Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/xt6kApr1nm0XDxMFMj0qyp3IGT8.roa
File: xt6kApr1nm0XDxMFMj0qyp3IGT8.roa (raw, json)
Hash identifier: 9GZdEm6GgEQA5w3ui47lXty7LpFASCqXtup+CMFoGYI=
Subject key identifier: C6:DE:A4:02:9A:F5:9E:6D:17:0F:13:05:32:3D:2A:CA:9D:C8:19:3F
Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Certificate serial: 018268C73A9925BA0BE42CD3785FDB191F42
Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/xt6kApr1nm0XDxMFMj0qyp3IGT8.roa
Signing time: Thu 04 Aug 2022 12:14:23 +0000
ROA not before: Thu 04 Aug 2022 12:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57317
IP address blocks: 185.105.112.0/22 maxlen: 24
2a06:3700::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:c7:3a:99:25:ba:0b:e4:2c:d3:78:5f:db:19:1f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919
Validity
Not Before: Aug 4 12:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6dea4029af59e6d170f1305323d2aca9dc8193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:83:c7:da:e8:52:97:c2:a6:65:e9:22:5c:
13:ca:71:f9:fc:f1:d3:43:19:f7:db:57:d9:b6:65:
be:ed:3e:6f:87:b7:66:46:20:99:d7:5d:c7:d8:2c:
61:f6:e6:86:80:8e:8c:c4:d6:de:9f:4e:76:e3:26:
70:94:b8:cf:db:09:89:21:a4:65:b0:28:e4:4b:63:
b5:4b:27:aa:11:28:bb:e2:6a:e0:1d:a2:13:a6:bd:
d2:bb:b2:29:6a:6d:12:b5:75:1e:06:c1:00:a6:5e:
fb:ad:7d:ec:12:cb:2d:01:4d:50:97:17:8c:68:b3:
e6:30:4d:de:34:db:8f:c4:34:73:e7:7c:7f:db:ae:
82:52:0b:e9:d1:27:7f:aa:0c:fc:0e:cc:59:7c:d3:
37:dd:09:e0:38:a1:dc:5c:db:ee:f4:58:f8:ff:85:
bd:0a:b2:d7:9a:22:df:58:d3:15:5d:16:94:39:88:
20:9f:91:d6:6c:86:01:68:22:5f:ce:11:1a:fd:2c:
91:b1:95:e1:88:ca:e5:f0:cb:ae:e0:69:f5:4f:75:
19:fc:c7:3c:e2:8c:af:4b:0f:bf:ec:d0:41:6a:36:
ff:1d:65:3c:fb:fc:77:d6:fe:fc:ea:27:6d:3a:07:
af:a3:a5:ea:48:48:7d:04:48:19:cf:e1:e0:58:1b:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:A4:02:9A:F5:9E:6D:17:0F:13:05:32:3D:2A:CA:9D:C8:19:3F
X509v3 Authority Key Identifier:
keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/xt6kApr1nm0XDxMFMj0qyp3IGT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.112.0/22
IPv6:
2a06:3700::/29
Signature Algorithm: sha256WithRSAEncryption
41:b8:55:31:c3:e5:1b:07:dc:7f:e1:92:75:e1:35:30:20:d7:
23:5a:4d:ba:b7:d0:39:47:87:d9:47:06:4e:78:7a:1f:c5:34:
6c:ce:b3:74:4b:3b:ce:ae:3f:43:b1:b6:3d:e4:fa:68:ce:fe:
e3:69:32:0b:31:90:b1:5f:4b:7c:8c:e7:ac:74:e0:73:42:cf:
af:5f:0a:eb:ec:dd:7f:21:55:5c:12:9e:05:17:c4:51:54:74:
8d:ec:a7:94:f2:32:c8:8e:ab:d2:79:ab:c0:22:e4:df:79:1a:
97:28:74:82:a3:68:ad:f8:35:c7:04:3a:47:66:01:4e:18:0f:
6c:a6:f6:f6:23:98:63:82:2e:02:8d:a3:23:03:47:eb:94:25:
02:19:a2:b8:a4:81:5b:64:e1:c3:83:61:ef:05:8e:e4:a3:7a:
09:bd:1f:79:8a:c8:37:00:89:e5:52:3f:83:10:9a:f4:f3:22:
95:52:f8:3d:d5:c2:6c:b6:a5:d7:77:dd:a4:4a:92:ff:ba:5c:
2d:64:52:7f:05:c8:88:6e:41:8d:2a:34:11:8e:b8:da:1f:d7:
11:f1:f3:98:3e:b2:b1:26:6e:29:d4:bd:f5:cd:99:93:07:9e:
d1:59:23:cc:d6:8b:00:8c:26:fb:31:30:1e:3f:90:1c:18:6a:
7e:fa:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:33:53 2025 by rpki-client