Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/rEudWp3H01VSfw44B1Y5SiNmuaQ.roa
File: rEudWp3H01VSfw44B1Y5SiNmuaQ.roa (raw, json)
Hash identifier: DSUF2yY1EJhEFSY2uQnm4EEu1XJtNwi63Up/xqXSfJU=
Subject key identifier: AC:4B:9D:5A:9D:C7:D3:55:52:7F:0E:38:07:56:39:4A:23:66:B9:A4
Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial: 1241FFE3
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/rEudWp3H01VSfw44B1Y5SiNmuaQ.roa
Signing time: Sun 19 Jun 2022 10:50:44 +0000
ROA not before: Sun 19 Jun 2022 10:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206561
IP address blocks: 185.173.191.0/24 maxlen: 24
185.173.188.0/24 maxlen: 24
185.173.189.0/24 maxlen: 24
185.173.190.0/24 maxlen: 24
2a0f:46c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306315235 (0x1241ffe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Validity
Not Before: Jun 19 10:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac4b9d5a9dc7d355527f0e380756394a2366b9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:b8:3c:08:06:85:a3:67:b5:cb:4a:5d:82:
a3:b7:21:aa:40:69:97:96:4e:b3:63:29:af:d4:83:
52:ba:7a:5a:08:b2:b0:27:0f:0a:b0:18:25:54:0f:
9a:d8:3b:5e:b9:fb:6c:5b:e0:a9:24:63:ba:55:d0:
92:bb:15:52:bd:0c:9a:ca:fb:77:9d:21:3f:a1:65:
de:1b:7e:ed:88:68:2f:c4:51:b1:cb:93:4d:ea:48:
07:04:f2:3d:5c:fa:11:43:41:b6:a7:15:6e:41:9a:
83:10:81:8d:91:9e:8e:11:b4:af:78:e3:27:57:23:
43:68:18:8a:8b:3c:1c:a2:2a:3a:61:da:78:3f:17:
0a:fd:3c:63:59:23:08:62:60:8d:0c:7e:dd:fe:6b:
56:51:1c:12:46:e3:7d:b1:a3:8f:d0:f7:a3:80:ec:
a6:93:0a:30:7a:e2:75:f7:60:76:a0:f5:f8:55:d3:
39:2f:4a:9f:e5:f8:43:42:bb:b0:41:35:16:4a:d1:
7c:d5:d3:fe:0f:45:3a:20:9a:a8:0a:cd:ba:7b:90:
04:c5:12:7d:b8:b3:4c:06:5c:de:c5:02:02:0b:0e:
f3:6a:25:5b:16:af:10:44:7c:39:a2:6e:fa:71:b8:
4c:59:03:75:b4:4c:6d:dc:29:d0:72:a3:e9:92:46:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:9D:5A:9D:C7:D3:55:52:7F:0E:38:07:56:39:4A:23:66:B9:A4
X509v3 Authority Key Identifier:
keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/rEudWp3H01VSfw44B1Y5SiNmuaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.188.0/22
IPv6:
2a0f:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
88:d4:60:87:20:f9:08:08:98:84:38:7c:39:81:d4:1f:4f:b1:
b9:df:3b:36:6b:2a:f0:1e:a7:a5:4c:bc:1c:d6:a0:e4:1d:a2:
58:1c:00:1a:ee:67:d7:69:15:e1:0f:7a:4b:36:80:cb:40:74:
bb:a2:e7:4c:c5:47:a9:bb:dd:9c:ce:47:05:d8:08:8a:20:41:
ca:80:d4:3a:51:bd:18:99:70:0a:9a:b0:cf:d0:63:9a:0c:69:
a9:85:f6:a8:96:a9:a6:66:52:e8:4f:79:db:0e:4f:89:bc:ad:
6b:ed:45:57:2d:e9:7c:a9:65:90:47:98:ae:a8:9f:40:08:c4:
16:6d:13:b2:13:33:95:ec:0e:aa:7f:f7:b7:08:b9:0d:6e:7c:
c7:24:ec:82:cf:f6:19:b2:00:49:01:3d:bc:0f:fd:9d:8c:ae:
5b:65:92:6a:95:18:63:0a:3f:2e:d1:e5:06:a7:b9:c8:97:2c:
c4:4b:5d:55:23:59:01:6a:b4:c1:df:1a:f3:a8:de:b3:2c:88:
df:fc:cc:ef:17:70:47:8c:73:37:8a:9b:c7:e9:f2:cd:0a:77:
5d:f3:79:bd:5a:ab:47:ce:01:bc:4a:20:94:2e:2c:d1:c3:d0:
73:49:46:f8:6f:84:bd:f1:d2:07:63:9f:a8:c0:ca:7a:9f:62:
f1:61:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:19:25 2025 by rpki-client