Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/cc0RG6c8tA0aP39LIzsTCigyvdA.roa
File: cc0RG6c8tA0aP39LIzsTCigyvdA.roa (raw, json)
Hash identifier: IaQV9piZcMzKu/z894q4XFoy0CjM3WlckaVFdbUVvAs=
Subject key identifier: 71:CD:11:1B:A7:3C:B4:0D:1A:3F:7F:4B:23:3B:13:0A:28:32:BD:D0
Certificate issuer: /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial: 01856F5DC5BB82D5FFBA2826F4C2837B7D63
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/cc0RG6c8tA0aP39LIzsTCigyvdA.roa
Signing time: Sun 01 Jan 2023 22:04:54 +0000
ROA not before: Sun 01 Jan 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206174
IP address blocks: 193.31.221.0/24 maxlen: 24
66.84.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c5:bb:82:d5:ff:ba:28:26:f4:c2:83:7b:7d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Validity
Not Before: Jan 1 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71cd111ba73cb40d1a3f7f4b233b130a2832bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:46:6e:9e:bc:8d:11:d5:0c:6a:f6:ba:58:
1c:a0:a7:28:70:bf:6b:01:15:1a:fe:48:22:28:54:
e2:32:95:98:85:97:7f:01:a5:1b:43:ec:2c:2b:e3:
8a:86:36:2b:22:25:f0:41:a2:f6:ae:eb:1f:1d:af:
dd:77:7f:bb:07:aa:fe:ac:88:4e:0b:49:bd:58:08:
a3:75:56:7c:60:88:a8:32:03:0b:ff:f1:8a:ef:b6:
66:d2:26:d5:c2:11:ef:4f:f4:83:e1:d1:a9:5c:69:
3e:3e:f0:00:7a:12:db:89:82:9a:52:5f:09:b5:76:
46:4a:50:10:3f:41:6f:19:0c:f0:7b:d1:91:5a:97:
60:bf:d3:97:2e:b3:10:2e:b0:cf:0b:8e:70:88:e6:
f3:98:4a:c3:dd:ed:6a:47:e0:c9:ba:80:68:9c:db:
b3:9a:c6:29:5c:f6:6d:68:09:a0:90:21:1f:01:55:
14:0a:65:7a:c4:21:f2:7e:f9:e1:bd:75:e2:ec:a3:
0e:3b:41:c7:5f:5c:1c:e0:2e:f7:da:07:96:7b:84:
0a:9d:71:f4:c4:b2:84:31:ce:67:f5:e7:55:80:8f:
4e:a3:0d:e0:65:1e:1c:df:40:1b:60:bb:24:bd:4a:
eb:67:67:09:c6:37:70:82:28:31:86:76:6e:80:d7:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:11:1B:A7:3C:B4:0D:1A:3F:7F:4B:23:3B:13:0A:28:32:BD:D0
X509v3 Authority Key Identifier:
keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/cc0RG6c8tA0aP39LIzsTCigyvdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.84.72.0/24
193.31.221.0/24
Signature Algorithm: sha256WithRSAEncryption
35:fa:1d:67:ca:18:c2:81:c6:34:7d:73:cd:a4:79:b0:fd:3f:
94:a0:cf:22:b5:14:b4:58:58:e8:83:d8:04:2f:b1:44:4b:68:
83:15:f6:3c:07:26:05:32:04:b1:c6:20:0d:60:0b:c5:e6:3b:
c8:c6:6f:7f:3f:bc:05:f4:3a:ac:c0:39:37:b2:d1:ab:ad:7c:
b2:35:3e:bf:b1:9e:69:14:06:55:5e:f2:5a:38:f9:3a:85:9d:
75:b7:1d:46:3a:18:f9:94:3e:c3:d9:f5:30:00:c3:54:cb:87:
27:d8:d2:aa:a2:c7:41:73:f4:4f:30:c8:c6:c3:f0:c5:8f:77:
b2:82:27:9a:93:18:cc:04:42:db:8c:76:b1:71:97:05:de:da:
f3:7a:4c:e2:cf:fa:97:59:43:f5:91:20:5e:78:52:34:f3:17:
e5:08:0a:da:1e:f2:fe:20:f0:09:58:b3:91:e5:9f:5d:cb:cd:
65:03:92:10:91:73:c9:72:50:f0:75:b6:27:e5:e1:7d:69:b6:
b0:b3:f5:ed:7a:00:a8:94:d6:41:24:57:fc:dd:c2:85:26:90:
dc:90:4b:5d:7c:38:64:8f:df:91:37:36:7a:64:2d:64:41:ee:
9f:ba:6e:fc:2c:91:64:ad:5d:64:b3:b2:d9:df:58:40:58:fd:
03:f7:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:35 2025 by rpki-client