Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/v6FRfUQMY3ck28xBp2fh_hKXH2c.roa
File: v6FRfUQMY3ck28xBp2fh_hKXH2c.roa (raw, json)
Hash identifier: +5pEql4l3f4QnKb/c+7e7lD8oCu6bAJIxGASWhUnfEI=
Subject key identifier: BF:A1:51:7D:44:0C:63:77:24:DB:CC:41:A7:67:E1:FE:12:97:1F:67
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 0598B094
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/v6FRfUQMY3ck28xBp2fh_hKXH2c.roa
Signing time: Sat 01 Jan 2022 03:52:52 +0000
ROA not before: Sat 01 Jan 2022 03:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41697
IP address blocks: 85.132.240.0/24 maxlen: 24
85.132.250.0/24 maxlen: 24
69.94.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93892756 (0x598b094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jan 1 03:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfa1517d440c637724dbcc41a767e1fe12971f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:6a:42:7a:3e:89:90:3b:27:75:d0:f5:0d:
8e:62:e5:c8:59:2d:ae:bf:cf:dd:d5:00:38:08:cd:
4a:e8:29:45:e5:dd:d4:a0:f5:f3:69:f2:7a:f6:79:
53:f1:8a:c3:b3:f6:10:b4:f3:86:7c:09:9e:6c:9c:
27:1e:58:aa:a5:d3:ba:ac:fe:0c:87:aa:10:21:30:
c6:eb:1c:13:4b:78:f1:e8:dc:df:4d:26:83:3a:05:
26:57:1d:8f:d1:42:f9:df:01:a7:f4:eb:41:cd:5e:
8a:25:9d:bc:c8:3a:8d:c4:a3:f7:26:7b:5e:8c:cc:
41:7e:4a:52:01:82:fd:5f:7a:c8:72:d9:b9:76:02:
a4:bd:08:6e:9a:8c:24:8c:3b:f7:bb:ca:7d:cc:9f:
4d:d4:95:a2:69:ca:a6:da:60:48:1a:be:0c:57:d9:
02:10:4a:df:d1:95:37:99:d5:d9:52:70:5d:a7:ad:
a4:8e:37:9d:9d:cb:0d:84:37:2e:56:04:71:49:1e:
0c:34:7a:ca:b3:c9:42:88:8a:de:6d:32:be:fc:48:
86:b5:e0:a6:5c:e3:5b:5d:76:9e:8f:1c:4b:09:f5:
bc:90:1d:08:12:70:c7:c8:06:5e:47:73:06:97:2f:
92:59:65:38:44:3d:16:c2:37:8f:2c:fe:d7:0c:31:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:51:7D:44:0C:63:77:24:DB:CC:41:A7:67:E1:FE:12:97:1F:67
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/v6FRfUQMY3ck28xBp2fh_hKXH2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.94.125.0/24
85.132.240.0/24
85.132.250.0/24
Signature Algorithm: sha256WithRSAEncryption
71:82:99:42:8b:52:36:5f:61:10:41:79:0a:37:a4:c8:61:ed:
d5:70:09:fd:3e:6d:b3:1e:f9:6a:ec:18:86:8d:79:48:fb:cf:
40:d4:1a:a7:0a:6d:46:c9:8a:07:fa:e1:3e:3c:85:e4:a8:34:
8a:c3:a6:ac:59:62:8a:36:97:8d:c8:dc:1a:e3:87:16:05:1e:
fd:74:0c:fa:96:a1:6c:30:f4:7e:87:3f:45:54:ff:28:cc:d8:
4c:45:5f:5e:72:c2:7e:71:88:ba:21:15:48:c8:b3:16:80:b3:
8b:11:67:30:72:84:7f:cc:12:94:ee:31:cd:5e:96:95:51:6e:
27:d8:59:7f:16:7c:11:75:d8:eb:eb:46:47:61:56:4c:ef:38:
5b:87:dd:38:1d:3e:94:3f:8e:e7:f9:a8:e6:92:5e:98:cf:b3:
86:da:ec:f8:c0:c6:cc:7c:c7:4b:0d:5f:b9:8b:42:43:49:a4:
55:47:fe:fb:c4:31:c1:f2:87:2c:e0:32:7d:bc:b1:5f:43:19:
9f:67:a0:fd:a1:24:38:96:d2:61:63:a8:f9:32:bc:f3:d6:59:
f4:e1:82:fa:b4:48:40:c4:85:b5:04:2f:3c:fa:f3:1e:5d:6b:
a8:24:59:f2:c1:93:54:20:83:44:fd:d9:b7:2d:6f:d4:49:79:
43:a0:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:21 2025 by rpki-client