Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/6usJYhuC978Cc6iuUY3_L4L5cVs.roa
File: 6usJYhuC978Cc6iuUY3_L4L5cVs.roa (raw, json)
Hash identifier: IRyYse7I9CbZEERCk6wx+Ybawn+pCNEhiXbmSbbznQI=
Subject key identifier: EA:EB:09:62:1B:82:F7:BF:02:73:A8:AE:51:8D:FF:2F:82:F9:71:5B
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 018A4FCAC9EF318828F7400C0C2C3B81A9D7
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/6usJYhuC978Cc6iuUY3_L4L5cVs.roa
Signing time: Fri 01 Sep 2023 08:10:04 +0000
ROA not before: Fri 01 Sep 2023 08:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198013
IP address blocks: 94.185.123.0/24 maxlen: 24
94.185.97.0/24 maxlen: 24
94.185.96.0/19 maxlen: 19
94.185.98.0/24 maxlen: 24
94.185.104.0/22 maxlen: 22
94.185.103.0/24 maxlen: 24
94.185.102.0/24 maxlen: 24
94.185.101.0/24 maxlen: 24
94.185.100.0/24 maxlen: 24
94.185.99.0/24 maxlen: 24
94.185.105.0/24 maxlen: 24
94.185.110.0/24 maxlen: 24
94.185.109.0/24 maxlen: 24
94.185.108.0/24 maxlen: 24
94.185.112.0/24 maxlen: 24
94.185.113.0/24 maxlen: 24
2a03:4580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:ca:c9:ef:31:88:28:f7:40:0c:0c:2c:3b:81:a9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Sep 1 08:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaeb09621b82f7bf0273a8ae518dff2f82f9715b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:cd:42:5c:c0:77:66:e8:3f:27:c8:b5:fc:
dd:2c:ac:6b:a7:a7:28:20:14:4d:9a:5d:30:50:47:
63:21:23:0e:bc:6d:99:45:8f:36:f6:de:08:3e:70:
1c:11:f5:19:05:b5:22:4c:06:6b:10:76:a7:78:e0:
4f:d1:2f:ff:07:7f:0b:3f:0a:9e:dd:a1:e2:a4:7c:
2e:e4:66:94:d1:ec:6d:6d:39:16:e5:d7:a2:97:3f:
f0:8c:82:6b:07:81:2d:90:6d:63:bb:36:38:1c:b5:
f6:0e:43:85:ab:48:bf:e7:ba:98:76:28:24:5d:65:
19:c2:b8:d8:52:77:ae:c6:aa:2a:50:a5:75:7e:02:
3f:88:3f:80:aa:9f:2a:58:d9:6d:bb:e6:a1:70:ce:
73:23:75:3f:f3:2a:88:d9:75:6d:ec:9d:ba:d2:b1:
cd:92:34:8d:41:7d:e0:b5:97:e3:e5:ff:aa:80:90:
3b:9b:75:88:ae:05:e8:c5:35:33:9d:a6:ff:5a:79:
4e:b4:33:50:dc:84:9e:78:33:b0:eb:24:de:56:35:
bb:21:85:dc:c3:d2:1c:49:10:c1:58:42:1e:67:eb:
d4:33:6e:5d:42:ab:a8:f4:88:55:d5:fe:cd:0e:84:
0c:db:cd:80:ed:f9:00:bf:64:ee:97:10:10:14:92:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:09:62:1B:82:F7:BF:02:73:A8:AE:51:8D:FF:2F:82:F9:71:5B
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/6usJYhuC978Cc6iuUY3_L4L5cVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.96.0/19
IPv6:
2a03:4580::/32
Signature Algorithm: sha256WithRSAEncryption
9e:b6:6a:f3:5d:4d:b1:6c:96:84:eb:b0:1d:15:a8:43:33:e5:
37:1a:02:74:3d:7b:d1:2e:42:f8:a3:c5:b7:b4:5c:d1:e4:74:
a8:55:8d:b1:9f:3c:04:55:b0:65:e6:0f:d9:4e:b8:82:c0:fa:
13:f9:ea:39:4a:a1:00:de:9b:d6:c2:0b:e0:c2:29:fa:82:a6:
96:fa:2c:48:9b:4a:d6:12:0b:ae:7b:62:58:f5:aa:42:c7:06:
c9:9b:b6:b0:d2:83:2b:91:33:f5:66:59:4c:ca:46:58:b7:b1:
89:01:c4:92:d4:dd:b0:cb:4c:18:16:fe:f6:f9:3d:05:da:e4:
48:88:7a:2e:09:b1:d2:0a:2e:0b:4b:51:77:be:0c:97:80:20:
5f:e9:a1:13:3e:6a:f9:f3:5b:49:7c:de:44:73:57:53:43:de:
84:ca:6c:e6:cc:ce:f4:2c:e4:e5:71:b1:9f:ce:bf:c9:5b:bb:
22:0f:62:31:b3:de:e4:66:ba:ca:9c:79:94:d2:72:29:74:ef:
9f:49:03:15:e1:5d:10:e9:6a:f7:03:78:66:43:be:46:a2:ab:
fc:cd:a8:f2:e1:8e:9a:a3:b7:01:9e:8d:87:bc:69:e7:56:9d:
88:d0:54:59:a5:0c:81:5a:7c:4f:1f:0a:f9:b6:0b:3c:90:32:
6b:58:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:52 2025 by rpki-client