Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/m8xuxZ1CH_6pz7RFVv8kQqfu0PM.roa
File: m8xuxZ1CH_6pz7RFVv8kQqfu0PM.roa (raw, json)
Hash identifier: pR3GlemQPymZdZyXbRuBeXHKSRwMpjNVFR5W5vds3/4=
Subject key identifier: 9B:CC:6E:C5:9D:42:1F:FE:A9:CF:B4:45:56:FF:24:42:A7:EE:D0:F3
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 01856C4A77752AA35963234B17769B3FBA41
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/m8xuxZ1CH_6pz7RFVv8kQqfu0PM.roa
Signing time: Sun 01 Jan 2023 07:44:57 +0000
ROA not before: Sun 01 Jan 2023 07:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44066
IP address blocks: 185.15.8.0/22 maxlen: 22
2a02:fb00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:77:75:2a:a3:59:63:23:4b:17:76:9b:3f:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Jan 1 07:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bcc6ec59d421ffea9cfb44556ff2442a7eed0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:5b:6e:7e:a7:f3:41:ec:d8:99:b7:0e:9d:
1c:1e:a9:3a:f9:21:b0:83:29:cd:92:96:a9:92:83:
b8:68:0c:84:54:e0:42:a3:ca:26:c9:e0:7f:a8:a6:
38:7d:46:47:10:14:5d:48:4e:0c:80:f7:94:88:4e:
2b:7f:cf:02:a0:1c:11:87:5e:fb:be:3e:3b:fc:16:
ab:33:1f:eb:1a:0b:7a:1f:a7:58:96:8e:d1:58:57:
b7:89:e1:91:54:95:5a:df:a8:8c:3a:ab:ad:19:d8:
a6:6f:c3:4f:66:a9:c4:fb:7a:5f:a1:91:82:56:84:
21:e1:87:4e:a8:c9:a8:94:03:00:6b:02:49:ed:cc:
0d:16:fe:b2:a8:df:05:d5:28:9f:fb:ab:73:ef:ab:
58:62:74:05:d1:11:7a:e0:85:6b:74:e8:78:f4:c6:
50:a5:27:1c:19:1d:df:e7:4d:27:13:23:dc:7b:2e:
c9:ad:d7:40:7b:49:19:0d:e7:5a:0e:af:80:ff:51:
c2:65:87:ff:b2:b1:67:db:02:03:c5:90:7b:97:c2:
38:86:88:89:5c:0f:e0:52:11:41:eb:5a:e5:21:36:
d1:22:28:74:47:61:c9:4f:68:c8:40:d2:59:3f:db:
95:97:5f:9e:37:15:d6:7c:00:e7:7a:10:59:3c:9d:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:6E:C5:9D:42:1F:FE:A9:CF:B4:45:56:FF:24:42:A7:EE:D0:F3
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/m8xuxZ1CH_6pz7RFVv8kQqfu0PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.8.0/22
IPv6:
2a02:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
57:c3:8a:af:86:db:0f:d9:72:6b:f2:26:dd:33:31:28:36:b4:
2c:aa:5e:5f:4c:8b:89:14:bf:d0:4b:a8:13:f1:f8:13:14:ff:
0a:94:c5:e1:ea:14:44:ae:88:c8:24:e2:9f:6f:49:be:32:b0:
4d:ba:83:71:b1:b3:26:d9:71:63:d3:3d:0b:e1:46:cd:65:85:
f0:de:dd:cf:1a:29:76:72:92:40:3e:3c:6b:79:2c:86:e5:1e:
a0:ff:a9:6d:a2:d9:d2:bb:df:21:88:54:0c:4f:bd:45:85:92:
14:02:47:d1:b5:61:77:b0:4d:c9:aa:b1:ce:1b:4a:e1:12:c6:
fc:d1:7b:29:d2:d7:f2:87:ca:0e:5a:9a:af:85:ed:2e:c7:32:
08:2b:98:3d:d4:fa:57:d2:23:6a:7f:65:04:73:c8:ee:35:7c:
69:ad:b3:62:d1:e0:37:9a:ae:9b:9b:c9:9c:30:6d:8a:36:6e:
44:a8:ad:f8:98:4f:48:43:f8:04:6f:c9:1e:c4:1e:57:bc:85:
03:81:a5:2f:e5:5f:34:b9:65:d2:85:dc:96:3b:b8:d1:04:60:
eb:74:8f:e6:75:2c:92:f8:7c:dc:1c:81:4b:dd:84:bf:c4:2d:
a0:4b:42:5e:e6:1a:95:82:bd:b7:f8:96:53:11:31:e8:0c:54:
fe:87:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:58 2025 by rpki-client