Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/6ZQJuLd-6PJBw59TXVHZPhkO_4k.roa
File: 6ZQJuLd-6PJBw59TXVHZPhkO_4k.roa (raw, json)
Hash identifier: DNFk0/xyk7ksFXmkdeCcoMETU652MIMP+BtSTfo4TaM=
Subject key identifier: E9:94:09:B8:B7:7E:E8:F2:41:C3:9F:53:5D:51:D9:3E:19:0E:FF:89
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 0188DD56F8308EF12097546A92B70A344DC5
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/6ZQJuLd-6PJBw59TXVHZPhkO_4k.roa
Signing time: Wed 21 Jun 2023 09:44:04 +0000
ROA not before: Wed 21 Jun 2023 09:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.63.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:56:f8:30:8e:f1:20:97:54:6a:92:b7:0a:34:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jun 21 09:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e99409b8b77ee8f241c39f535d51d93e190eff89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:e4:fa:07:d2:bc:e2:37:38:53:f9:50:ee:
5b:51:4b:23:d6:4d:12:d2:92:7b:6c:32:2a:f0:81:
d7:0d:32:6d:f0:d1:24:71:4e:8d:b3:2d:c2:53:4a:
3a:c9:b3:a4:0b:47:d7:58:c1:7b:db:dc:a2:78:a2:
88:e6:76:b4:1d:2e:6a:50:44:98:75:c4:36:75:69:
27:27:2b:a8:50:62:2e:c8:9b:9f:42:63:f9:dc:07:
c9:4e:55:e0:0c:3d:90:fd:16:04:bf:d4:26:7c:97:
b6:8e:18:07:9d:74:09:89:18:e5:7d:61:cc:6e:96:
52:6b:d6:fb:78:39:ab:06:c6:28:de:c7:8d:5f:45:
8f:97:10:2c:22:78:6e:68:a5:12:06:2b:f7:80:c8:
d7:11:d7:0b:7c:cf:86:14:96:2c:f8:15:33:28:be:
d3:a2:f9:c1:ab:f6:50:5f:d5:e6:16:db:ec:1c:7d:
2a:1a:ad:ed:39:58:9e:ff:92:86:fa:45:c1:3c:0d:
18:78:09:67:ec:e5:be:84:ab:cb:fa:11:0b:48:27:
d8:29:7f:df:3d:31:56:b0:c8:73:91:8b:22:fa:aa:
ab:99:c9:09:a3:89:81:97:a4:b5:35:6b:95:e9:1b:
cd:ff:17:8a:fc:17:bc:94:b7:35:6d:77:86:5c:fe:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:09:B8:B7:7E:E8:F2:41:C3:9F:53:5D:51:D9:3E:19:0E:FF:89
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/6ZQJuLd-6PJBw59TXVHZPhkO_4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ac:55:b1:3a:7f:56:80:d0:72:08:08:6b:d7:69:54:d9:e9:
e0:38:7c:c2:42:18:2f:94:40:a3:0a:81:26:16:ec:74:bd:2f:
db:e6:51:93:ad:43:d7:33:7b:03:76:ed:0c:66:d0:35:9c:30:
d5:06:35:f4:32:79:d3:17:cd:60:7b:bd:15:02:13:a9:15:ed:
26:a7:1e:5f:c2:ad:b9:d5:5f:66:3d:b0:8c:25:dd:73:ce:f9:
c3:a9:ef:27:87:f6:69:66:26:df:9c:ce:68:e6:e9:d7:7b:e9:
68:af:bd:e0:a1:cb:0a:34:13:27:6a:1a:8b:42:16:9d:10:88:
ff:0d:70:05:89:c8:36:25:96:ac:13:b3:89:44:e2:2e:70:0f:
6b:82:cb:b0:9b:b8:07:ad:0d:43:58:e5:cb:f0:fe:71:5a:3c:
6f:de:4d:13:de:4a:53:32:18:20:85:55:b8:3a:ee:e6:76:1f:
56:77:ba:a6:b6:02:6d:4a:91:1c:92:18:1c:25:72:71:14:01:
c3:0b:52:30:ad:c3:7c:f0:f7:39:89:3e:2b:9f:59:cc:03:9c:
c3:bb:32:52:c0:f7:f8:be:44:15:bb:13:a5:89:cb:b9:55:3e:
43:ca:d7:24:5b:af:7d:e8:83:a1:0f:99:c8:27:1e:94:d6:1d:
48:dd:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:57 2025 by rpki-client