Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/DBgTcLt0dmBkc_4Rh862AorqWRs.roa
File: DBgTcLt0dmBkc_4Rh862AorqWRs.roa (raw, json)
Hash identifier: HSfPlWbIrKgLpOEwic0Hodn7AmwWTg4IVqjQsNRQzv4=
Subject key identifier: 0C:18:13:70:BB:74:76:60:64:73:FE:11:87:CE:B6:02:8A:EA:59:1B
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 0189833AF704A4D1DF113C4DBF7B270B6410
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/DBgTcLt0dmBkc_4Rh862AorqWRs.roa
Signing time: Sun 23 Jul 2023 14:50:26 +0000
ROA not before: Sun 23 Jul 2023 14:50:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 185.246.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:83:3a:f7:04:a4:d1:df:11:3c:4d:bf:7b:27:0b:64:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jul 23 14:50:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c181370bb7476606473fe1187ceb6028aea591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:e8:ac:9b:38:bf:d5:ae:19:23:87:1b:89:
e9:f0:a8:09:45:a1:7b:60:7c:b5:9f:dc:3d:67:8f:
50:96:07:28:a9:37:25:f3:c6:56:4a:20:4c:12:f0:
6f:20:1d:ce:6c:ef:17:ea:84:f4:d2:eb:16:0a:d4:
d0:91:bf:f5:47:c2:4b:ff:85:e7:15:72:ef:ef:61:
5d:3c:a5:2c:57:57:61:0c:8a:3c:7f:f6:91:a3:7e:
31:fe:80:e3:9e:75:b6:fc:3d:16:63:fd:17:d3:f6:
fe:4a:fc:ca:ac:55:60:a7:bd:45:55:ca:b3:96:ab:
df:a9:c0:51:99:e5:03:da:2a:68:8c:71:9d:ff:e9:
ba:70:4b:48:c3:f6:1a:1c:5a:65:91:8e:a3:76:34:
96:30:a1:40:7f:91:b2:24:8f:40:f0:0c:2f:ed:19:
15:84:d4:76:c2:09:82:a2:a6:ca:ec:11:30:fc:0e:
48:ff:ef:3f:05:31:d9:d5:93:28:1b:02:fa:b8:77:
b0:b1:a5:a6:fa:5d:90:26:1c:e2:d7:05:b2:26:5e:
69:98:4d:86:62:6e:4d:ec:47:da:8e:39:a2:18:48:
9c:25:e0:62:86:53:45:17:49:9c:70:d1:fe:6d:1c:
be:02:bf:08:81:d4:24:03:0c:14:1b:86:dc:74:d0:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:13:70:BB:74:76:60:64:73:FE:11:87:CE:B6:02:8A:EA:59:1B
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/DBgTcLt0dmBkc_4Rh862AorqWRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ff:38:c8:74:20:7b:76:a9:76:ff:3a:a2:05:ba:5b:4f:09:
74:eb:b7:74:f4:38:9e:ef:70:f2:3b:36:ee:1d:15:b6:d0:75:
a2:d5:a3:cd:44:36:2f:e5:97:dd:70:48:f9:0e:0c:cf:e2:f8:
2b:6d:11:85:f7:40:49:0d:50:2c:7c:0a:56:8d:93:61:62:32:
3d:2e:ac:80:58:54:d9:bb:42:4e:cd:4a:eb:8b:7a:20:e0:a0:
ec:12:e3:f5:40:e9:90:b3:b7:e6:63:b0:ae:08:07:82:29:ec:
0d:f9:af:ad:14:8b:a2:0f:6c:08:a2:bc:50:eb:28:13:f7:f6:
8c:ac:26:19:08:a7:60:4d:e5:23:58:6c:35:f2:72:e5:9a:4b:
15:4e:87:42:9a:a9:eb:0b:fa:69:9f:36:8e:0e:85:36:06:26:
b0:a6:83:a0:fe:e4:8f:eb:ae:27:4a:63:02:aa:ca:19:af:7d:
39:fb:fb:44:8e:d6:f2:b2:88:05:1a:20:a2:91:c8:4b:1d:17:
a7:28:f8:7a:8b:a4:a9:16:b2:33:a7:7b:72:be:68:ec:d8:fb:
3e:99:64:6f:fa:06:33:4c:da:58:ba:22:a1:5e:ce:e8:63:08:
23:9d:03:b6:fd:cc:58:69:31:ce:dc:eb:2b:14:e4:67:82:cc:
11:52:03:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:50:19 2025 by rpki-client