Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/b67Y8YrR-FtuRdUrxgeyMjC1Jxc.roa
File: b67Y8YrR-FtuRdUrxgeyMjC1Jxc.roa (raw, json)
Hash identifier: 6TskSf3cSb905zZfSOi/93PUPFvT5iQyml9Z+ABkTS0=
Subject key identifier: 6F:AE:D8:F1:8A:D1:F8:5B:6E:45:D5:2B:C6:07:B2:32:30:B5:27:17
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 018DF9B4
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/b67Y8YrR-FtuRdUrxgeyMjC1Jxc.roa
Signing time: Sat 01 Jan 2022 03:51:38 +0000
ROA not before: Sat 01 Jan 2022 03:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50904
IP address blocks: 185.18.192.0/22 maxlen: 22
31.216.224.0/21 maxlen: 21
2a03:d540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26081716 (0x18df9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jan 1 03:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6faed8f18ad1f85b6e45d52bc607b23230b52717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:d7:4a:d3:fd:8d:12:b3:27:cd:c0:b8:e8:
bd:c6:49:fe:d7:71:2b:27:b7:c1:a8:05:a9:2e:5b:
b5:67:ae:59:ff:8b:14:7b:ea:15:ab:4e:7d:39:94:
d9:a0:c1:e8:b3:61:aa:52:e7:ee:97:d6:68:f1:30:
15:e4:66:82:5e:6e:33:89:d0:19:1a:fe:3b:3e:d6:
e3:f1:4f:45:80:04:e1:11:06:cd:09:a3:30:e5:0b:
ad:b4:58:4d:45:d7:a9:6d:5a:b3:b1:ee:00:de:30:
d1:86:4e:4e:88:e7:9a:d6:12:c9:1b:00:08:ef:b6:
e8:e4:f7:16:58:8d:5d:ca:b8:c9:2c:56:30:9b:98:
38:14:cc:1d:70:8f:cd:0a:33:e6:aa:9d:3f:e2:cf:
86:99:23:6d:30:f4:f5:0c:54:47:89:d4:9b:c9:a0:
da:91:57:b8:cb:9c:7f:63:07:14:bc:2c:29:6c:a8:
31:22:53:83:b4:7e:40:78:6a:e7:b9:62:39:9d:3d:
e9:7f:46:b2:59:fd:d4:d2:f2:19:ae:bf:93:b7:82:
01:b4:d2:cd:56:51:bb:46:2a:54:30:a8:5e:02:93:
e7:4c:7c:76:ff:d1:6a:4b:46:fb:ed:7b:c6:1b:28:
91:6c:6e:a1:07:90:1b:f3:05:74:7d:fe:3c:f5:ac:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:D8:F1:8A:D1:F8:5B:6E:45:D5:2B:C6:07:B2:32:30:B5:27:17
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/b67Y8YrR-FtuRdUrxgeyMjC1Jxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.224.0/21
185.18.192.0/22
IPv6:
2a03:d540::/32
Signature Algorithm: sha256WithRSAEncryption
0c:e8:58:df:55:91:60:17:0f:81:90:1e:d9:bc:bb:94:22:e5:
4d:af:92:17:12:c7:1c:b4:df:77:d2:1c:0f:8a:fc:33:e6:7e:
00:10:38:9f:3c:aa:bd:d7:44:f0:ca:6d:17:42:be:ea:8e:d5:
aa:d6:19:f3:0f:38:f0:b0:a6:8f:1d:90:41:d9:6f:7f:85:04:
0c:ed:bf:67:f6:a7:50:27:4a:51:81:15:1b:d3:11:29:52:9f:
cc:44:f0:16:e7:ef:5e:6b:e7:ab:ea:74:42:83:89:d5:53:4a:
ec:9b:27:9d:27:61:2e:cd:ed:91:63:f6:65:f2:d0:d8:ab:8e:
29:b6:c8:cc:08:39:44:8b:9c:25:4c:c8:f2:82:4a:02:ea:1b:
ae:e2:9e:94:a0:b6:c8:7b:8d:b8:5a:bd:3a:82:76:f6:4c:1e:
88:80:e6:a7:2c:6e:fb:e1:b5:2f:2d:81:9a:6e:d8:b1:5c:a9:
0c:86:a0:08:bf:44:2d:2c:a5:bf:09:6f:5c:a0:48:1e:c2:fc:
b1:98:49:24:3e:af:1c:e9:ec:f1:15:0c:dd:2a:14:00:06:14:
60:82:6f:46:fd:53:29:3f:d1:17:d1:9a:19:ee:fd:e5:3f:30:
e4:62:28:ce:9b:77:eb:b3:6e:e1:82:20:73:9d:ed:1a:48:85:
38:d9:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:51 2025 by rpki-client