Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/dUGqmIadoKdtxIQ04bLIPT4KUnY.roa
File: dUGqmIadoKdtxIQ04bLIPT4KUnY.roa (raw, json)
Hash identifier: oQN69NBiojA0u6z+DW+g7cylny53OtbhGCG4DabCu3Y=
Subject key identifier: 75:41:AA:98:86:9D:A0:A7:6D:C4:84:34:E1:B2:C8:3D:3E:0A:52:76
Certificate issuer: /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial: 018570FB98E1D0D9D90650447DF79F77FBE2
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/dUGqmIadoKdtxIQ04bLIPT4KUnY.roa
Signing time: Mon 02 Jan 2023 05:36:54 +0000
ROA not before: Mon 02 Jan 2023 05:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15693
IP address blocks: 195.191.120.0/23 maxlen: 23
46.183.248.0/21 maxlen: 21
185.29.62.0/23 maxlen: 23
185.29.60.0/24 maxlen: 24
2a01:8800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:98:e1:d0:d9:d9:06:50:44:7d:f7:9f:77:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Validity
Not Before: Jan 2 05:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7541aa98869da0a76dc48434e1b2c83d3e0a5276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:01:40:73:b9:f7:7d:cf:9e:03:ff:48:c9:
00:aa:f8:27:f4:6d:2e:0c:3e:f5:fe:f1:c8:64:dc:
a3:2b:f2:f0:95:93:bd:74:fe:c3:1a:79:a0:2e:ac:
1c:98:e9:5f:35:34:97:72:2f:23:4f:1f:e4:8b:04:
02:00:f3:2e:64:8a:d2:3e:aa:61:49:bb:51:66:a8:
26:83:e4:79:2c:88:7c:f3:b4:d8:38:21:be:13:80:
69:6e:bc:88:fa:aa:21:cf:d1:9c:02:04:42:80:53:
4d:6c:e7:05:4c:35:af:96:53:b9:cb:e6:b3:75:2e:
54:5e:96:d8:93:6c:90:b3:82:e5:88:59:24:a5:2b:
3e:eb:2f:19:0f:5b:ef:5d:17:a7:50:bd:67:ef:d9:
67:09:ec:94:82:fb:cb:fe:ab:87:87:dd:c3:94:dd:
cc:98:9c:26:08:4b:73:3f:5e:21:bd:22:9e:54:04:
f7:50:23:fe:f5:01:20:0a:db:c4:05:ba:6b:4a:f4:
aa:f1:43:f9:0a:3b:41:22:ac:95:c5:9f:7f:f1:b7:
f9:0f:8e:ba:82:63:b0:02:b4:5b:2b:f7:5b:71:31:
65:4e:50:b6:cd:d5:97:c6:a4:4a:26:88:be:2c:16:
ab:33:b0:4f:ee:0f:c6:d7:89:40:99:e7:05:2a:98:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:AA:98:86:9D:A0:A7:6D:C4:84:34:E1:B2:C8:3D:3E:0A:52:76
X509v3 Authority Key Identifier:
keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/dUGqmIadoKdtxIQ04bLIPT4KUnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.248.0/21
185.29.60.0/24
185.29.62.0/23
195.191.120.0/23
IPv6:
2a01:8800::/29
Signature Algorithm: sha256WithRSAEncryption
94:6e:b5:8b:b9:60:54:6f:51:68:11:f5:00:73:e3:39:4b:32:
ee:b4:14:37:9a:9f:9b:f0:9e:8e:4e:00:c2:5b:d8:92:ea:f6:
f4:7e:e5:f1:b8:09:91:a1:2c:b3:a4:5d:9f:ef:ae:f2:a6:d9:
93:ea:0a:0a:2c:58:e2:f7:7d:df:ed:9e:63:db:45:d4:18:5d:
bc:6e:52:e2:f0:3e:51:dd:99:90:7d:5c:39:1e:ab:ea:46:9e:
b2:a0:07:26:d0:94:18:09:68:ce:9d:15:91:54:fd:2e:72:04:
c4:8c:bf:d8:d7:8b:49:65:83:7f:fe:3f:7f:02:65:00:52:3c:
5a:40:ae:83:65:3f:38:fd:fe:ef:06:cb:44:81:0f:c9:8c:d2:
64:7b:40:3d:66:35:0a:d5:aa:59:03:4a:01:24:02:a3:b9:aa:
1b:ab:16:0c:af:55:cb:8c:6d:30:e3:0c:2a:9e:a6:88:11:2f:
83:2c:88:e3:d2:40:c1:d8:0e:d0:bf:94:ba:79:43:e3:22:b1:
a5:c9:77:ef:a4:1b:55:f5:df:e0:f5:fa:6a:70:45:4d:f3:95:
92:88:25:38:f8:eb:65:3a:98:ef:62:9b:e4:f9:27:9d:f9:3f:
bc:a8:8f:5c:52:c6:1d:a4:df:de:96:6b:ab:7d:bb:1c:bf:a3:
cb:ca:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:22 2025 by rpki-client