Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/y6sDv_0i72F2A5In9k1-gjLsufE.roa
File: y6sDv_0i72F2A5In9k1-gjLsufE.roa (raw, json)
Hash identifier: V8xXDVE4kyBJcz/lbnqCASD7+cnxKOFZeeiBeEI+sVg=
Subject key identifier: CB:AB:03:BF:FD:22:EF:61:76:03:92:27:F6:4D:7E:82:32:EC:B9:F1
Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial: 068B6930
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/y6sDv_0i72F2A5In9k1-gjLsufE.roa
Signing time: Sat 01 Jan 2022 16:02:39 +0000
ROA not before: Sat 01 Jan 2022 16:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212886
IP address blocks: 193.107.76.0/22 maxlen: 22
2a09:99c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109799728 (0x68b6930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Validity
Not Before: Jan 1 16:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbab03bffd22ef6176039227f64d7e8232ecb9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:96:bb:92:6f:34:3f:10:26:fc:36:64:1c:
10:3f:f1:bd:0c:ac:76:bd:e9:af:e0:a5:25:a3:4c:
b3:02:46:70:c7:4f:d8:ee:56:f9:31:1d:69:54:45:
4d:da:ea:a4:0d:04:39:5a:16:bc:8f:4e:12:6b:45:
40:7b:da:d2:17:34:a2:f8:99:e4:93:19:7f:dc:f3:
81:21:59:88:22:1d:99:f7:03:2e:d0:80:da:e4:21:
a5:b0:60:f3:04:9a:c8:2a:26:b7:fd:69:d4:cb:06:
49:44:9e:0f:a2:7b:94:06:9c:4e:6a:34:a4:9e:17:
b6:38:ad:6d:9a:a1:42:8e:ef:54:08:52:b9:a4:61:
83:8f:e7:4a:ef:97:46:20:20:2e:13:db:03:60:da:
c9:68:83:ca:31:25:8a:f3:4b:55:8d:10:ba:ab:ff:
86:50:7d:e0:ec:71:d7:be:2e:88:3f:8b:4e:58:d8:
76:55:2a:3c:2e:cd:29:de:f4:69:32:d3:ba:54:92:
75:df:cd:16:8e:40:79:68:8f:b4:fb:e2:e4:4c:8b:
32:85:6b:46:8d:9e:b2:f9:82:3a:82:17:e3:e6:b7:
fb:36:1d:b3:9f:a9:08:8e:31:eb:b7:fa:e2:d0:e4:
4d:49:e2:12:42:df:25:6d:a2:01:96:4e:ee:8d:6e:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:03:BF:FD:22:EF:61:76:03:92:27:F6:4D:7E:82:32:EC:B9:F1
X509v3 Authority Key Identifier:
keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/y6sDv_0i72F2A5In9k1-gjLsufE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.76.0/22
IPv6:
2a09:99c0::/48
Signature Algorithm: sha256WithRSAEncryption
1d:06:e7:28:16:49:65:1e:12:f6:e0:57:fc:9a:ad:46:8e:f0:
d7:17:71:0a:38:a5:44:e0:da:bf:c2:47:61:fd:47:a0:72:0e:
63:95:7f:a7:96:4f:ea:a4:42:07:44:12:65:df:dd:62:e6:6a:
0b:eb:7d:32:65:cd:f4:28:b6:8e:e4:a0:c3:9e:25:55:f0:d4:
7a:58:b1:83:16:e7:a3:f3:2b:d4:6c:76:5f:04:c2:42:68:68:
fb:a5:e1:26:e2:42:55:c2:f6:bf:d2:7c:5d:e1:14:f0:fd:86:
fe:85:83:29:13:0c:ee:85:3b:dc:03:6b:f5:83:c6:51:24:6a:
11:04:01:8f:ba:6c:e2:3e:ab:20:93:a8:2b:38:8f:5d:80:9d:
bc:66:86:18:0b:47:3e:fe:d6:c8:3c:a3:7a:a9:a0:67:6a:d4:
90:e4:cb:7a:83:97:28:62:30:f9:eb:b7:fd:7c:9f:f7:92:70:
fa:f5:53:2e:11:80:fc:32:ab:57:fe:c8:58:40:5d:5d:8e:bf:
5d:ae:fb:82:36:49:76:07:24:0b:f3:a9:6f:82:0f:5c:c0:5f:
65:a9:d1:82:36:f0:ee:fa:fe:a7:ad:b9:ce:f7:5b:68:a6:06:
8f:49:23:5e:1c:c0:24:cd:e6:0d:e5:2e:22:7c:a9:d6:23:ee:
e1:73:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:39:22 2025 by rpki-client