Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/9V7cQZmdC8KO2Wd_jYqSLNheSq8.roa
File: 9V7cQZmdC8KO2Wd_jYqSLNheSq8.roa (raw, json)
Hash identifier: 2f8im+D1or1sObngE0g8qIRugoA2v2JVT2BcVbG8upM=
Subject key identifier: F5:5E:DC:41:99:9D:0B:C2:8E:D9:67:7F:8D:8A:92:2C:D8:5E:4A:AF
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 060671EA
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/9V7cQZmdC8KO2Wd_jYqSLNheSq8.roa
Signing time: Sat 01 Jan 2022 11:01:49 +0000
ROA not before: Sat 01 Jan 2022 11:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.64.6.0/24 maxlen: 24
2a10:2307:fffd::/48 maxlen: 48
2a10:2307:ffff::/48 maxlen: 48
2a10:2307:fffe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101085674 (0x60671ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jan 1 11:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f55edc41999d0bc28ed9677f8d8a922cd85e4aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:01:bb:8c:e2:de:18:35:f6:b7:de:56:e1:
1c:bb:ff:e6:0f:aa:a3:0f:b8:60:1c:3f:43:24:87:
60:b9:25:eb:15:d2:a9:e4:55:56:b7:a0:53:fc:5b:
01:0d:06:94:b0:ed:e6:e8:91:e7:67:34:75:90:af:
06:da:3e:13:4e:0f:ba:e5:c5:71:14:de:dc:f4:bd:
5e:81:5c:2f:bd:96:5f:7a:3d:f6:2e:a6:84:85:a7:
7a:8e:49:03:d9:47:81:e9:e6:7c:bd:6f:3d:82:54:
25:e1:94:65:c8:93:26:87:a1:db:80:98:4f:df:27:
be:a7:19:2d:89:66:43:6a:d1:7b:4a:e6:48:c5:f8:
c0:1c:f3:05:a9:7a:97:70:3b:6d:ec:b4:2b:da:0c:
b2:9b:d3:ba:8b:17:c4:d6:d2:79:e2:d3:70:b4:15:
7f:8e:07:42:d7:7c:e5:f6:6a:11:21:10:1c:e2:9d:
a0:6a:c3:4d:1a:af:26:81:9c:a5:90:af:c8:11:7b:
50:e2:d0:40:5b:c0:6c:2f:ad:28:00:2d:68:84:70:
8d:be:e3:7f:81:a0:90:11:27:fc:ee:2a:96:d4:fb:
28:34:15:b9:25:e4:ad:e5:76:4c:55:7f:88:cf:d0:
d3:7e:56:50:48:74:8f:6e:a5:d6:46:02:7a:19:3e:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5E:DC:41:99:9D:0B:C2:8E:D9:67:7F:8D:8A:92:2C:D8:5E:4A:AF
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/9V7cQZmdC8KO2Wd_jYqSLNheSq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.6.0/24
IPv6:
2a10:2307:fffd::-2a10:2307:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:41:7e:1e:59:ef:89:74:09:bf:52:a6:07:77:48:b9:6e:18:
6c:ad:62:9b:29:af:4f:c8:92:ef:ba:8a:43:d2:c3:6d:d7:3e:
84:c1:d8:08:6d:76:b2:3f:37:e5:be:f9:e6:a6:2a:08:a7:90:
73:89:03:d7:07:21:e4:54:6b:06:33:78:61:44:4c:39:4b:a9:
4c:81:a7:eb:29:c4:78:53:59:4d:9b:78:c3:d4:58:24:76:c0:
99:83:cd:35:57:33:48:e3:63:4d:fe:b4:64:60:19:52:70:fa:
23:1a:57:52:f0:ad:44:ce:c4:cc:a9:73:3b:31:b1:f8:88:1d:
48:a5:3f:51:0a:39:e9:47:65:09:43:36:fe:06:ae:c5:93:97:
50:e5:b1:53:7e:79:39:5d:27:16:93:7d:73:e1:fc:7e:7f:dc:
25:ab:48:27:e1:b2:63:d9:53:33:b2:fe:d6:c8:50:97:0a:15:
e7:a2:5a:b7:da:dd:cb:d2:be:32:9e:72:38:1b:b2:02:c0:3d:
55:4d:e8:29:3e:24:41:54:dc:da:ad:d6:88:48:c3:81:73:5c:
84:85:9e:f5:40:21:b1:a9:78:12:fd:b6:d2:68:ea:e9:c9:8e:
7b:48:51:f4:80:bb:49:61:d4:a2:b1:92:ca:ac:7f:74:47:e9:
21:14:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:18:44 2025 by rpki-client