Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/FhFIfxYPOwm6Zs3diLzEAFGUt_0.roa
File: FhFIfxYPOwm6Zs3diLzEAFGUt_0.roa (raw, json)
Hash identifier: IVN9gsseNYGYCzvYQwZ4nW3vdaOCTDdnJOzctQyBwZA=
Subject key identifier: 16:11:48:7F:16:0F:3B:09:BA:66:CD:DD:88:BC:C4:00:51:94:B7:FD
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 018BE68F20E01E0A593C828131CF954B9300
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/FhFIfxYPOwm6Zs3diLzEAFGUt_0.roa
Signing time: Sun 19 Nov 2023 07:50:21 +0000
ROA not before: Sun 19 Nov 2023 07:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61055
IP address blocks: 185.10.73.0/24 maxlen: 24
185.10.72.0/24 maxlen: 24
185.10.75.0/24 maxlen: 24
185.10.74.0/24 maxlen: 24
2a02:dfc0:1::/48 maxlen: 48
2a02:dfc0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e6:8f:20:e0:1e:0a:59:3c:82:81:31:cf:95:4b:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Nov 19 07:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1611487f160f3b09ba66cddd88bcc4005194b7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:7e:c8:a6:1d:0c:cc:1c:ba:08:85:c5:17:
86:e9:c5:c2:a3:3b:0e:c5:41:36:13:e2:f6:2f:86:
76:05:1a:3e:d6:e9:95:29:ca:f8:95:2f:5a:90:c5:
78:69:89:d0:2a:0c:64:cc:d5:f6:a1:15:24:2d:6c:
f9:98:d8:ff:1d:55:ba:d5:17:4f:3b:26:c6:8f:08:
d9:71:3b:99:ce:40:42:56:05:b5:eb:9c:24:ee:04:
d8:5d:63:77:0b:63:a4:79:ed:ea:51:7e:55:1d:c4:
e9:31:3c:31:cb:a8:91:9e:92:a4:b4:04:4e:59:c2:
f4:af:b6:e9:cc:9a:f3:8f:4e:a8:98:cc:56:d8:16:
06:c3:ea:92:8a:16:aa:d9:e1:84:29:82:82:16:ba:
3e:9d:ed:89:a5:88:96:04:38:b2:16:d1:f7:c5:e6:
bb:5c:6c:88:33:b8:2d:87:4d:f4:eb:b0:17:ad:94:
03:24:7d:c3:df:52:f6:1b:61:e5:58:48:31:41:a4:
df:1e:c3:4e:aa:06:5d:3a:1d:dc:07:dc:1f:a6:30:
25:7b:c1:86:4a:df:0d:85:39:b1:e9:c4:7e:f1:4a:
de:24:01:32:85:7c:4d:7f:bc:d8:4c:93:f8:88:99:
ba:f0:76:0c:83:51:6a:82:e6:49:a1:e8:49:5c:e6:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:11:48:7F:16:0F:3B:09:BA:66:CD:DD:88:BC:C4:00:51:94:B7:FD
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/FhFIfxYPOwm6Zs3diLzEAFGUt_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.72.0/22
IPv6:
2a02:dfc0:1::-2a02:dfc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:df:03:2e:2d:31:fb:5c:07:67:f9:44:65:c7:6d:a6:af:3d:
c3:e1:6b:1c:02:fb:c9:2c:fb:f7:b3:c0:e2:28:1b:b2:a6:40:
32:3f:a2:06:b7:1b:74:81:5e:60:12:c7:df:e8:82:b1:d8:09:
79:14:5b:20:37:98:6f:e7:ad:40:83:f2:87:8a:0d:f0:75:97:
e0:fe:56:19:4e:1b:04:10:e6:f0:6f:fd:79:61:a3:46:17:86:
07:45:f0:55:4c:88:e0:54:4c:53:eb:b9:ac:2c:18:8c:10:be:
8a:97:6a:58:77:ea:27:af:dd:8e:4c:5c:3e:10:60:87:a2:e0:
27:8c:6c:ea:02:b7:0a:22:88:91:22:9e:a9:fa:38:3a:32:7e:
0b:00:50:d2:4c:4c:e6:bb:75:12:1f:5f:91:86:c2:8b:51:35:
07:b6:7f:72:24:53:11:df:f2:98:b7:c3:9c:76:00:0d:3c:ab:
60:c6:fc:ef:06:f7:d2:a1:22:f6:86:d6:15:e0:32:52:89:60:
5d:6a:36:a5:aa:dc:72:6a:e8:95:7a:bb:d3:a6:d7:a6:3a:6b:
86:86:34:a9:70:c2:5e:22:06:bd:e5:8d:d1:fe:05:b1:53:fc:
aa:40:28:f3:3f:1a:f5:dd:50:ad:f9:ce:bf:ef:c4:1c:f8:1c:
63:8a:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:23 2025 by rpki-client