Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/qs6S-QuFwhcJdz_5kvH-wDhZ2Is.roa
File: qs6S-QuFwhcJdz_5kvH-wDhZ2Is.roa (raw, json)
Hash identifier: oS8d+T3K9VsGO6336lz/Vy8pLqWCv11yIl+tmda6QcY=
Subject key identifier: AA:CE:92:F9:0B:85:C2:17:09:77:3F:F9:92:F1:FE:C0:38:59:D8:8B
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 09AB4950
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/qs6S-QuFwhcJdz_5kvH-wDhZ2Is.roa
Signing time: Sat 01 Jan 2022 02:50:50 +0000
ROA not before: Sat 01 Jan 2022 02:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1213
IP address blocks: 160.6.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162220368 (0x9ab4950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jan 1 02:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aace92f90b85c21709773ff992f1fec03859d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:64:00:27:15:71:f6:9f:52:fd:78:62:fb:
74:7b:4b:15:b3:c7:19:75:bc:69:8b:f7:f8:80:df:
4c:0c:0b:1a:88:f0:e8:f0:7b:f8:0e:d2:69:69:7f:
dd:d6:ea:6d:16:d8:09:5c:01:20:0d:4c:7a:b7:4e:
74:dd:5c:0e:66:b0:40:00:09:ba:74:34:61:b0:93:
4a:c6:e4:d8:00:0c:56:25:97:95:6d:e9:94:6c:30:
53:6d:38:68:35:c0:35:12:28:d1:2d:5b:fb:32:9b:
76:9d:98:8b:3e:55:ee:19:98:fe:e2:e1:ac:4c:cf:
e5:09:f8:cf:43:c4:a0:83:a4:ce:de:10:73:55:c9:
b9:fd:68:e8:2d:3d:82:51:b9:d8:79:af:7e:60:c3:
d7:dc:2a:58:76:09:31:05:87:fe:2b:be:1d:bd:37:
87:21:1a:f2:d9:a4:17:89:a7:09:14:e3:a4:56:7d:
5d:92:6f:33:fe:97:9f:44:6e:ff:fe:cb:04:2c:70:
7e:5b:1e:e4:e8:a0:16:4b:9d:a5:6c:af:96:0f:a2:
5b:d9:8b:77:89:ec:08:ae:17:5a:5b:8d:e4:8b:aa:
2d:9f:c1:c2:d7:c3:01:d0:b6:68:96:9d:9c:ea:08:
09:15:cf:4a:7d:70:14:87:4f:91:fa:b3:72:72:08:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:92:F9:0B:85:C2:17:09:77:3F:F9:92:F1:FE:C0:38:59:D8:8B
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/qs6S-QuFwhcJdz_5kvH-wDhZ2Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:2b:5d:95:de:7f:6e:54:65:b4:e7:1b:1b:fe:1c:dd:c4:a3:
f7:00:8a:a6:8f:f0:33:f2:08:15:d1:38:2a:4e:c6:49:3a:90:
a2:8a:a6:26:47:4a:90:19:78:26:bf:af:7c:3c:28:be:b4:db:
5f:5f:82:5a:98:2d:7f:d3:c8:c1:4a:a3:a0:12:23:3d:e1:68:
fe:c0:c3:0a:b8:d3:db:a2:2b:ff:43:45:21:23:c4:1b:b6:b1:
ce:63:af:71:06:ae:31:11:17:89:7f:93:f4:68:a5:46:1e:59:
8e:77:73:24:e2:e7:6e:7c:1b:2d:d6:8e:b0:ac:2f:12:c8:a1:
43:2b:ff:97:b7:8a:16:39:12:3b:25:40:ac:80:7d:01:45:f8:
93:99:f5:25:33:4b:b7:c2:f1:54:d3:5e:ea:3c:91:33:37:ac:
d0:b6:d6:2f:98:12:8c:72:a5:0f:a8:4a:b0:c0:c7:e1:f1:62:
d6:dc:7f:af:6c:e6:92:a2:a6:56:d8:66:67:8d:f6:71:90:87:
34:b7:00:d1:fc:62:6d:65:8b:e5:2f:5d:30:7c:d6:ef:a9:1b:
7c:cb:86:16:bd:e6:ef:dc:4f:7d:b8:c5:cc:77:fa:c2:18:4d:
81:50:06:ab:0c:b8:e4:de:32:3c:8b:ae:ea:81:31:b6:3c:1e:
21:97:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:23:05 2025 by rpki-client