Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/d0FfUN6Wf6Zr8B2CRTCvA2BAd68.roa
File: d0FfUN6Wf6Zr8B2CRTCvA2BAd68.roa (raw, json)
Hash identifier: USQXDBuhR9h/akigs7kmmyZh3YPhTZuH+QpyYms9jKM=
Subject key identifier: 77:41:5F:50:DE:96:7F:A6:6B:F0:1D:82:45:30:AF:03:60:40:77:AF
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2C98BA8E
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/d0FfUN6Wf6Zr8B2CRTCvA2BAd68.roa
Signing time: Sat 01 Jan 2022 04:59:31 +0000
ROA not before: Sat 01 Jan 2022 04:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24723
IP address blocks: 206.252.228.0/23 maxlen: 23
206.252.230.0/24 maxlen: 24
206.252.236.0/22 maxlen: 22
206.252.252.0/22 maxlen: 22
206.252.253.0/24 maxlen: 24
195.238.184.0/22 maxlen: 22
85.232.240.0/24 maxlen: 24
85.232.243.0/24 maxlen: 24
46.229.158.0/24 maxlen: 24
46.229.158.0/23 maxlen: 23
46.229.159.0/24 maxlen: 24
77.79.198.0/24 maxlen: 24
2001:1a68:3::/48 maxlen: 48
2001:1a68:34::/48 maxlen: 48
2001:1a68:2c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748206734 (0x2c98ba8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77415f50de967fa66bf01d824530af03604077af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:86:81:e8:7e:12:a1:13:1d:b4:39:be:a6:
d2:6c:0d:4b:75:f5:75:63:7b:6d:4e:46:50:4b:dc:
c5:3c:fb:1d:50:5b:d8:af:8c:4c:ea:2a:68:93:9d:
bf:9c:e2:91:3d:50:92:6a:2f:ed:24:4c:cc:00:d0:
33:70:3e:63:5a:c2:15:a6:41:9d:42:0c:1f:dd:85:
12:f6:1f:41:46:6f:ef:3a:d6:ae:53:18:f5:15:02:
e6:91:fb:21:5d:0f:36:fa:38:23:38:4b:c7:72:0c:
00:af:d1:da:4a:18:84:9c:8c:5a:9f:33:7f:d6:91:
89:5e:46:2c:78:5a:eb:6b:e0:3a:9e:09:61:03:ab:
9f:9e:b9:ac:f9:51:59:cb:90:ff:78:6f:42:90:fd:
c9:b2:21:93:ed:9a:4d:cb:f0:2c:d1:0a:74:a1:51:
13:ea:9b:d3:c3:d6:00:69:7b:04:59:19:0f:69:e5:
9b:99:5c:be:70:0c:06:17:98:4e:ab:68:91:6a:18:
c6:e9:c5:55:ca:c9:05:47:93:90:ee:80:a6:71:32:
db:bb:e1:91:6f:cc:74:8d:38:cd:85:63:b1:24:65:
75:cb:65:ac:3c:55:03:6d:2b:1e:0b:c4:12:93:38:
92:41:f9:e5:d4:ed:a1:40:00:5a:6c:7a:ea:9c:7f:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:5F:50:DE:96:7F:A6:6B:F0:1D:82:45:30:AF:03:60:40:77:AF
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/d0FfUN6Wf6Zr8B2CRTCvA2BAd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.158.0/23
77.79.198.0/24
85.232.240.0/24
85.232.243.0/24
195.238.184.0/22
206.252.228.0-206.252.230.255
206.252.236.0/22
206.252.252.0/22
IPv6:
2001:1a68:3::/48
2001:1a68:2c::/48
2001:1a68:34::/48
Signature Algorithm: sha256WithRSAEncryption
42:c6:5d:81:59:d7:2d:86:bf:67:82:48:54:ba:45:1e:a3:44:
c7:5a:2a:11:cc:37:ae:1d:3f:ce:d0:8f:67:20:88:39:02:e1:
80:10:cb:6e:d9:65:09:38:6e:fd:1d:c8:77:b9:b8:cd:79:95:
47:c2:29:e9:6e:f1:5d:98:cf:56:3c:89:d2:f6:cc:14:36:3f:
5b:31:55:22:b9:b7:bc:ca:ba:00:bc:ef:58:92:cf:3a:cd:1c:
1c:19:5a:4d:0b:20:d4:08:7e:e6:68:9e:bf:6a:13:7c:da:0f:
75:67:52:7c:f8:e3:7e:27:ea:1d:67:a1:5e:45:58:9f:89:c9:
a6:8b:b8:df:c4:98:4a:ab:a8:01:60:7e:c9:c6:49:31:57:3c:
da:80:bc:f5:f8:b6:77:ec:09:f7:9f:59:98:ef:90:ef:de:5a:
65:8f:2b:2f:bd:a2:a8:93:0f:ec:66:b8:cf:9b:19:ff:28:df:
4f:42:8c:f3:be:77:70:b5:93:93:64:56:93:14:75:f1:f3:af:
b1:25:de:72:7f:47:1e:f8:20:59:37:6e:c0:76:d4:a2:e8:5e:
25:76:e9:ee:0a:4e:d9:1b:d4:c7:1e:33:21:7e:3a:0e:c8:27:
63:94:46:a9:0d:0b:4f:62:28:0e:44:db:46:66:76:6f:ea:44:
90:74:ff:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:03 2025 by rpki-client