Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/t_6mKIb-WphFP1zYcTlfTC_R0vk.roa
File: t_6mKIb-WphFP1zYcTlfTC_R0vk.roa (raw, json)
Hash identifier: LIfVO4Rf6MySNaNjE+wK2u5BhB8u1ETwXlNLs0hPHz0=
Subject key identifier: B7:FE:A6:28:86:FE:5A:98:45:3F:5C:D8:71:39:5F:4C:2F:D1:D2:F9
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 0A82A01A
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/t_6mKIb-WphFP1zYcTlfTC_R0vk.roa
Signing time: Sat 01 Jan 2022 14:55:52 +0000
ROA not before: Sat 01 Jan 2022 14:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49624
IP address blocks: 188.93.174.0/24 maxlen: 24
188.93.173.0/24 maxlen: 24
188.93.175.0/24 maxlen: 24
188.93.170.0/23 maxlen: 23
188.93.172.0/24 maxlen: 24
188.93.168.0/24 maxlen: 24
188.93.168.0/21 maxlen: 21
185.215.68.0/22 maxlen: 24
185.215.71.0/24 maxlen: 24
185.215.70.0/24 maxlen: 24
2a0b:880:4::/48 maxlen: 48
2001:7f8:4c::/48 maxlen: 48
2a0b:880:5::/48 maxlen: 48
2a0b:880::/32 maxlen: 32
2a0b:880::/36 maxlen: 36
2a0b:880:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176332826 (0xa82a01a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Jan 1 14:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7fea62886fe5a98453f5cd871395f4c2fd1d2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:d0:5c:53:c0:99:db:19:83:dd:88:d9:76:
da:61:21:1e:9f:10:a6:44:61:71:57:95:3c:17:bd:
5c:c2:09:3a:bc:3b:3c:c1:de:24:8a:bb:8a:74:51:
0e:d9:08:29:e2:f4:68:4d:ef:d2:33:71:7b:e1:66:
e4:bd:ab:e8:6a:2f:5f:76:d7:36:a6:0b:ba:ae:46:
7a:f3:3b:61:24:27:c7:cc:ba:91:05:a2:b8:f2:d0:
68:b0:37:7d:4d:69:6a:a0:d5:e5:83:1e:5e:71:83:
3c:9a:e3:ba:1d:b3:bd:05:29:76:59:aa:1c:c5:51:
34:74:28:a9:ea:bd:7a:ab:56:2b:2f:e4:a2:ac:2c:
59:04:50:2b:89:04:c5:f4:f7:b4:97:af:52:ac:59:
3f:e1:01:97:87:05:65:d8:45:5a:fd:bb:80:0e:58:
68:68:65:d1:4e:d2:b3:30:c0:e6:c4:a6:df:3e:fd:
ba:00:07:cc:ec:3f:07:f2:8a:3b:2a:c2:46:6c:7f:
8e:85:38:69:1e:f8:a9:10:e2:e7:0f:20:cc:c4:99:
0b:4a:c4:49:43:00:fc:b8:5c:0d:b5:ab:6b:0d:f1:
d6:bc:26:a4:c4:c5:04:8f:74:3b:8c:2a:dd:a1:11:
14:08:e4:3a:38:9f:69:9f:47:03:25:ac:ca:30:b8:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FE:A6:28:86:FE:5A:98:45:3F:5C:D8:71:39:5F:4C:2F:D1:D2:F9
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/t_6mKIb-WphFP1zYcTlfTC_R0vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.68.0/22
188.93.168.0/21
IPv6:
2001:7f8:4c::/48
2a0b:880::/32
Signature Algorithm: sha256WithRSAEncryption
4a:12:32:cb:24:c9:a1:0f:ab:57:a3:b9:9d:8e:12:e2:ef:33:
99:59:7a:d1:bf:eb:bd:4f:d0:8a:08:4d:39:6c:36:dc:5f:df:
e8:61:4a:e2:79:3a:92:48:43:1e:50:29:fc:a8:24:b3:13:c8:
98:24:e6:56:65:70:fc:e2:ca:ec:35:e3:9f:d9:30:18:62:bc:
f5:da:6e:50:76:81:19:96:00:e7:d5:34:4d:5a:c7:31:9c:cb:
f4:bc:a6:03:11:35:6d:41:30:53:21:e2:d2:04:69:dc:c8:40:
f1:da:45:7d:c5:23:7e:80:3a:fd:a6:e4:06:04:7f:4d:b1:a7:
81:43:e1:b9:2a:4c:33:34:cf:b9:aa:1d:e5:19:33:5b:a4:46:
05:33:dc:8e:4c:d5:72:42:d7:ce:1a:3d:7f:a8:4d:32:98:9a:
3c:7c:60:05:b5:fa:a7:16:22:3d:c9:03:36:7e:44:db:92:bd:
a8:93:d3:bf:59:f4:66:71:24:21:59:f8:8c:c0:94:39:e8:dd:
cd:56:75:85:2b:24:fa:9c:61:e9:45:61:4b:8f:25:b9:22:a5:
06:7d:7e:f0:01:10:c8:17:80:5c:5b:62:c7:ca:e4:1e:9f:13:
72:d7:8a:4e:63:f3:2e:79:67:58:50:73:ba:84:de:19:c6:a8:
2e:26:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:40 2025 by rpki-client