Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/bhDm0M3W7IrEW9aYtZbK2DTAy6s.roa
File: bhDm0M3W7IrEW9aYtZbK2DTAy6s.roa (raw, json)
Hash identifier: 3SNjZdyGga/GYwOKKKJoQHlstRBof0FbRGmp3QI4xfU=
Subject key identifier: 6E:10:E6:D0:CD:D6:EC:8A:C4:5B:D6:98:B5:96:CA:D8:34:C0:CB:AB
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 018697129F7DEE0899DD78D3182497BB83E0
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/bhDm0M3W7IrEW9aYtZbK2DTAy6s.roa
Signing time: Tue 28 Feb 2023 08:10:25 +0000
ROA not before: Tue 28 Feb 2023 08:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47975
IP address blocks: 94.228.16.0/20 maxlen: 24
178.213.128.0/21 maxlen: 24
178.72.128.0/18 maxlen: 24
185.182.120.0/22 maxlen: 24
185.18.72.0/22 maxlen: 24
2a03:2300::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:12:9f:7d:ee:08:99:dd:78:d3:18:24:97:bb:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Feb 28 08:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e10e6d0cdd6ec8ac45bd698b596cad834c0cbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:4b:3d:31:65:d8:38:83:71:f7:43:76:22:
a0:91:37:d9:a9:dc:9b:0f:23:6f:b4:65:cc:84:0c:
b0:6f:ed:1a:d7:2c:12:17:6a:23:f7:69:d2:b9:6c:
16:7e:d1:a0:ae:5e:76:0a:7e:93:e3:cd:ba:88:a0:
64:42:92:b3:e4:b9:0a:4a:89:f9:dd:a9:26:39:f4:
95:6f:20:5f:b1:86:d4:ad:1d:d5:e3:48:15:ba:49:
1e:a1:31:b2:df:e5:f0:37:d6:9b:81:34:6c:c8:55:
0b:f5:8c:82:ab:8b:f8:a9:ec:ee:6c:fa:c2:fd:b6:
b2:c5:58:c3:d2:6b:a3:a4:8d:5c:da:a8:2a:34:31:
0e:02:85:b5:e1:b5:26:7e:6b:9f:91:10:4c:6d:c9:
e5:0b:bc:c0:e5:1a:90:d3:f4:eb:fa:03:1a:4e:38:
dd:c8:d3:bf:ef:ab:f3:99:67:7c:62:ab:27:e3:76:
67:eb:81:4c:f6:a2:65:94:64:cc:03:a1:60:b0:20:
e4:ef:0e:2d:b8:f4:ad:1c:be:be:0b:21:14:9a:13:
79:5d:0a:fc:c3:c5:19:29:b8:df:8c:35:bc:49:63:
8d:c9:54:a2:d8:fc:24:a2:3e:a8:18:14:a7:68:f8:
4c:da:0d:11:09:80:6f:8f:25:e0:97:51:41:96:39:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:10:E6:D0:CD:D6:EC:8A:C4:5B:D6:98:B5:96:CA:D8:34:C0:CB:AB
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/bhDm0M3W7IrEW9aYtZbK2DTAy6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.16.0/20
178.72.128.0/18
178.213.128.0/21
185.18.72.0/22
185.182.120.0/22
IPv6:
2a03:2300::/29
Signature Algorithm: sha256WithRSAEncryption
45:5f:6c:f0:71:48:23:25:38:d0:d0:fc:99:c4:e6:7c:11:3a:
46:58:88:b7:64:5e:0d:fc:db:f7:b8:3d:ec:3a:ae:03:38:c0:
8a:80:47:cb:34:82:fe:7f:2a:d4:6c:84:d0:f2:de:75:11:93:
8a:f6:98:e1:0d:fe:42:31:62:cf:98:a3:aa:e1:57:a9:28:f6:
4d:11:8c:f2:a5:86:03:36:a5:cb:6e:ff:83:0d:ce:18:c1:32:
be:02:84:01:5b:6f:b7:25:e1:0e:e0:41:fc:1c:35:a8:4a:e4:
61:04:e8:f7:e7:58:e2:30:57:53:70:d1:45:94:70:91:ba:34:
28:2f:33:d7:c4:02:ba:9a:a9:f8:cb:cb:88:ea:3d:c6:1b:b9:
75:81:9d:5c:14:91:e9:e3:8f:22:b4:49:c2:45:ec:47:7f:1f:
12:cd:16:dc:9a:87:fc:05:11:f7:72:d0:65:12:d4:3c:95:29:
0b:8b:70:a1:d7:d4:c0:08:73:55:a6:14:f4:35:e5:0f:04:a5:
58:53:b8:6b:72:b0:43:f1:4c:60:98:db:cc:c0:36:29:c2:e3:
70:88:11:c8:96:51:c7:fd:4e:0a:83:27:b2:61:71:48:aa:f0:
80:4e:70:af:5e:dd:34:1d:ff:8e:9c:3e:a7:e7:84:e0:26:61:
04:16:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:15:51 2025 by rpki-client