Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/SNOFaU09Bb4hLq6ideUQp0nDRLI.roa
File: SNOFaU09Bb4hLq6ideUQp0nDRLI.roa (raw, json)
Hash identifier: ZiSs5Ouv2D1WlzaLf1h3+2KslT/yfAkStmQtBmHJ14A=
Subject key identifier: 48:D3:85:69:4D:3D:05:BE:21:2E:AE:A2:75:E5:10:A7:49:C3:44:B2
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 10BECCA9
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/SNOFaU09Bb4hLq6ideUQp0nDRLI.roa
Signing time: Sat 01 Jan 2022 03:54:00 +0000
ROA not before: Sat 01 Jan 2022 03:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42160
IP address blocks: 185.18.148.0/23 maxlen: 23
2a04:b80:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280939689 (0x10becca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jan 1 03:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48d385694d3d05be212eaea275e510a749c344b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:37:5d:27:be:97:bd:a6:33:04:b8:73:23:
f6:3f:34:8a:8b:5b:aa:8a:c3:55:90:c7:bb:81:75:
fe:ce:49:bc:15:f6:ec:dc:89:1c:e6:fd:60:61:83:
35:72:48:24:be:fc:6d:bf:25:87:8b:11:be:6a:ab:
a4:d0:8d:d9:da:fd:7d:aa:38:ea:b7:22:35:1a:75:
59:c8:5d:ef:96:f0:50:4a:10:17:f8:56:e3:92:6e:
7a:6a:cc:33:bc:e0:12:f2:57:73:32:00:dc:0f:41:
b4:b1:b3:77:5a:c9:08:4b:92:ef:7b:fa:07:00:c2:
14:2f:d0:7b:17:38:22:b4:a1:14:91:c4:b8:95:c4:
40:75:15:6c:f7:59:21:ca:3a:b7:99:b4:47:7f:6c:
19:e1:0e:65:d6:ab:de:75:75:62:df:b1:bf:53:d4:
bd:10:54:5a:90:10:96:0c:94:c1:5b:41:5c:72:36:
43:d9:d9:c2:2e:3f:71:fa:ed:29:7c:0d:e5:ba:01:
92:80:38:b7:1f:98:d3:a4:6f:ce:25:05:92:52:f6:
df:df:67:a2:cc:49:49:05:17:ad:ad:aa:c5:18:2f:
01:56:40:c9:96:7d:9e:8c:dd:80:06:2a:bd:ee:55:
56:a9:8b:3e:cd:1c:39:08:bd:98:04:b8:b1:79:e5:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D3:85:69:4D:3D:05:BE:21:2E:AE:A2:75:E5:10:A7:49:C3:44:B2
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/SNOFaU09Bb4hLq6ideUQp0nDRLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.148.0/23
IPv6:
2a04:b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
78:77:a7:ef:7d:1d:f3:ee:01:83:ff:3a:4c:ef:9d:09:ca:29:
a6:1c:a8:9d:ab:61:22:d2:9e:e6:43:11:8c:20:74:1b:ac:3c:
22:3c:ae:3f:83:02:e2:75:ac:c0:82:b7:75:02:0b:5d:b7:d7:
5f:ba:13:64:d1:65:ef:68:e0:18:84:da:56:4f:3c:70:e5:64:
9f:0f:61:49:1a:d8:6e:22:12:f5:61:07:0f:61:4d:c2:56:b6:
78:04:57:8b:2d:8e:6b:30:3b:26:ef:4b:5e:cd:99:60:7d:2f:
f9:db:f5:8c:49:b4:47:25:3b:3d:2d:64:1c:bc:a8:6b:66:99:
33:c7:d6:3b:24:be:08:a3:a0:92:e1:5e:a5:fa:8a:70:48:47:
2a:cb:d4:4d:7a:51:a0:31:7a:ee:73:8c:e4:78:0c:71:e2:cc:
ef:3d:30:e9:2a:31:f9:e3:85:dc:b8:8a:ae:46:79:ad:13:6e:
f8:c9:c5:46:f4:25:0d:d4:91:ec:48:09:7e:29:63:8e:34:de:
bd:9d:16:98:a4:ce:1d:c2:10:37:a6:d6:36:61:3d:a9:16:5f:
bd:f7:f4:6b:c1:50:4f:19:a8:ae:d9:4c:e5:38:98:3f:9c:02:
8f:2f:ac:04:c2:1c:9e:5a:7a:69:a7:a0:b3:15:17:c7:33:e1:
b5:a7:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:33 2025 by rpki-client