Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/_6_uhAJ9OxNYFBvJAELiYOtcWrg.roa
File: _6_uhAJ9OxNYFBvJAELiYOtcWrg.roa (raw, json)
Hash identifier: +6EDJsThtN16QVKTKdaUfgLbOkR1gJSgxrOxc3d0KJs=
Subject key identifier: FF:AF:EE:84:02:7D:3B:13:58:14:1B:C9:00:42:E2:60:EB:5C:5A:B8
Certificate issuer: /CN=508a9a08abef74dcc51004f4fae0266d620395e3
Certificate serial: 01FBD8
Authority key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/_6_uhAJ9OxNYFBvJAELiYOtcWrg.roa
Signing time: Tue 25 Jan 2022 10:54:50 +0000
ROA not before: Tue 25 Jan 2022 10:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211197
IP address blocks: 185.7.213.0/24 maxlen: 24
2a03:b680::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130008 (0x1fbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508a9a08abef74dcc51004f4fae0266d620395e3
Validity
Not Before: Jan 25 10:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffafee84027d3b1358141bc90042e260eb5c5ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:66:97:60:73:4f:1e:e3:25:a0:54:f6:87:
c1:56:3b:4f:8b:5b:fc:9d:08:30:69:88:21:dc:f5:
92:75:3d:3a:38:5f:90:49:03:41:a8:77:73:0c:e1:
82:33:83:28:32:4a:ab:51:70:b2:42:a7:e9:1e:26:
6f:72:f2:de:17:86:45:58:f8:d9:87:2b:99:c5:fe:
51:67:e2:fa:70:a2:8b:bb:ca:2c:0b:b0:8f:ec:7d:
c0:6c:f8:a0:0b:45:64:79:1a:1f:af:15:6b:76:e2:
fd:88:4f:33:c5:dd:39:9f:59:63:c7:a4:f2:6e:71:
29:a1:37:84:77:70:46:41:f3:8c:8d:df:3b:51:93:
a8:36:a2:2f:47:10:4c:f8:cf:3d:60:c0:0d:a3:3f:
90:36:c5:e7:93:ab:46:8f:69:ad:a8:d0:55:c3:70:
1e:2d:26:7f:5b:8f:b5:3b:19:c8:7c:59:48:cd:b6:
ef:00:58:a2:9c:99:89:34:c8:d3:d7:71:40:78:f9:
6e:6a:cc:2a:87:cb:86:93:19:21:30:f7:03:4b:68:
94:99:11:ca:3e:91:ea:0c:2b:26:7d:bb:30:80:61:
dd:78:b6:b4:73:24:7b:fd:50:bf:ce:d4:04:a7:08:
df:7e:a9:37:57:12:e6:f3:9f:e4:2c:09:1d:2e:de:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:EE:84:02:7D:3B:13:58:14:1B:C9:00:42:E2:60:EB:5C:5A:B8
X509v3 Authority Key Identifier:
keyid:50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/_6_uhAJ9OxNYFBvJAELiYOtcWrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.213.0/24
IPv6:
2a03:b680::/29
Signature Algorithm: sha256WithRSAEncryption
93:29:2f:20:5f:06:c6:09:2d:f1:cd:eb:82:ea:bb:e0:1e:c6:
3b:1a:5d:9c:7a:f0:14:2f:1e:28:df:0c:3f:03:0a:96:ac:5c:
90:48:15:77:6f:5e:39:e5:ea:2f:e7:ec:48:8c:4a:a7:5c:46:
b7:49:e1:05:da:d6:fd:6c:a3:f0:72:81:5e:5d:7d:92:c6:1e:
86:f9:d0:fa:e0:28:6b:62:5f:aa:8e:18:52:b6:b1:a1:0b:23:
da:d3:83:b0:c2:b6:25:6c:04:6b:a2:ea:65:cd:89:65:4a:31:
55:41:2f:c0:d1:93:bf:8e:ef:23:e3:15:4a:ec:7b:9d:69:db:
05:ac:b9:1e:2e:ef:f8:75:e6:11:57:25:51:32:9a:2a:d0:2d:
09:4d:90:cb:48:2f:a5:29:d7:c9:a9:bb:25:7a:41:1c:59:18:
a4:a3:6a:ad:be:a8:2f:a6:1f:da:27:25:82:5d:3b:75:1f:f8:
45:1f:aa:4c:12:b8:1c:49:21:2a:a5:a0:f5:f4:81:de:68:68:
18:7b:84:6d:d7:9d:e7:50:29:4d:63:2b:9f:24:c6:a4:28:c8:
06:d5:92:68:02:ed:94:b2:43:89:9b:17:32:89:ec:e8:ba:54:
7f:8e:90:da:11:2a:38:0c:37:ce:b3:6a:52:47:05:b1:11:70:
d6:1d:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:36 2025 by rpki-client