Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/txmXHyxCyXeqXl5u6wlLaR7wR4I.roa
File: txmXHyxCyXeqXl5u6wlLaR7wR4I.roa (raw, json)
Hash identifier: 5sEgY3SYGGdlE6TTmMORty7DC0OPjukZrh7PJefSqac=
Subject key identifier: B7:19:97:1F:2C:42:C9:77:AA:5E:5E:6E:EB:09:4B:69:1E:F0:47:82
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 0F12E4B2
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/txmXHyxCyXeqXl5u6wlLaR7wR4I.roa
Signing time: Sat 01 Jan 2022 16:10:55 +0000
ROA not before: Sat 01 Jan 2022 16:10:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39542
IP address blocks: 185.43.60.0/22 maxlen: 22
185.137.252.0/23 maxlen: 24
194.50.39.0/24 maxlen: 24
91.213.242.0/24 maxlen: 24
2a01:6960::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252896434 (0xf12e4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Jan 1 16:10:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b719971f2c42c977aa5e5e6eeb094b691ef04782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:0c:c3:55:73:56:81:dd:ab:77:64:e0:cb:
30:5d:fb:0a:b8:5e:eb:ab:ae:65:7a:1b:4e:ea:b3:
4c:92:e6:36:db:79:66:63:02:27:28:83:b1:16:d4:
96:f1:11:93:87:1f:8d:25:cd:14:45:30:35:1a:16:
9b:88:29:e3:a2:90:b1:55:ac:e6:f7:38:aa:15:65:
7e:40:c4:82:1f:4f:8b:c3:ef:4a:15:6d:bd:82:eb:
76:06:e0:72:2b:3d:1f:62:8c:05:63:a6:eb:af:eb:
0d:1f:f4:3d:74:0d:28:a5:2c:4f:f6:6e:17:35:04:
4a:a4:72:f4:26:ad:84:8d:a6:5c:55:ab:6c:f9:8f:
50:f4:5d:2b:6f:df:26:7b:a7:1c:07:7b:c2:93:66:
27:28:9a:32:26:de:da:4d:9f:76:2c:d0:79:46:f7:
16:f2:56:18:83:b5:23:b0:b6:d0:ce:04:72:80:38:
8e:60:66:28:fe:b9:dc:8b:bc:3f:cb:92:46:84:fa:
77:77:5c:9c:bb:f1:22:ff:f7:e3:62:82:23:8b:7c:
f8:81:fb:3e:69:66:fb:48:eb:93:17:fd:f1:41:44:
73:ef:58:99:f6:fe:61:70:ee:67:5c:96:b2:af:81:
b4:ca:d6:c3:1d:df:67:f8:85:bf:ca:5a:e3:7d:28:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:97:1F:2C:42:C9:77:AA:5E:5E:6E:EB:09:4B:69:1E:F0:47:82
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/txmXHyxCyXeqXl5u6wlLaR7wR4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.242.0/24
185.43.60.0/22
185.137.252.0/23
194.50.39.0/24
IPv6:
2a01:6960::/32
Signature Algorithm: sha256WithRSAEncryption
6e:e2:13:ad:7c:55:88:1b:db:d0:4e:99:11:b8:74:b5:d7:87:
79:31:6b:78:2a:37:16:61:9f:a5:c8:48:f3:4f:7e:66:62:3a:
ba:4b:2c:d2:2d:f1:3e:65:bb:d6:08:43:96:a4:dd:e0:0b:b2:
dc:38:ba:82:32:ec:f3:bb:b7:3b:73:4e:a9:eb:58:19:4d:96:
31:ba:d0:01:ae:bc:01:4e:2f:98:74:1b:1e:44:3c:20:f7:de:
33:87:e3:a4:1a:61:ca:50:31:b8:72:08:16:58:23:83:af:4b:
61:2a:97:85:01:6d:19:a6:88:5b:89:b4:b9:e4:51:b6:8c:0e:
47:43:24:cf:e9:8a:1e:85:28:36:f4:f3:50:a4:4b:87:a6:12:
29:9a:0c:f2:73:a7:9f:30:38:83:7c:84:a7:38:42:23:3e:4d:
92:e1:74:4e:8b:1d:31:c5:63:70:d6:39:5a:2d:9c:36:aa:9b:
1a:3c:be:78:88:56:1b:7d:99:6e:8f:3d:41:3f:32:e4:3a:ef:
9e:21:1e:40:b7:e2:2e:2a:42:cd:48:71:5b:ef:8f:24:89:e2:
67:b2:ba:98:08:be:dd:3d:a3:42:2c:cc:4f:41:b9:35:49:72:
7b:9a:a5:c8:39:eb:cb:1a:c0:d3:9d:c8:76:f0:f0:7f:b3:12:
42:ff:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:35 2025 by rpki-client