Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/RcBpOIpdWrB5njhnbkPnTjdFtHQ.roa
File: RcBpOIpdWrB5njhnbkPnTjdFtHQ.roa (raw, json)
Hash identifier: 5CphKWlJNy7kST51lnxBsPAOFX3eBPkqUSYKSUzTd9U=
Subject key identifier: 45:C0:69:38:8A:5D:5A:B0:79:9E:38:67:6E:43:E7:4E:37:45:B4:74
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 018C458FA19778FB0F171E85E5965E6AE48E
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/RcBpOIpdWrB5njhnbkPnTjdFtHQ.roa
Signing time: Thu 07 Dec 2023 18:34:50 +0000
ROA not before: Thu 07 Dec 2023 18:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58128
IP address blocks: 185.155.205.0/24 maxlen: 24
185.155.204.0/24 maxlen: 24
185.155.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:8f:a1:97:78:fb:0f:17:1e:85:e5:96:5e:6a:e4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Dec 7 18:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45c069388a5d5ab0799e38676e43e74e3745b474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:56:19:7a:52:d9:6b:63:22:57:0d:b7:b7:
0c:c3:5c:de:ed:0f:b5:60:70:aa:0b:d2:a5:f4:89:
cd:bc:2a:17:7e:4e:9a:56:c4:15:a7:c3:06:fa:02:
c5:3e:88:cf:55:38:1b:9f:db:22:4d:54:db:73:bc:
22:b0:05:f3:25:0a:6a:f0:63:43:94:2e:35:98:e3:
3b:dc:2c:e8:2f:84:5f:3b:10:7f:86:c8:b3:36:07:
f8:a5:2b:d2:e7:de:59:99:34:f8:db:a1:40:ca:af:
94:4c:d8:40:13:7f:d4:29:e6:a4:6a:45:a4:0c:c0:
f6:1e:b6:18:f4:c0:e9:bf:fd:a7:06:43:35:9d:1b:
05:30:d0:25:62:d5:36:2e:43:a0:ed:63:8c:28:6e:
a9:2b:91:48:af:c4:92:57:44:c0:9b:cd:16:b0:00:
01:5d:76:2e:d0:ed:f9:13:c3:89:91:c4:bf:1d:f4:
e8:b5:ad:4a:18:4f:f3:b7:e8:cf:9f:a9:3d:63:0e:
18:78:bc:df:fb:e9:ea:a1:f9:20:41:39:b9:78:48:
2b:4b:50:9e:65:38:ed:50:99:a9:fa:68:5b:df:c4:
b5:e9:87:15:93:da:01:b7:72:ca:62:d3:af:8c:44:
54:67:a8:03:60:0e:85:4b:d9:ad:82:1d:3b:d1:56:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:69:38:8A:5D:5A:B0:79:9E:38:67:6E:43:E7:4E:37:45:B4:74
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/RcBpOIpdWrB5njhnbkPnTjdFtHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.204.0-185.155.206.255
Signature Algorithm: sha256WithRSAEncryption
5b:35:52:96:85:26:03:06:70:b5:e8:45:3a:61:ec:2b:2f:b0:
ce:92:8a:2c:b8:ca:7d:6b:3a:3b:c5:f7:17:dd:1d:6f:9b:c6:
84:e1:de:75:1d:ec:d7:75:4d:02:f4:dd:15:81:02:e9:7e:67:
59:10:dc:7a:8a:be:60:a4:b9:cb:96:b5:ed:63:a5:29:13:ab:
c4:51:5b:f5:e3:13:91:db:7a:1a:be:9f:2c:34:97:9d:d4:8e:
fb:e7:87:db:1f:72:c1:11:74:3e:b0:16:86:45:92:a1:69:e9:
cf:96:c0:82:e2:77:1e:80:cf:3a:cf:36:8a:37:88:64:1d:2e:
ed:5c:66:70:33:7f:67:5a:2e:8d:32:86:6b:d7:0d:25:25:2d:
37:ac:94:5a:9a:61:b4:c0:ca:26:c3:a3:a2:a2:07:09:87:4d:
17:91:83:5b:06:1c:06:75:2b:8b:c1:86:e3:11:85:57:9f:a6:
b1:d9:e5:a7:2e:ee:9e:f5:cf:6a:15:66:28:a8:c0:85:0f:72:
bc:96:7c:2a:c1:db:ce:aa:48:f3:ab:ef:a0:b9:78:24:4c:c9:
18:8b:a5:cd:15:4d:8e:ab:ba:33:4d:8e:e9:08:d7:51:59:a0:
fd:e3:95:f1:67:49:b5:39:fd:b0:25:e5:ab:64:08:db:d4:30:
23:d6:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:05:13 2025 by rpki-client