Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/b969mYCzUiF8J38dp96b0F5WQZo.roa
File: b969mYCzUiF8J38dp96b0F5WQZo.roa (raw, json)
Hash identifier: dMat3Hf6Vy7OFfZITCzji0KdReWnJgSilfgfilDoeFs=
Subject key identifier: 6F:DE:BD:99:80:B3:52:21:7C:27:7F:1D:A7:DE:9B:D0:5E:56:41:9A
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 0B24DAB4
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/b969mYCzUiF8J38dp96b0F5WQZo.roa
Signing time: Sat 01 Jan 2022 03:55:35 +0000
ROA not before: Sat 01 Jan 2022 03:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202409
IP address blocks: 185.1.166.0/23 maxlen: 32
2001:7f8:f2::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186964660 (0xb24dab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Jan 1 03:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fdebd9980b352217c277f1da7de9bd05e56419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:4c:f1:09:5d:e3:2f:6c:a5:f7:01:ea:45:
9a:39:40:ee:51:54:92:9a:26:17:0f:65:4a:a0:98:
1e:c5:e6:a6:3f:41:a8:f9:24:b5:cc:fd:4e:3a:b8:
c3:56:34:46:c1:93:a1:fd:28:98:77:4c:d5:97:39:
04:8c:e6:71:0e:ac:ce:12:63:10:a4:c1:22:4e:85:
86:88:49:d5:97:f9:d1:25:3b:eb:a9:2a:36:c9:d5:
f8:95:87:8c:98:ee:8a:46:3a:be:a0:46:64:eb:53:
c1:ae:66:3a:6e:02:03:e6:0b:41:ce:66:ff:f9:0a:
d9:47:c6:39:d2:33:51:e7:9d:bb:1b:79:56:65:dc:
c2:80:ab:55:a3:44:be:ed:80:3b:ca:f8:1c:e9:72:
f2:01:31:80:0d:f5:2d:d3:d0:44:84:fd:9c:d4:54:
c6:14:ad:b2:e6:87:ba:fc:06:28:a4:ff:7a:c4:a8:
de:1d:76:92:9e:b3:1d:0f:41:93:a5:d1:a7:bc:d4:
7e:48:b8:7d:a4:5d:fb:8b:e5:c8:8f:2d:ee:d5:90:
61:0b:b5:6f:1b:13:6c:0c:b8:77:0d:52:58:48:e2:
c7:18:fa:a8:38:29:ca:08:80:e6:6d:ae:13:9b:32:
1f:13:67:19:fb:89:52:58:cd:85:ef:dc:52:ac:c7:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DE:BD:99:80:B3:52:21:7C:27:7F:1D:A7:DE:9B:D0:5E:56:41:9A
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/b969mYCzUiF8J38dp96b0F5WQZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.166.0/23
IPv6:
2001:7f8:f2::/48
Signature Algorithm: sha256WithRSAEncryption
6e:24:82:7a:b2:bd:13:e2:65:e1:60:19:3c:f4:0d:1d:99:2f:
cf:54:a2:42:d2:81:e6:59:51:25:9b:41:85:14:b4:09:b1:f0:
a7:e3:c5:04:5d:ff:7c:2e:f5:0b:3a:89:75:9e:87:2d:89:a2:
11:a8:11:af:f9:2d:6b:b1:e0:60:c3:ed:e5:7e:e7:78:d8:32:
36:dc:37:45:9e:b5:6d:a2:e3:98:04:69:d7:57:b9:68:e5:3d:
bf:4a:02:19:a4:93:2e:41:fe:4b:11:ad:f2:ee:82:36:dc:0f:
3f:2e:12:3e:2d:17:0a:e1:49:8e:74:df:86:9b:f5:9a:1c:18:
85:a5:5b:bd:0c:13:8d:3a:68:40:22:ba:04:96:50:c1:a8:00:
15:65:d3:c6:c0:12:b1:be:f5:68:fd:e8:4e:6e:92:6a:ce:5e:
30:cd:60:f0:82:00:30:32:5b:18:13:4c:95:e3:32:1a:3f:7c:
f8:e0:2f:05:5d:50:93:c1:e5:2e:b7:61:3b:55:c0:17:3f:f4:
13:93:e9:45:81:88:8b:2d:23:35:c7:aa:6c:ed:dd:23:2e:f1:
77:b1:82:bb:49:ff:1c:51:4d:df:f3:6f:c2:d0:b1:48:06:a2:
ac:7c:bd:83:95:d1:26:47:8b:91:b1:a2:c6:af:37:a4:56:0c:
cd:34:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:22:32 2025 by rpki-client