Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/i_CFFWSEHz8njDAoMRUUbMNkoos.roa
File: i_CFFWSEHz8njDAoMRUUbMNkoos.roa (raw, json)
Hash identifier: rbLyIf53o8L3le2s6cxtIrrZRGYXYLxiSUJnVxyVPLU=
Subject key identifier: 8B:F0:85:15:64:84:1F:3F:27:8C:30:28:31:15:14:6C:C3:64:A2:8B
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 063D56B0
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/i_CFFWSEHz8njDAoMRUUbMNkoos.roa
Signing time: Sat 01 Jan 2022 11:00:01 +0000
ROA not before: Sat 01 Jan 2022 11:00:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57332
IP address blocks: 5.206.240.0/20 maxlen: 20
45.85.8.0/22 maxlen: 22
159.255.176.0/20 maxlen: 20
159.255.186.0/24 maxlen: 24
159.255.180.0/23 maxlen: 23
159.255.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104683184 (0x63d56b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Jan 1 11:00:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bf0851564841f3f278c30283115146cc364a28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:9f:f2:b6:65:99:56:e2:91:0b:db:88:fd:
1e:a4:85:62:21:1c:69:49:30:80:64:e5:9e:51:1e:
f9:e0:72:cc:46:7c:3b:f2:eb:de:5a:ff:8d:47:b4:
11:d7:d2:b2:a6:73:8e:ce:a5:e0:cf:cb:09:92:62:
5c:6f:76:ef:5c:26:67:b2:31:b4:8a:ab:47:a9:f6:
f6:a8:b1:ae:09:29:30:30:f2:ce:1b:4f:2f:06:fd:
65:09:c5:b5:2a:8a:b1:f7:3a:36:57:cb:d7:03:45:
c7:44:62:47:fd:5f:1f:57:1d:58:bd:97:cd:2c:5c:
d3:1e:f6:64:52:85:19:99:c3:75:d5:f4:36:68:a9:
ec:b1:4d:62:36:68:97:fb:22:c2:e7:a7:18:bf:8d:
f2:00:a8:5f:ac:92:1e:29:1f:c2:86:27:ae:67:c4:
e8:22:f2:75:83:e7:17:f7:53:9a:5c:27:9f:08:1c:
0f:e9:a8:38:ff:15:e2:50:ef:57:45:59:4e:7f:62:
a5:94:9b:bd:5d:c7:52:b7:de:3f:af:be:e1:53:0c:
4f:52:6f:21:15:34:39:7e:08:38:ea:a1:fc:fa:81:
d0:01:63:40:4f:8c:93:50:6d:ae:79:ad:47:29:d6:
03:dc:d7:01:66:34:25:4b:e0:c5:fe:45:76:a8:93:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F0:85:15:64:84:1F:3F:27:8C:30:28:31:15:14:6C:C3:64:A2:8B
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/i_CFFWSEHz8njDAoMRUUbMNkoos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.240.0/20
45.85.8.0/22
159.255.176.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:2b:e2:15:dd:35:6d:2c:f4:83:a2:7b:32:19:13:24:1e:21:
96:4d:e1:55:7d:1a:fc:b5:c4:a4:a3:92:f5:db:d7:00:54:c9:
36:94:0f:41:5e:95:d1:d2:1c:f4:dc:26:82:f1:f8:1e:6f:85:
e7:be:84:44:30:12:fb:e5:27:6b:b6:1b:fa:11:21:b5:cd:0c:
ec:6e:2f:8c:85:d1:0c:39:d3:a5:dc:a8:3d:e3:0e:fb:e4:52:
40:bc:b6:36:6e:75:37:84:a3:6b:eb:1b:ed:b2:35:0b:80:4e:
f2:3e:f0:c0:5a:e8:e6:4f:23:87:9f:da:d4:6b:7d:60:20:97:
48:da:4a:ae:27:ed:5d:f0:72:0b:a1:0e:7f:f3:19:22:3c:13:
69:50:bc:d7:27:f2:db:22:56:a8:3b:fa:ed:d0:6f:b5:3a:53:
1b:87:dc:2b:cc:4d:0e:00:cf:21:9e:1a:7e:a7:b8:c9:a8:27:
88:12:ba:24:e1:94:82:1f:9d:53:5b:d3:64:0e:d7:e7:6a:53:
bc:77:59:18:c8:59:b1:94:5f:27:38:bb:aa:17:be:f1:bd:7b:
7f:1d:9a:fa:1c:33:7a:13:3f:38:32:24:38:9f:c3:6e:aa:b6:
7a:d2:8a:72:c8:5e:60:c2:4e:ae:62:a7:60:f7:38:3f:99:b0:
4e:90:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:42 2025 by rpki-client