25:21:be:03:61:b6:c6:4c:
8d:da:49:0b:39:ec:3f:cb:c7:43:01:cc:ee:45:45:41:1f:54:
e5:c7:46:e4:0c:f9:bd:6b:64:0b:6f:5c:c9:74:ac:fe:0c:a9:
35:9a:8b:e2:84:7f:f2:38:e6:64:46:a3:db:f2:14:19:63:fb:
de:fd:b8:e8:20:3c:42:6c:9b:24:c8:06:c5:83:76:82:81:a9:
b0:0f:30:5f:5b:45:7e:84:e1:04:9a:0d:97:0a:7f:3b:3a:69:
17:72:c5:3b:07:ed:8c:74:02:37:5a:e6:88:b0:35:df:f0:30:
fe:e9:80:3e:c5:b0:fa:41:07:78:18:c8:4c:69:ff:46:d0:30:
0f:ad:a0:42:0b:9e:4f:70:ac:dd:22:c1:8f:6a:44:a3:44:39:
89:3d:77:97:41:b7:1d:12:df:26:a9:32:e5:20:8c:d6:35:46:
c7:8f:04:5f:d7:6d:47:39:77:90:47:03:09:cd:08:46:4b:b7:
db:68:42:c0:7f:b0:ac:cb:83:d7:f7:9b:22:52:ff:4f:ad:15:
b1:7d:65:14:ef:52:19:54:ae:0f:c4:d4:a9:54:41:1f:74:fe:
b1:d1:ce:55:b0:d7:48:9a:fb:f6:a8:81:4c:be:43:5f:92:ce:
3b:5f:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:42:06 2025 by rpki-client