Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/6Obac8HNv3Dt62x4mYPtbLwwyzw.roa
File: 6Obac8HNv3Dt62x4mYPtbLwwyzw.roa (raw, json)
Hash identifier: UJT6ONBbctZrXIH+7ZkCZk5GgxAxti5CbrEuG1fBkXE=
Subject key identifier: E8:E6:DA:73:C1:CD:BF:70:ED:EB:6C:78:99:83:ED:6C:BC:30:CB:3C
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 01856D81D308A23FCAC94EB124D1F526E681
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/6Obac8HNv3Dt62x4mYPtbLwwyzw.roa
Signing time: Sun 01 Jan 2023 13:25:02 +0000
ROA not before: Sun 01 Jan 2023 13:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43394
IP address blocks: 91.194.242.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d3:08:a2:3f:ca:c9:4e:b1:24:d1:f5:26:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Jan 1 13:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e6da73c1cdbf70edeb6c789983ed6cbc30cb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:06:5c:44:16:9b:10:ad:25:3b:22:e1:0f:
ee:e9:d6:ef:bd:34:35:01:5e:06:b5:55:74:ac:e9:
b0:c4:8f:c8:ba:d8:43:b7:42:d5:6d:51:f0:2b:0f:
55:f7:85:77:b8:bb:5e:52:b5:ca:11:69:d6:4a:e6:
77:64:e3:73:1d:88:3e:06:dc:ab:9e:25:aa:c2:29:
67:dc:0b:2b:ab:a1:bf:89:64:18:68:56:bb:c7:1c:
2f:4c:d4:2d:d3:8b:9b:33:ec:80:4a:bf:04:ac:cf:
f9:44:d0:21:a5:56:aa:30:84:78:2a:f3:3b:46:f0:
d3:78:31:d2:e8:29:0b:93:46:9a:9a:4b:aa:00:13:
35:f4:27:12:dc:c1:93:3a:e4:65:c1:46:ab:ea:dc:
6d:38:67:f4:ec:f1:e7:d1:39:c4:17:3d:38:38:c6:
aa:a9:62:ca:ea:9a:87:1f:e1:8b:f2:bb:16:ae:2b:
75:82:2f:e5:15:01:f7:42:89:a8:32:56:89:cb:70:
12:7a:23:15:c5:6e:02:b3:db:7b:02:5a:16:c2:ec:
4f:0f:e6:8d:eb:36:b4:e0:01:4d:39:ce:ca:04:9a:
6a:8f:8e:27:3e:36:63:ce:96:d2:30:de:26:97:1d:
af:03:f7:8b:39:ae:21:7a:b1:dd:d6:4b:0a:aa:27:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:DA:73:C1:CD:BF:70:ED:EB:6C:78:99:83:ED:6C:BC:30:CB:3C
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/6Obac8HNv3Dt62x4mYPtbLwwyzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.242.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:2c:f6:df:6d:4f:a5:1f:99:39:08:05:ea:36:ee:73:75:5b:
db:5b:60:0d:bb:0e:0f:66:1c:15:e8:0a:f9:e6:b0:65:33:74:
ce:0c:1f:ea:ba:f2:d3:40:ea:50:e1:1b:1f:19:46:23:8b:75:
18:64:70:cb:3c:92:48:ba:af:a4:51:a5:7e:a9:b4:6a:49:92:
12:a0:96:f8:50:ee:67:ea:96:ff:f1:d2:a6:e3:df:d1:a5:37:
96:03:c0:d3:fe:14:58:d6:b3:36:01:8d:fb:83:54:d8:18:4b:
73:5a:17:72:a3:6c:3f:29:bc:ce:4f:6f:15:87:d9:c2:c4:e2:
76:b2:b9:e2:86:2a:9b:a0:62:18:c2:90:4f:0e:c2:c2:46:10:
27:66:72:6d:d3:06:f7:98:fd:44:f2:10:d8:0a:39:01:20:28:
d6:46:0e:52:d7:00:8f:b4:70:49:79:ed:70:07:b3:e7:6b:02:
91:e7:d9:81:f1:09:84:78:2d:af:95:54:d3:bf:97:61:7a:00:
11:d7:aa:c8:16:0b:07:da:1e:9c:ae:ba:eb:59:46:b8:51:1c:
7d:de:4a:04:59:ed:78:52:7b:a8:b9:09:c0:8a:99:f3:57:18:
f0:b4:0e:61:0d:3e:9d:0d:66:44:eb:e1:35:f4:1d:cf:c8:32:
08:b7:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:26:19 2025 by rpki-client