Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/y6AJ8nMMWwVc-1-S7o1vKFV60w0.roa
File: y6AJ8nMMWwVc-1-S7o1vKFV60w0.roa (raw, json)
Hash identifier: 8JwzwZMQgLs9XmVPmEhU/F1uNtJkJzOri+vXkg1EByA=
Subject key identifier: CB:A0:09:F2:73:0C:5B:05:5C:FB:5F:92:EE:8D:6F:28:55:7A:D3:0D
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 098C9BAE
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/y6AJ8nMMWwVc-1-S7o1vKFV60w0.roa
Signing time: Sat 01 Jan 2022 05:59:44 +0000
ROA not before: Sat 01 Jan 2022 05:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20559
IP address blocks: 213.249.72.0/24 maxlen: 24
2a01:448:72::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160209838 (0x98c9bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 1 05:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cba009f2730c5b055cfb5f92ee8d6f28557ad30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:51:91:49:91:ef:96:1a:8b:83:27:9f:79:
6f:c6:d3:63:08:69:76:84:de:da:6d:7c:52:da:af:
d8:d8:ab:85:81:7c:c6:1b:5b:25:d7:9f:96:10:1e:
27:dd:b5:f4:24:89:b5:fd:00:43:d0:09:f9:67:4e:
e5:29:94:8b:4a:5e:95:ab:53:38:94:a4:b3:d1:0c:
b0:6a:60:34:df:7b:e5:ef:c5:35:80:2f:99:03:26:
86:31:dc:0c:73:4d:c8:23:ab:07:29:4b:15:36:60:
1e:c4:cf:d1:27:6d:d7:2a:0e:c2:3f:a9:1f:1f:dc:
e8:3e:62:b7:29:bd:5d:29:73:e8:30:1a:5b:c6:fd:
f6:96:7e:ab:e4:21:db:5c:dc:0e:0d:a0:f5:2f:34:
a9:9f:39:36:b4:63:b9:0d:f9:09:0d:cf:35:29:b6:
24:35:1e:ab:09:1d:35:77:7e:d1:c9:d8:9f:20:8b:
68:df:25:ce:c9:b4:68:c5:46:d9:16:50:36:1f:ae:
bf:91:5e:11:99:ef:3f:0c:13:c5:88:72:8a:d4:4d:
91:47:a7:e8:33:92:a9:d3:b1:1d:b0:13:43:d8:4d:
b1:0d:22:0d:4e:73:a9:4b:9f:97:e9:4a:a9:ba:c4:
08:8a:8c:bd:d5:1b:7c:11:64:fb:fd:7e:74:5e:62:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:09:F2:73:0C:5B:05:5C:FB:5F:92:EE:8D:6F:28:55:7A:D3:0D
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/y6AJ8nMMWwVc-1-S7o1vKFV60w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.249.72.0/24
IPv6:
2a01:448:72::/48
Signature Algorithm: sha256WithRSAEncryption
9e:8d:44:42:e9:23:86:d4:5a:a4:8e:4c:c0:3c:34:b0:7b:ab:
01:0b:38:47:81:39:36:85:da:e6:cb:ad:8c:e8:0e:01:77:d6:
49:66:eb:ef:3f:8b:d0:ff:2b:dc:e9:f5:23:9d:05:93:f1:20:
c6:bc:49:3f:ba:48:4e:04:83:76:94:f2:84:65:1f:cb:cf:04:
5c:95:79:e5:ab:4c:9f:0d:99:0a:0f:66:f1:16:08:e3:9a:e3:
7d:e9:ff:17:f2:33:af:7b:d5:54:86:6e:5d:00:01:3c:09:f1:
38:fa:45:6c:f6:b9:ef:d4:0b:40:09:ea:70:1b:c4:82:8d:7f:
ef:56:04:90:c3:91:39:af:2c:d7:4b:66:d5:3c:e4:2a:06:75:
06:8e:d6:c3:2a:ce:34:f5:d7:7e:9d:38:6c:63:98:a3:6e:2a:
6a:ae:82:36:d0:24:1b:69:17:49:f3:9a:33:a7:a7:6f:b3:e1:
91:9f:29:11:75:99:fe:78:56:19:72:13:11:ef:48:94:e2:1a:
31:63:be:6a:19:e7:bf:0e:7d:e4:6d:a0:29:31:32:c1:75:df:
47:0a:6d:32:55:57:3c:14:06:eb:1b:4a:9e:78:69:a4:d7:f4:
e4:9e:90:7b:2f:0b:a6:1c:dd:97:b8:58:77:26:d8:36:6e:bb:
65:80:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:03 2025 by rpki-client