Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/6pPcOVeSHoM3ftzpht-yhgJ7ik4.roa
File: 6pPcOVeSHoM3ftzpht-yhgJ7ik4.roa (raw, json)
Hash identifier: 2RdqSbN3PrvHe6jiLuZg1JyfmaFMvZ7lYZIKGYJr0+c=
Subject key identifier: EA:93:DC:39:57:92:1E:83:37:7E:DC:E9:86:DF:B2:86:02:7B:8A:4E
Certificate issuer: /CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Certificate serial: 0183654CFFD3AE40BEBACB8F26609BB92610
Authority key identifier: 83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/6pPcOVeSHoM3ftzpht-yhgJ7ik4.roa
Signing time: Thu 22 Sep 2022 13:04:48 +0000
ROA not before: Thu 22 Sep 2022 13:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206909
IP address blocks: 185.172.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:4c:ff:d3:ae:40:be:ba:cb:8f:26:60:9b:b9:26:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Validity
Not Before: Sep 22 13:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea93dc3957921e83377edce986dfb286027b8a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:11:3b:2c:69:b6:eb:99:40:c9:b2:b4:4d:
d9:fe:27:32:e6:db:5a:52:73:d4:6d:5e:7b:90:60:
a1:f3:4c:ca:18:5a:9f:dd:5a:06:88:1a:14:4b:99:
ae:0e:49:e5:5b:ed:ad:63:6e:bb:de:31:9c:00:82:
da:ab:1b:65:53:3b:01:b8:d0:2e:4b:7d:6f:bf:bd:
48:c2:f4:0c:0d:15:63:fc:85:2f:23:78:2d:ae:54:
6a:71:26:72:02:02:b8:36:ba:9d:cb:9d:64:ea:f4:
7f:39:b3:bd:ea:cf:64:d6:b3:25:c6:71:b5:15:d2:
f6:75:b3:3f:74:97:95:ca:b8:a3:b1:bd:73:78:7e:
bd:4d:9d:e0:82:e5:48:c2:05:73:76:0a:b2:da:15:
ac:db:a1:bb:73:ce:7a:72:70:93:74:65:c6:e1:0d:
57:24:01:f9:ad:c5:b6:e1:68:6d:48:74:d1:22:46:
24:0f:c7:bc:b5:e9:1f:fc:43:e8:23:e7:eb:af:65:
2b:f7:d3:44:79:2a:eb:79:03:7f:f7:68:8b:8b:28:
a7:ef:31:90:b0:e7:61:aa:9c:97:f4:6e:b4:14:70:
bc:99:17:56:4c:86:80:20:be:4b:ad:a1:94:f4:4c:
d1:ea:79:34:0e:72:d6:70:8d:f1:b7:90:e4:03:74:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:DC:39:57:92:1E:83:37:7E:DC:E9:86:DF:B2:86:02:7B:8A:4E
X509v3 Authority Key Identifier:
keyid:83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/6pPcOVeSHoM3ftzpht-yhgJ7ik4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.104.0/23
Signature Algorithm: sha256WithRSAEncryption
82:5f:fe:d7:8f:f8:b7:5d:3d:d6:40:0d:82:ae:34:58:1d:1e:
3b:8a:82:a8:06:fc:6d:1d:0e:f5:41:65:bf:1e:dd:b8:50:39:
ea:68:ec:f5:2f:84:70:bd:10:8f:8c:26:c9:24:07:4f:ce:79:
1e:61:e9:0d:28:fc:75:20:5d:be:05:50:f3:d8:9f:d1:f4:83:
bc:a0:62:e8:07:0d:4a:da:b8:71:03:56:d9:bc:58:aa:56:ae:
d4:3f:4e:c8:e5:b1:9d:31:7e:4a:2c:45:6b:3b:f1:56:54:ef:
39:e7:d8:3c:9f:aa:36:a5:3b:8c:e2:8f:30:c1:45:71:46:4a:
ba:93:48:47:63:49:38:c2:0d:0e:ec:69:82:e4:af:33:43:8e:
f1:3e:11:aa:cd:82:71:32:2b:76:be:ab:7b:62:a2:9a:44:5a:
94:29:91:4b:9a:2d:4f:98:51:68:e8:2e:72:c4:56:fb:fa:99:
2e:98:e5:7f:79:8b:f8:5b:7f:df:c0:74:07:a3:d5:f5:34:09:
8b:71:fd:b7:56:66:b2:c7:77:dc:6f:85:37:fe:b7:b4:06:4a:
8d:ac:ff:e1:66:9d:af:06:50:48:85:11:81:c2:52:84:00:ff:
4b:76:c1:1a:92:1a:37:40:89:11:85:97:a9:26:c2:7e:20:b8:
b7:70:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:36:24 2025 by rpki-client