Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/r7bWLhqYovGQ-0pMBjJGXBb1dMg.roa
File: r7bWLhqYovGQ-0pMBjJGXBb1dMg.roa (raw, json)
Hash identifier: zsqiL+PLPbo0hkarTiOx+UTRYZRdJI4cL6FY4Q9Kb+U=
Subject key identifier: AF:B6:D6:2E:1A:98:A2:F1:90:FB:4A:4C:06:32:46:5C:16:F5:74:C8
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 0184AB464396D2378AE5FF3CAC5B8E4DC84E
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/r7bWLhqYovGQ-0pMBjJGXBb1dMg.roa
Signing time: Thu 24 Nov 2022 20:13:39 +0000
ROA not before: Thu 24 Nov 2022 20:13:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47975
IP address blocks: 94.228.16.0/20 maxlen: 24
178.213.128.0/21 maxlen: 24
185.182.120.0/22 maxlen: 24
185.18.72.0/22 maxlen: 24
2a03:2300::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:46:43:96:d2:37:8a:e5:ff:3c:ac:5b:8e:4d:c8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Nov 24 20:13:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afb6d62e1a98a2f190fb4a4c0632465c16f574c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:e2:5a:b8:3b:69:02:d1:22:23:53:3e:11:
65:9e:7b:8e:83:ce:ab:39:0e:93:2d:b8:42:60:3c:
84:76:3c:c2:ed:f5:36:45:ef:86:68:3f:a8:48:fb:
bf:f9:ea:66:89:e3:e0:4c:be:90:46:02:12:9c:4c:
49:0e:53:8e:e3:53:92:56:87:be:1c:6f:f8:7a:12:
2c:74:0d:d9:b3:af:fd:71:04:cb:bb:7c:be:c8:87:
52:62:61:bc:44:e3:b7:2b:7b:ce:d2:8e:a4:13:b1:
75:74:01:10:c2:a2:fb:4a:e3:e5:22:29:95:cc:f9:
80:16:da:3b:30:ad:f0:f6:6b:8a:ff:3f:fa:3d:a7:
6e:ca:93:9c:76:26:ac:3e:78:76:43:9f:13:1f:5c:
f5:a9:1f:fd:ba:e8:e0:c9:31:6e:04:5b:f6:1c:4b:
bd:3a:0d:d2:00:4a:17:14:60:2d:2b:24:e7:b8:ff:
3e:af:f7:3a:f0:bb:c4:e2:1a:b6:79:b2:64:5a:50:
e9:17:74:68:29:23:07:c2:62:85:21:4c:57:d1:87:
8b:0a:a5:57:46:a0:d8:31:6e:81:d6:78:ed:76:54:
1e:07:b9:8c:67:52:65:2c:67:ef:ab:18:87:61:e8:
57:ce:dc:1d:d6:e9:30:05:91:7a:c1:b7:7f:3b:6b:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:D6:2E:1A:98:A2:F1:90:FB:4A:4C:06:32:46:5C:16:F5:74:C8
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/r7bWLhqYovGQ-0pMBjJGXBb1dMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.16.0/20
178.213.128.0/21
185.18.72.0/22
185.182.120.0/22
IPv6:
2a03:2300::/29
Signature Algorithm: sha256WithRSAEncryption
98:57:5a:3f:f4:b2:ed:85:d0:2d:f0:46:22:13:91:69:37:11:
52:a5:0a:37:2d:3c:74:ac:d3:0c:a4:49:62:0a:08:0a:1d:b8:
43:82:1b:df:c8:a6:b8:4a:e3:c6:af:33:8f:27:66:d3:2f:9b:
a6:a4:fe:d0:a2:88:19:b9:03:e7:a6:ca:ea:ee:9b:b5:a2:56:
ab:21:5d:39:7a:58:f8:42:d4:7f:e7:6f:d5:93:6e:0c:b3:ce:
1e:bc:64:96:fd:c2:be:ba:b0:20:d2:47:38:43:21:79:47:36:
64:64:96:12:40:cd:a2:26:ad:e6:7d:2b:73:5b:95:98:bc:87:
e1:e9:f6:27:c3:8e:4b:79:1d:cb:76:09:35:9b:b6:86:38:9b:
4c:67:f0:c2:56:7e:d8:2f:66:24:dd:e7:ff:af:9e:0f:c7:40:
3e:b8:b1:fd:8e:94:bd:1a:84:8e:d8:a6:b2:eb:15:e5:2d:7d:
98:84:cf:5b:c7:ac:64:a7:a8:26:dd:e1:0b:cd:08:86:f7:83:
a1:ba:0b:41:51:06:58:56:eb:d4:7c:a6:7f:56:0f:1b:60:ba:
da:40:36:1a:2a:bc:be:28:df:8b:38:db:12:70:f7:81:cd:13:
af:2c:dc:c4:67:70:39:ae:49:85:79:e4:b2:39:2f:35:69:74:
7c:4e:57:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:14:34 2025 by rpki-client