Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/6WsTwMlrBCBiK3VVVxib1cbjBQI.roa
File: 6WsTwMlrBCBiK3VVVxib1cbjBQI.roa (raw, json)
Hash identifier: AFDk18DEmJ8Rd8lm7SjR+JYGohef9x/zv4+vWqoPELU=
Subject key identifier: E9:6B:13:C0:C9:6B:04:20:62:2B:75:55:57:18:9B:D5:C6:E3:05:02
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 0A8977D4
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/6WsTwMlrBCBiK3VVVxib1cbjBQI.roa
Signing time: Sat 01 Jan 2022 02:01:27 +0000
ROA not before: Sat 01 Jan 2022 02:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15945
IP address blocks: 213.206.160.0/19 maxlen: 19
77.72.216.0/21 maxlen: 22
193.31.52.0/22 maxlen: 24
213.183.64.0/19 maxlen: 24
2a02:24d8:ffff::/48 maxlen: 48
2a02:24d8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176781268 (0xa8977d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 02:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e96b13c0c96b0420622b755557189bd5c6e30502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:07:a5:fc:85:2e:1f:29:7e:9c:15:39:74:
70:6b:6d:3c:f9:6b:12:d0:d1:8c:8f:f0:99:38:64:
94:b8:4d:4f:a6:c7:06:25:9f:13:8a:98:60:4a:ad:
2c:f7:c7:84:30:ba:7d:eb:33:61:7d:33:e6:a1:7c:
c1:77:bc:00:c3:85:25:6b:4d:1a:bf:bd:9f:14:f6:
28:23:ee:ec:cb:47:8d:83:f4:4b:21:f7:25:05:cf:
0e:f5:84:8d:79:6a:da:1d:9f:38:be:89:e8:26:a1:
6d:84:30:c8:a9:bd:de:98:ec:33:7b:61:b3:da:21:
bd:eb:a8:48:e5:4d:4b:f4:af:be:3c:91:8e:1b:55:
8c:71:46:bf:f3:ae:df:87:2e:84:7c:88:31:c3:0e:
5b:68:31:91:69:76:79:27:2c:8f:80:84:13:24:d8:
83:c9:5e:4c:5e:a1:e1:08:80:1a:5b:06:e0:e4:d9:
f1:0f:18:f7:9f:39:32:a1:99:dc:ea:b2:8c:f5:9f:
be:a0:b2:74:32:41:8c:d4:90:ad:05:94:4d:23:6f:
09:38:8f:9b:8f:25:bd:57:10:33:6d:c7:59:b3:ce:
db:e6:11:d8:21:85:4a:e4:59:1f:33:94:cd:fc:fb:
e9:27:dd:a7:4a:70:99:51:49:e9:9e:23:39:c7:ae:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:13:C0:C9:6B:04:20:62:2B:75:55:57:18:9B:D5:C6:E3:05:02
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/6WsTwMlrBCBiK3VVVxib1cbjBQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.216.0/21
193.31.52.0/22
213.183.64.0/19
213.206.160.0/19
IPv6:
2a02:24d8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:ed:57:94:83:f4:b3:cd:ce:33:19:cb:25:16:02:f5:a7:e0:
23:b2:55:80:f2:3f:38:e7:9a:fe:e3:90:88:42:83:96:f6:10:
68:8c:8f:6b:28:88:22:e7:0a:48:9d:28:f1:76:52:2f:cb:c0:
f9:82:98:90:46:a0:38:08:67:42:0e:0e:73:d2:a2:35:08:02:
9f:81:bb:36:32:3c:ef:64:cf:c4:e8:67:1e:eb:e4:cf:d8:c6:
ed:6c:88:ff:03:14:7a:c2:3a:06:8c:fe:dd:1c:35:a7:7a:98:
9b:85:90:20:b9:25:02:0e:b1:ab:c4:b3:89:3c:ec:1a:f4:c9:
f1:93:b5:d2:be:73:03:d2:04:90:6f:ea:e6:4a:3e:61:c6:61:
fc:03:52:5b:95:1b:3b:35:6c:a9:74:b8:aa:b5:5d:3c:94:16:
d7:43:27:a5:df:3a:1d:12:ae:35:7d:dc:52:4f:37:3e:53:bb:
2c:b2:16:0d:65:7b:63:6f:5e:11:82:e8:2a:d7:d2:8b:51:04:
c1:04:6e:0f:37:d7:36:ba:d6:ad:2e:d9:6f:9b:3f:43:63:ff:
82:20:f4:e2:f5:e7:a7:04:10:74:bf:0f:76:d2:3e:50:33:4b:
32:fc:88:fd:21:a1:0e:e6:93:d5:ea:ad:98:bd:04:e6:bc:b1:
ea:8c:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:44 2025 by rpki-client