Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/6Qeglh1SY6JnPSWn8mDau__DBHM.roa
File: 6Qeglh1SY6JnPSWn8mDau__DBHM.roa (raw, json)
Hash identifier: M+7bGu/M6A/3x7F4jgvGgLcBt3mWfwCxyLWZTYWqOQo=
Subject key identifier: E9:07:A0:96:1D:52:63:A2:67:3D:25:A7:F2:60:DA:BB:FF:C3:04:73
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 0181DCB63DD664FC6A3AB05DF6541F21685E
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/6Qeglh1SY6JnPSWn8mDau__DBHM.roa
Signing time: Fri 08 Jul 2022 07:28:59 +0000
ROA not before: Fri 08 Jul 2022 07:28:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203329
IP address blocks: 185.138.140.0/22 maxlen: 24
149.233.0.0/19 maxlen: 24
2a07:e80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:b6:3d:d6:64:fc:6a:3a:b0:5d:f6:54:1f:21:68:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Jul 8 07:28:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e907a0961d5263a2673d25a7f260dabbffc30473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:73:43:e1:fc:c3:ef:c9:6e:63:52:39:1d:
0f:6e:84:78:3d:ce:17:ac:67:35:a4:f6:e1:71:4d:
d2:58:f2:f6:6c:ac:1c:92:53:9a:d0:78:5a:36:ca:
d7:25:41:0b:b1:69:c7:5e:1a:cd:2f:a4:a1:4c:fd:
0b:2a:97:24:42:e5:e6:f3:60:18:66:35:78:a8:38:
39:69:93:b2:20:d1:02:a9:67:b6:43:a7:98:7a:02:
b1:e5:ae:0d:a9:20:fc:3f:7c:ae:f0:67:cf:d4:f9:
c4:df:40:cf:88:c3:a6:6e:63:26:d3:40:c7:93:e9:
b8:54:0d:d4:2f:d8:4e:a2:86:d7:11:22:6d:c9:40:
6e:95:99:f3:9c:cb:65:5f:78:db:b9:8c:49:7b:95:
cd:fc:ee:3d:02:01:bb:e2:f6:0f:23:da:36:a1:ea:
4c:e5:70:06:75:4a:7f:38:fe:01:e9:93:86:8d:9b:
8c:44:2c:4f:a9:c1:04:12:67:65:f1:a6:44:6f:f5:
83:9e:c6:95:dd:23:ef:d2:2a:33:74:74:dc:29:fd:
4a:6e:04:c1:fe:de:ad:8d:ac:6a:92:77:b2:2b:58:
15:ed:86:12:b8:2d:36:59:26:9b:fa:47:b3:45:5d:
aa:6b:d7:74:f5:b1:07:0e:9d:84:25:ab:f1:ec:32:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:07:A0:96:1D:52:63:A2:67:3D:25:A7:F2:60:DA:BB:FF:C3:04:73
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/6Qeglh1SY6JnPSWn8mDau__DBHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.233.0.0/19
185.138.140.0/22
IPv6:
2a07:e80::/29
Signature Algorithm: sha256WithRSAEncryption
a8:34:e9:a8:78:c0:da:1c:f6:28:ff:ee:cd:9d:29:1b:9a:da:
34:50:ff:54:4f:02:0c:58:16:13:c6:4e:96:57:ca:47:69:81:
aa:00:d4:85:b1:ed:0e:8c:3a:68:d6:ca:7f:bd:43:63:b8:53:
d6:89:cf:b6:70:0a:33:a2:8e:d4:54:38:4f:ef:b0:94:6f:74:
f5:8c:cf:c2:40:9a:b9:fa:c9:9a:c7:34:0b:04:1a:78:b9:ca:
6b:75:22:9f:bf:ed:10:b9:ff:4e:55:ff:56:51:48:bc:79:54:
e1:63:df:46:27:e6:26:a1:e0:5d:8e:ac:bc:b8:e6:0e:83:f7:
86:7b:d3:c6:3c:4e:ab:d9:b3:9c:f9:39:b9:e1:59:7c:18:33:
9a:dc:57:b5:86:62:60:f3:a5:54:19:fa:fb:ef:19:3d:b1:80:
48:67:9c:e2:dc:1e:37:a9:e9:43:bc:14:0b:e9:28:33:3c:89:
54:30:e0:85:d5:37:94:78:29:fd:7e:db:48:1c:dd:35:30:5d:
33:85:2c:2b:4e:76:06:a1:bd:ce:0a:ac:1f:7e:32:9e:34:ac:
29:72:ba:f0:4a:b5:9e:6b:d5:ef:12:3b:bf:71:05:64:d3:6f:
fe:36:e0:8f:4e:49:51:08:ef:8b:64:a1:fa:64:5b:8c:06:86:
fb:07:05:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 18:18:21 2025 by rpki-client