Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/cixbr3qCiRl0BrR6cyV3fOyOwgE.roa
File: cixbr3qCiRl0BrR6cyV3fOyOwgE.roa (raw, json)
Hash identifier: dBA0Xdxlu0h1PTjTTfhStPKUkeuBcK44iDW3gWBoCnU=
Subject key identifier: 72:2C:5B:AF:7A:82:89:19:74:06:B4:7A:73:25:77:7C:EC:8E:C2:01
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 018571F9F2D8720C9DDB04BC0F1FAE7CEB41
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/cixbr3qCiRl0BrR6cyV3fOyOwgE.roa
Signing time: Mon 02 Jan 2023 10:14:44 +0000
ROA not before: Mon 02 Jan 2023 10:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16083
IP address blocks: 91.106.112.0/21 maxlen: 24
81.16.208.0/22 maxlen: 22
81.16.208.0/23 maxlen: 23
217.73.192.0/20 maxlen: 24
178.209.192.0/19 maxlen: 24
2a00:eb9::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:f2:d8:72:0c:9d:db:04:bc:0f:1f:ae:7c:eb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jan 2 10:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=722c5baf7a8289197406b47a7325777cec8ec201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:e8:7d:9a:f7:ef:65:fd:50:8b:26:1b:35:
ed:32:0b:c4:f1:b1:8a:aa:a1:9f:0c:4b:e8:52:07:
23:71:77:a1:20:cf:42:b9:64:f2:4d:5f:98:2f:87:
ea:57:68:17:fc:a7:52:e2:71:e9:91:4e:0d:de:72:
15:9d:b1:23:eb:83:9d:6f:20:76:40:f7:b9:04:bc:
55:77:28:b3:3d:31:4e:1c:eb:41:17:a4:49:2c:5e:
42:81:2c:e0:f9:ad:b4:ed:dd:dd:d7:a8:49:4d:30:
ec:c7:60:22:64:cf:7a:f0:cb:8e:68:40:98:21:7e:
3b:ed:1d:3a:e2:f1:7d:c8:2b:98:c3:74:9c:1e:fc:
47:8b:90:7b:fe:c4:15:3a:7e:12:22:ea:d7:70:e5:
81:32:6b:cf:88:78:dd:75:90:a6:85:2a:66:7b:d0:
ea:17:cf:68:71:72:28:e7:9f:a1:03:6c:cd:91:c1:
23:c8:cd:22:27:70:44:d5:a2:e4:68:c9:03:fd:d3:
68:1f:78:3d:70:98:ec:6f:97:c7:cf:80:e8:23:a5:
b3:b3:3a:c4:e4:22:8b:89:a8:ce:aa:ab:c9:eb:c2:
20:5c:c1:b5:a6:86:07:59:e3:b8:79:5a:4f:2d:a3:
a4:25:b0:69:59:e9:de:33:f4:a1:b0:94:83:fa:f0:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:5B:AF:7A:82:89:19:74:06:B4:7A:73:25:77:7C:EC:8E:C2:01
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/cixbr3qCiRl0BrR6cyV3fOyOwgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.208.0/22
91.106.112.0/21
178.209.192.0/19
217.73.192.0/20
IPv6:
2a00:eb9::/32
Signature Algorithm: sha256WithRSAEncryption
4a:ad:9f:62:4b:79:cc:e9:5c:7a:0e:e7:cd:97:cd:f2:65:fe:
b7:92:6e:91:4d:3f:ee:a9:32:2a:30:51:e6:49:86:eb:97:0f:
3b:bb:29:59:c1:61:36:b1:79:47:96:94:c5:79:31:33:ec:7f:
73:09:2d:ce:f1:ca:f0:66:d5:bb:2e:ad:a8:c5:1d:88:47:0d:
39:69:b7:41:60:00:c7:0b:c1:6c:5c:d8:c6:4f:e9:47:b0:27:
c2:07:b2:df:6d:1c:f4:31:9c:51:cc:70:5d:31:64:ab:a6:df:
08:48:73:3e:dd:5f:40:85:c8:2c:48:19:f4:1a:69:8e:5d:35:
ab:87:a8:61:14:e8:9c:00:55:1c:8b:49:8f:61:b6:a4:37:7d:
a2:7f:3c:a2:31:18:e6:d2:ae:5e:8a:c8:29:2e:77:61:d4:f9:
2a:8e:99:b9:97:d6:de:ca:af:3e:50:ce:0c:fb:64:4e:80:45:
bd:52:91:89:8e:9c:ae:41:7d:aa:1d:7f:66:ec:12:4c:6e:2e:
7b:8f:32:3f:60:40:08:3c:0d:6c:18:8d:d1:fa:8d:02:1b:9e:
6f:21:ec:b4:bf:37:7b:34:66:a3:f6:e1:63:bb:1e:41:63:15:
65:cc:ff:f8:85:f3:c7:e8:b4:36:17:e5:0e:1a:bd:73:44:0f:
0a:da:a0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:35 2025 by rpki-client