Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/di6rXY1x1H7LUpRn-MnyKxVG1Zg.roa
File: di6rXY1x1H7LUpRn-MnyKxVG1Zg.roa (raw, json)
Hash identifier: cHbOrVdzzB2pB/l46qbEqZ3g2Gzst/u/+8VZ/gVcijs=
Subject key identifier: 76:2E:AB:5D:8D:71:D4:7E:CB:52:94:67:F8:C9:F2:2B:15:46:D5:98
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 0F84E0F5
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/di6rXY1x1H7LUpRn-MnyKxVG1Zg.roa
Signing time: Sat 01 Jan 2022 06:57:25 +0000
ROA not before: Sat 01 Jan 2022 06:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25595
IP address blocks: 185.104.128.0/24 maxlen: 24
2a06:3080::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260366581 (0xf84e0f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jan 1 06:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=762eab5d8d71d47ecb529467f8c9f22b1546d598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:39:bc:75:4b:3d:92:f3:3c:66:db:66:84:
f0:c5:21:e1:fc:bf:ba:29:6d:12:c1:97:fc:88:37:
90:ad:37:9c:10:b3:90:d6:f7:4e:1d:24:4d:ad:ee:
e9:80:76:24:10:a6:e2:42:13:94:ea:42:24:23:b1:
8d:d1:02:65:34:c2:b1:51:80:9c:eb:b1:50:d4:86:
14:9e:d9:fd:96:83:ca:dc:1e:d5:43:26:cf:50:91:
0a:d5:ee:27:8d:0c:cb:22:40:0f:12:44:d8:1c:f8:
43:39:e1:97:f3:3b:c7:38:4b:02:1c:98:b9:db:25:
a7:74:a0:c3:93:49:3d:7d:1d:46:29:06:cd:c6:de:
90:9e:14:3d:ad:61:c1:c1:5c:78:1b:92:8d:a2:58:
41:3d:ef:7f:26:2a:4d:1a:60:3d:e1:b4:1e:02:93:
43:b1:d1:1f:19:86:04:40:6b:f7:21:39:48:73:ac:
fa:41:5b:27:3b:64:ed:ce:89:5b:68:26:24:7b:24:
39:6c:1f:46:b3:7a:5d:dc:fb:44:c3:6e:1f:29:6a:
e7:96:b8:d3:64:76:14:b4:0b:2f:ea:f1:8d:b6:e5:
37:5b:ec:2e:9d:06:65:a4:89:a0:d2:bc:5f:e5:b2:
53:61:d0:f1:97:a2:8a:df:c0:02:6a:f5:fe:82:22:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:AB:5D:8D:71:D4:7E:CB:52:94:67:F8:C9:F2:2B:15:46:D5:98
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/di6rXY1x1H7LUpRn-MnyKxVG1Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.128.0/24
IPv6:
2a06:3080::/30
Signature Algorithm: sha256WithRSAEncryption
aa:05:e7:d1:af:99:ac:d6:c0:98:01:2a:b2:c4:97:a9:e7:8c:
f6:6a:3a:7d:40:f1:39:1e:1a:dc:19:b1:06:f7:f8:54:3d:38:
4d:37:99:10:a0:3a:61:5a:81:6d:f8:d2:6f:dc:4c:57:85:e4:
6b:07:80:46:f0:99:d1:08:ed:6e:e2:18:4e:67:8d:1a:2e:e8:
87:a7:35:b8:d7:e1:6b:0a:63:4a:54:eb:29:e6:af:b5:15:45:
ac:fd:42:f0:79:79:e6:8d:2c:bd:79:9a:0e:38:ab:15:74:df:
b9:d7:57:3d:af:0a:b5:7a:66:67:77:b9:6c:2d:ed:76:2c:4f:
0f:57:06:6e:14:8b:e4:06:4b:9e:9a:fc:7f:7a:1a:6a:c0:cf:
cf:62:c3:f6:a4:00:48:64:49:b6:bc:e7:ef:e6:72:49:5d:3a:
d8:d9:ef:61:53:4d:a8:0a:1f:a1:0a:26:0e:7d:a1:c5:5d:c6:
06:5c:dd:57:94:4e:90:70:c5:83:bf:ed:3a:a8:c9:7d:e1:58:
31:d3:02:5a:5e:ef:94:fc:b7:d1:27:14:ed:12:89:9d:d1:40:
b6:69:ee:1e:53:9a:d8:e5:f0:a4:f9:dd:4a:44:25:b2:3d:d2:
16:f9:d8:43:40:0b:36:55:1e:ef:06:2f:0d:84:d0:9d:df:9e:
7d:53:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:24 2025 by rpki-client