Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/4ARmJWv0-mYKpkzk9uT3niqnJzE.roa
File: 4ARmJWv0-mYKpkzk9uT3niqnJzE.roa (raw, json)
Hash identifier: pBvsde9XzMP0xigQbszWNedBxvjqhFIr4CcrbPFVW1s=
Subject key identifier: E0:04:66:25:6B:F4:FA:66:0A:A6:4C:E4:F6:E4:F7:9E:2A:A7:27:31
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 068E4728
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/4ARmJWv0-mYKpkzk9uT3niqnJzE.roa
Signing time: Sat 01 Jan 2022 15:05:07 +0000
ROA not before: Sat 01 Jan 2022 15:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51409
IP address blocks: 178.255.56.0/24 maxlen: 24
178.255.57.0/24 maxlen: 24
178.255.58.0/24 maxlen: 24
178.255.56.0/21 maxlen: 21
178.255.62.0/24 maxlen: 24
178.255.63.0/24 maxlen: 24
178.255.59.0/24 maxlen: 24
178.255.60.0/24 maxlen: 24
178.255.61.0/24 maxlen: 24
185.41.227.0/24 maxlen: 24
185.41.224.0/24 maxlen: 24
185.41.225.0/24 maxlen: 24
185.41.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109987624 (0x68e4728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Jan 1 15:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e00466256bf4fa660aa64ce4f6e4f79e2aa72731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:36:20:46:86:9e:5a:0a:c4:bc:d8:c3:36:
72:68:20:11:fe:93:09:3c:59:20:de:12:77:3a:27:
05:7f:60:29:17:be:e6:c7:46:a7:39:bb:7d:33:3e:
df:65:09:71:ef:48:a6:aa:50:1c:51:08:02:0e:cb:
f9:af:45:9f:92:db:18:28:64:05:de:57:7b:03:e0:
e1:2a:c6:2b:04:9b:51:32:2e:75:2f:37:8b:5f:5e:
7c:a5:05:df:1b:4c:8e:ce:bd:e0:11:7a:11:55:33:
ec:c2:3e:09:d1:eb:0e:58:73:5d:0b:c3:e8:38:f3:
a9:b5:80:5b:0b:7e:61:12:d0:3c:97:19:48:99:22:
cb:3f:2a:cc:64:e8:67:76:e4:4e:a9:4c:75:d9:8e:
23:54:92:3f:e3:e4:7b:b2:76:4c:c5:60:06:99:6f:
17:37:4d:25:a6:47:55:90:0a:31:64:51:10:6a:47:
70:2d:c5:40:10:6a:8d:cc:3c:4c:33:3b:6d:8a:97:
69:e1:b0:03:df:c6:49:dd:23:b6:11:64:1a:4d:c7:
0d:6e:47:ec:1e:80:81:81:43:e9:2b:23:76:bf:32:
0f:71:f2:36:04:6d:4a:d8:07:75:d8:9f:26:b6:3e:
9e:0a:05:5d:63:f9:0a:db:3d:d7:93:d4:06:d8:25:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:66:25:6B:F4:FA:66:0A:A6:4C:E4:F6:E4:F7:9E:2A:A7:27:31
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/4ARmJWv0-mYKpkzk9uT3niqnJzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.56.0/21
185.41.224.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9b:36:eb:bf:48:11:9f:e5:8b:84:03:69:69:0e:f2:5d:49:
a2:3f:0b:69:30:8f:6d:34:10:3e:4f:9f:3d:78:be:98:47:e3:
9d:0b:69:d9:37:8e:2d:c3:08:06:a7:3d:19:f2:9a:e7:9e:f7:
e7:09:17:5c:27:d1:bf:4e:68:2b:fa:57:de:98:5d:de:ca:1d:
1b:92:1d:ae:49:d9:05:e3:fe:87:79:49:33:97:31:cb:3e:d7:
79:11:d6:ea:7b:c6:3a:57:4d:7b:17:36:73:25:81:00:ec:b8:
79:af:44:2c:84:69:cc:6b:c3:bb:12:6f:cd:1d:e5:85:59:fc:
26:8c:cc:84:91:cd:a9:a8:96:c0:b1:2a:b3:5b:27:10:e9:3b:
c7:c4:15:ea:f0:34:1c:2a:19:04:2e:bf:6c:c4:99:d6:f4:c9:
1a:a6:40:39:57:fd:93:1e:d1:50:2f:7a:4c:10:ff:41:15:7a:
fe:e7:46:ed:48:85:40:4b:57:cc:5a:0c:28:71:b7:68:86:64:
c1:78:b1:6e:c8:76:8c:e0:44:49:90:03:46:5c:e8:38:16:f0:
ea:14:be:1c:a3:5b:92:22:41:2a:3a:2e:86:6e:96:6b:00:dd:
f5:ca:51:d8:41:3b:c1:3f:31:ce:a4:00:62:fb:74:d5:9f:96:
4c:f8:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:11:06 2025 by rpki-client