Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/IEhIAeaLcUMstGW4uHt4zYEkcOk.roa
File: IEhIAeaLcUMstGW4uHt4zYEkcOk.roa (raw, json)
Hash identifier: jIOOBVLs+FgYB+GkfTqyjHS8VU9Q2a0hYqialQ58Ohc=
Subject key identifier: 20:48:48:01:E6:8B:71:43:2C:B4:65:B8:B8:7B:78:CD:81:24:70:E9
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01853A5FCC4240B24D8ACB41B7A412FA7FE2
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/IEhIAeaLcUMstGW4uHt4zYEkcOk.roa
Signing time: Thu 22 Dec 2022 15:07:14 +0000
ROA not before: Thu 22 Dec 2022 15:07:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41368
IP address blocks: 185.40.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3a:5f:cc:42:40:b2:4d:8a:cb:41:b7:a4:12:fa:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Dec 22 15:07:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20484801e68b71432cb465b8b87b78cd812470e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:5d:bc:89:e0:63:df:f2:a6:61:c3:5f:2c:
4a:78:f8:1c:6c:20:70:58:03:b4:06:14:4e:0e:8d:
33:5e:8a:4c:aa:92:2b:0d:c4:1f:c8:39:5a:33:ac:
55:0d:ba:ac:aa:fe:3f:fb:7a:82:a2:bb:20:1f:da:
4f:d5:6c:e7:01:ec:84:6e:69:8f:8b:4a:d1:da:21:
ef:e6:1b:00:c7:8b:0c:bc:f9:fb:38:5b:91:20:67:
94:d0:41:2d:6a:d0:f8:8c:46:45:f9:30:fb:db:59:
6d:8b:07:d7:c5:d0:0c:7e:f1:29:bc:e0:dd:24:c8:
77:7b:3e:14:8d:2c:d3:75:0f:79:a7:68:7f:d8:e0:
d2:1a:67:c4:8f:6f:26:99:87:c6:7e:c1:01:1a:63:
24:7b:de:a8:69:59:2c:fb:0b:48:81:eb:69:71:ab:
aa:b5:23:ad:20:2c:27:8a:8e:e2:17:a4:e5:0a:16:
57:24:bf:70:b2:bc:3f:4c:f1:4b:f0:f4:b1:00:82:
f6:e7:05:da:2e:b2:1f:5c:b7:7a:67:59:36:e6:e8:
36:4a:6b:95:4c:37:97:48:2d:a2:7c:c2:83:9c:e6:
54:ad:7e:1d:78:74:e8:d5:87:e2:67:cc:94:8f:79:
d4:9a:f7:f5:ec:cf:3b:c9:e9:7e:45:51:5b:73:3f:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:48:01:E6:8B:71:43:2C:B4:65:B8:B8:7B:78:CD:81:24:70:E9
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/IEhIAeaLcUMstGW4uHt4zYEkcOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.37.0/24
Signature Algorithm: sha256WithRSAEncryption
84:62:f0:53:54:78:4c:e5:94:71:28:5e:79:28:0b:33:14:1a:
fc:be:d7:5f:4f:bb:be:f4:b9:42:b7:a6:7d:93:bc:07:5f:3b:
10:d7:24:c7:69:64:8c:f1:3b:b1:0e:d5:29:db:60:02:32:17:
cf:76:c6:2a:54:4a:83:84:4f:06:fe:16:0f:cb:9c:4d:cb:3c:
67:92:0d:f6:84:66:de:fe:ec:00:bd:8e:8c:12:13:57:f8:73:
07:61:11:1a:18:b1:46:5d:8a:93:64:0f:67:44:2b:9c:e5:d5:
6c:b2:a3:67:09:a5:ce:e6:a2:d5:78:f0:8c:5e:5b:51:0a:d5:
05:bd:53:f2:97:a8:ba:d4:54:e9:20:f3:a2:76:8a:7e:80:89:
00:1d:06:84:70:6b:f0:8d:76:25:cf:c4:9d:c8:6c:a3:98:f1:
c6:29:46:1b:6d:04:f5:33:63:6f:d1:03:df:56:d8:0f:4a:89:
d4:04:39:83:41:cc:97:86:40:83:77:9e:59:83:ae:3b:fc:f9:
d3:80:81:d2:cf:b5:d9:8c:b8:74:c1:9f:2b:e9:d0:cf:a8:19:
f1:5e:47:49:a7:68:d9:02:94:88:25:51:f8:d4:89:d6:d6:60:
95:23:2c:66:20:3d:7c:3f:2b:35:06:96:41:03:bb:0e:82:60:
65:43:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:44:10 2025 by rpki-client