Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/6uHu_DHcPLyBA2VGH0ruvpYSzHQ.roa
File: 6uHu_DHcPLyBA2VGH0ruvpYSzHQ.roa (raw, json)
Hash identifier: cD4P7iH3sgQuH/YRHAZKUrkNbW32j8P0aEw7gnSlkHY=
Subject key identifier: EA:E1:EE:FC:31:DC:3C:BC:81:03:65:46:1F:4A:EE:BE:96:12:CC:74
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 09CBD2D7
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/6uHu_DHcPLyBA2VGH0ruvpYSzHQ.roa
Signing time: Sat 01 Jan 2022 15:59:33 +0000
ROA not before: Sat 01 Jan 2022 15:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196621
IP address blocks: 193.5.68.0/23 maxlen: 23
2001:67c:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164352727 (0x9cbd2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Jan 1 15:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eae1eefc31dc3cbc810365461f4aeebe9612cc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:37:23:4a:73:d3:23:b7:52:44:8b:fb:5c:
2f:30:e5:0e:14:6d:6f:27:1a:58:c2:16:f0:db:91:
ec:8e:e2:bb:1f:52:ab:0b:22:03:20:7d:2c:2d:cc:
f9:67:0b:ff:4c:72:7f:a8:b4:0f:c0:ea:a5:6f:4e:
5c:26:9d:42:9c:b5:ec:1b:01:72:42:65:a6:d9:d2:
a3:e0:c3:da:e2:ef:d6:b4:2d:13:86:20:62:e8:a4:
7f:96:1c:02:0a:1b:b7:0e:f5:d9:4b:44:c5:b6:a8:
c8:14:99:3e:e7:1c:9f:23:15:a0:c3:76:fb:9c:87:
e7:11:82:e2:60:5a:e9:19:23:63:3c:69:5e:14:15:
83:f9:2b:6b:89:59:e9:ed:ba:8e:c3:94:db:9a:84:
fb:a8:35:45:ad:36:79:45:f0:15:41:63:9a:d9:7e:
ef:63:9d:fd:da:82:07:8e:0a:d1:56:fe:0e:61:dc:
f2:af:17:b9:e7:e2:8f:57:df:20:48:fd:7a:80:6a:
bf:80:ab:0e:2c:cb:32:14:58:d5:e5:b6:00:27:46:
e6:b4:08:80:c1:9e:0f:20:86:1d:c5:f3:d1:3b:89:
e0:e2:b5:0d:5a:cd:62:04:93:c8:55:aa:9a:5b:d6:
5e:5c:5f:d2:31:2b:4e:d6:93:22:e5:a3:0c:77:8c:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:EE:FC:31:DC:3C:BC:81:03:65:46:1F:4A:EE:BE:96:12:CC:74
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/6uHu_DHcPLyBA2VGH0ruvpYSzHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.68.0/23
IPv6:
2001:67c:8::/48
Signature Algorithm: sha256WithRSAEncryption
ae:23:54:5a:d6:a2:5b:f6:f8:01:6d:95:8e:e9:49:ef:8d:79:
cb:a4:f6:98:12:11:e4:f0:c7:f4:25:b2:95:f0:94:b2:9a:96:
06:c4:c7:f3:d8:a0:e7:0e:d8:d7:6f:52:97:13:4f:54:a0:a5:
36:9b:26:0e:c5:19:8e:3b:fc:4f:24:1a:99:73:20:cf:02:24:
1a:29:3b:9c:d7:b5:d4:64:ff:a5:11:3f:35:be:6d:34:a5:d9:
cc:15:4d:7e:be:c6:b9:9e:7e:88:c5:f9:a9:d2:38:5a:73:ca:
e1:05:1d:7b:18:34:0d:1c:a9:80:57:64:15:38:c0:4c:ff:96:
46:83:02:75:6c:ad:a7:ea:69:06:b6:7b:f9:67:6c:fc:95:5f:
a2:55:6c:ec:b1:ac:44:ac:45:96:ea:a4:ea:78:1f:94:f1:ed:
a9:04:9d:a9:84:b0:f4:03:e4:c5:23:86:d3:66:18:9a:a6:bb:
21:9b:a6:65:ee:22:c7:55:48:0f:5a:d5:14:54:6f:73:a8:ac:
e5:5c:7a:37:da:9e:f1:35:a6:02:93:a6:32:91:7b:fa:9c:51:
62:cd:a3:5c:b6:1a:8b:03:60:b1:da:2c:a3:f9:cd:02:63:24:
f0:52:e2:d8:1e:b3:53:0c:b8:19:ee:c6:12:96:41:50:73:b6:
e6:4b:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:24 2025 by rpki-client