Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa
File: sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa (raw, json)
Hash identifier: RsstvDfBjGJpXjV7T5hOQAdF/zfvjQGtL9dWSvJI+Nw=
Subject key identifier: B1:DC:1C:3D:95:08:83:79:C8:27:6C:3C:4B:A2:7E:12:00:1B:E9:38
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 0189018DCE8518AC855A7A4AF4C020EF8419
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa
Signing time: Wed 28 Jun 2023 10:30:17 +0000
ROA not before: Wed 28 Jun 2023 10:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9199
IP address blocks: 185.57.46.0/24 maxlen: 24
2a04:7580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:8d:ce:85:18:ac:85:5a:7a:4a:f4:c0:20:ef:84:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Jun 28 10:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1dc1c3d95088379c8276c3c4ba27e12001be938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:94:ae:96:64:34:2c:08:89:d7:12:d5:aa:
79:f3:f7:8a:c1:25:24:94:9a:f1:07:69:80:74:01:
4e:22:be:2b:6c:5d:cb:ce:25:8e:7b:58:a6:c2:a5:
5f:8c:51:9a:c8:78:62:cf:d0:ed:89:f3:89:45:76:
76:6d:16:8d:0f:e4:67:c7:14:da:a9:bf:dc:08:40:
10:e2:7a:65:83:6c:d6:55:25:f9:65:60:0b:8b:68:
89:20:16:b8:9d:20:3d:f5:90:34:7a:cf:0e:34:aa:
7e:03:aa:8d:39:95:a2:eb:4f:a3:c6:ac:01:85:3a:
20:87:37:b3:b2:d8:74:f8:c4:31:df:35:39:cf:98:
76:ea:f5:0b:95:7d:46:ad:18:12:50:5b:60:a7:fa:
18:c3:a6:5e:64:14:cb:65:6d:a3:a4:d0:57:d0:fd:
76:16:03:d3:ac:2f:97:0d:5b:c2:6d:bc:d0:82:4b:
81:fb:0b:c0:e4:0c:e5:4a:ab:74:9a:7e:61:7f:68:
9a:20:06:e1:80:4f:38:a1:dd:d8:96:b6:d8:e9:d1:
39:24:4b:39:58:07:b0:4c:e6:88:41:55:68:9c:1d:
80:25:aa:aa:c2:ea:5e:f6:29:04:96:cb:28:a9:af:
8e:c7:da:bd:2b:fe:bd:3e:46:d8:e9:49:06:76:95:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DC:1C:3D:95:08:83:79:C8:27:6C:3C:4B:A2:7E:12:00:1B:E9:38
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/sdwcPZUIg3nIJ2w8S6J-EgAb6Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.46.0/24
IPv6:
2a04:7580::/29
Signature Algorithm: sha256WithRSAEncryption
56:19:5f:bb:2b:32:6b:be:03:58:d3:2d:17:2a:f2:83:16:e8:
c0:b6:82:b8:b3:3b:8e:43:f1:a7:fd:3c:c3:08:99:fb:7b:53:
2b:ba:82:bf:ba:c1:46:16:bf:fb:af:91:d5:0e:61:2e:35:39:
20:f9:71:69:32:30:77:d2:72:77:0c:63:f0:0e:6e:7e:35:f2:
ba:90:39:fb:e5:6c:41:93:f7:29:82:a8:12:78:f7:03:2e:d7:
72:b4:3f:d8:1a:e7:6a:08:dd:5c:71:0a:d2:ab:ba:3f:38:73:
c3:e4:b0:58:9a:d4:4a:0b:97:0f:a8:4e:69:07:df:cb:f3:70:
9c:6e:34:e8:5f:10:13:84:b9:72:4a:0d:dd:9c:83:0b:d1:9f:
7d:a2:af:89:6b:54:c1:05:b2:45:f8:8c:9e:27:51:fa:00:f9:
f7:30:d1:2a:03:65:e4:29:ba:93:12:38:53:38:df:00:a4:a0:
7f:8c:69:59:4e:ac:17:dc:21:f8:ed:ea:29:ef:42:c8:87:b0:
8f:b8:8b:8e:8b:ce:9d:67:f4:94:c8:60:22:8f:8a:22:40:0f:
8d:57:e6:ba:77:93:47:34:8e:93:38:39:97:eb:be:24:54:69:
a6:52:34:57:9e:db:02:69:cf:69:19:e2:9c:d1:fa:63:04:b3:
21:5e:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:17:15 2025 by rpki-client