Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/m6JQ-c9ofrvhO-NKnUVEbrZ1sXU.roa
File: m6JQ-c9ofrvhO-NKnUVEbrZ1sXU.roa (raw, json)
Hash identifier: ejzwqCKr43hN7bKpBeKlP0Pk8bRkowGjHfpn5zaRdSg=
Subject key identifier: 9B:A2:50:F9:CF:68:7E:BB:E1:3B:E3:4A:9D:45:44:6E:B6:75:B1:75
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01DAA58C
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/m6JQ-c9ofrvhO-NKnUVEbrZ1sXU.roa
Signing time: Thu 19 May 2022 14:05:29 +0000
ROA not before: Thu 19 May 2022 14:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.145.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31106444 (0x1daa58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: May 19 14:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ba250f9cf687ebbe13be34a9d45446eb675b175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:0c:96:35:40:08:28:df:1f:c1:b9:3e:54:
f3:a4:60:ab:d1:46:2d:14:74:c8:d9:4d:94:9d:26:
82:9b:6a:60:45:b7:6b:f1:63:8e:c0:19:9c:22:23:
36:a0:bd:0f:c6:f5:20:b7:f4:4a:40:64:e6:56:d9:
6c:f1:f3:c6:35:07:57:9f:04:0b:f7:cb:5f:26:38:
f4:67:2a:35:d0:80:86:b1:58:fd:ad:a8:d2:bc:66:
13:66:24:67:7f:81:57:1f:3b:6e:90:cb:83:ed:6a:
66:43:a1:2e:b9:69:04:bb:f2:50:0d:35:cc:dc:63:
c3:5b:69:0c:22:02:47:7b:8a:ca:47:54:d2:20:38:
7a:d1:45:ef:24:af:0d:38:6a:75:ae:39:f5:fc:af:
60:e3:7e:af:00:00:1f:0e:13:0e:2d:d5:7c:dc:58:
fa:9f:ce:a1:ab:b4:62:92:5c:72:6e:ca:9f:55:32:
1a:4f:da:a1:d8:70:87:50:7d:38:b4:23:3d:26:b6:
9c:12:e3:8c:ab:51:9b:26:82:e2:8a:4f:e1:ac:07:
4a:ce:a0:2b:f0:10:93:72:94:e1:e2:bf:3f:68:b2:
d5:de:99:8c:b8:ab:70:0a:32:7e:f8:9e:f6:cd:dc:
da:3f:f4:64:4e:4b:71:ef:2b:1a:1d:9a:a3:b5:3d:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A2:50:F9:CF:68:7E:BB:E1:3B:E3:4A:9D:45:44:6E:B6:75:B1:75
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/m6JQ-c9ofrvhO-NKnUVEbrZ1sXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.178.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:5e:99:44:82:eb:25:6a:1b:04:39:57:80:a2:95:bc:c8:b2:
b0:09:10:db:0f:1e:ab:a5:be:b4:c4:c4:4f:0a:ad:11:d4:9c:
84:97:09:97:47:ea:87:6f:c1:1a:97:55:fa:b5:2d:8c:e9:d4:
2f:33:94:06:bc:6d:39:e5:46:54:94:17:c7:d3:0c:d4:ef:fe:
e9:c3:a0:23:19:e9:38:00:55:7f:4b:64:fa:db:e8:18:25:37:
1a:46:af:0f:92:54:bb:5c:df:1e:a3:f1:aa:8d:00:d8:dd:75:
45:8e:92:f6:af:9e:d6:92:e9:b2:b9:88:44:34:48:07:e3:dc:
1a:d4:91:27:39:fe:7e:9d:c1:9a:4f:68:03:2d:43:ad:72:23:
0a:d4:b6:46:e4:a5:dd:30:d4:55:98:6b:e3:14:10:52:db:ae:
49:4a:5e:07:8b:81:19:e7:c9:b4:a2:85:55:55:61:0c:37:df:
3f:74:50:39:41:d7:4a:ff:39:ad:72:73:85:3b:f6:8b:93:0e:
95:d8:ec:35:70:01:86:cd:5d:41:42:bf:7a:82:fd:f4:96:66:
0c:18:52:f7:3d:01:10:19:6e:66:a7:b9:66:12:7b:f4:e7:73:
33:0e:e3:72:f0:94:84:f7:85:44:a5:66:2e:90:b9:c2:9e:23:
50:d5:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:35 2025 by rpki-client