Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/6k3DYzynskJe7crYGptRyfvLDEM.roa
File: 6k3DYzynskJe7crYGptRyfvLDEM.roa (raw, json)
Hash identifier: gmkVv6ijYyDNg6JoNhIsuAaA9YOyM00ulMKhHjWlXpQ=
Subject key identifier: EA:4D:C3:63:3C:A7:B2:42:5E:ED:CA:D8:1A:9B:51:C9:FB:CB:0C:43
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 01856F823D8DBEFEB9D5B54E06AE02D7578A
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/6k3DYzynskJe7crYGptRyfvLDEM.roa
Signing time: Sun 01 Jan 2023 22:44:44 +0000
ROA not before: Sun 01 Jan 2023 22:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49053
IP address blocks: 185.62.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:3d:8d:be:fe:b9:d5:b5:4e:06:ae:02:d7:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jan 1 22:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea4dc3633ca7b2425eedcad81a9b51c9fbcb0c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:ec:99:60:36:8e:15:dc:3a:b2:8e:74:07:
4b:b8:4b:2a:40:b6:57:02:26:71:db:25:ae:08:a8:
2c:ac:d4:c1:37:eb:27:89:e6:1b:2c:b3:08:1d:d7:
64:77:39:41:42:77:ee:25:9e:10:1b:0e:3e:38:46:
8f:5d:e7:3f:3f:17:6e:95:6a:b2:3a:87:15:18:81:
3e:1a:b7:f4:61:80:00:c1:04:42:1a:2c:9b:0d:52:
06:6d:29:a3:fb:3e:37:c9:73:c3:33:6a:08:26:d7:
9a:f1:cc:17:d5:5d:7a:1e:15:fa:c7:2a:6d:b5:e1:
01:30:39:39:8d:f8:2a:7a:aa:5f:4c:6c:3b:e7:a8:
ee:ea:a6:dd:43:ae:fe:7b:6c:05:f9:bd:c0:e3:f4:
48:de:97:d2:8f:7e:e6:d9:3f:07:db:a6:ad:a5:86:
0d:d7:b2:e3:bb:80:89:fc:c3:8d:9a:85:07:66:54:
1d:1b:41:98:ed:1f:b7:d0:d8:df:2c:bc:56:9b:c5:
0c:2e:82:27:41:44:ee:87:eb:e1:77:e6:63:9f:64:
76:7d:be:ad:e0:d2:28:88:10:a1:b1:12:20:e9:bc:
d7:3e:34:99:0a:44:c1:52:bb:78:9f:d5:19:68:64:
4a:1b:5c:96:e8:90:45:ad:99:f2:3f:d1:6c:a7:dc:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4D:C3:63:3C:A7:B2:42:5E:ED:CA:D8:1A:9B:51:C9:FB:CB:0C:43
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/6k3DYzynskJe7crYGptRyfvLDEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ea:91:83:3d:51:13:ad:c2:6e:6f:97:ee:24:f4:b2:45:9e:
44:48:59:04:aa:84:37:0e:66:2a:4e:ea:a7:b3:19:4e:e1:10:
38:a1:e3:1e:a5:01:33:41:04:07:5b:9f:c5:71:d7:05:69:79:
17:3f:c2:7d:95:e8:3f:4b:a2:80:18:2b:05:a3:89:73:d9:49:
b8:7f:d7:45:11:ee:6c:55:f7:52:64:c5:95:60:fa:68:8d:1a:
16:fc:4e:3f:78:fb:23:a1:03:c1:de:c8:95:3c:90:7b:1b:a5:
9c:0f:40:a7:7f:63:bb:13:2c:0a:b9:7f:5d:35:35:79:17:b6:
34:c1:11:fe:3f:07:64:fb:4f:c8:05:30:10:75:c1:0c:6b:70:
2e:9b:38:11:0e:e9:20:4d:1e:db:de:a2:f3:fa:f6:91:41:a7:
0f:02:a8:8f:4c:89:ce:f6:1c:13:f4:a4:12:f1:4d:ae:50:ad:
61:b6:82:84:ef:a6:98:ec:6e:18:03:08:a5:a8:2b:54:77:53:
44:f5:6a:da:40:ba:25:58:1e:a7:3c:ae:fa:39:e3:fc:4d:c2:
b8:23:5a:02:36:02:e3:b6:4a:07:83:93:fc:eb:8b:2b:ce:ba:
dd:70:31:c5:83:ac:90:98:c9:de:c6:e0:1f:6c:84:26:e9:34:
ec:db:4d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:12 2025 by rpki-client