Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/6Cbow3ldO3y9S1HthCa91j-Ln5M.roa
File: 6Cbow3ldO3y9S1HthCa91j-Ln5M.roa (raw, json)
Hash identifier: KzbndXQ4JEPgcIhnZyPSA1QIC6jkSXVD075hCQLT1fU=
Subject key identifier: E8:26:E8:C3:79:5D:3B:7C:BD:4B:51:ED:84:26:BD:D6:3F:8B:9F:93
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0FE572AF
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/6Cbow3ldO3y9S1HthCa91j-Ln5M.roa
Signing time: Sat 01 Jan 2022 12:59:44 +0000
ROA not before: Sat 01 Jan 2022 12:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211218
IP address blocks: 194.28.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266695343 (0xfe572af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 12:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e826e8c3795d3b7cbd4b51ed8426bdd63f8b9f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:06:9f:7f:b3:a1:d4:f3:d4:02:36:ab:e7:
3a:76:2d:6c:f6:a2:95:63:8f:86:60:b1:6e:e4:6c:
c8:25:61:fd:c2:f5:9d:d0:bc:bd:49:b8:57:e8:b3:
ed:9c:3e:f4:30:a1:af:d8:bf:a5:7e:ae:b0:8c:3c:
06:18:e4:50:7e:05:38:dc:a9:14:4d:5a:31:00:30:
19:e6:4a:18:ae:61:ec:f1:e1:a4:95:c9:9f:1f:05:
45:5e:a1:e2:53:fd:1e:83:4b:78:a0:ac:e5:7a:58:
4b:f4:67:00:fc:54:2a:21:53:a2:7d:4d:30:58:92:
41:09:e5:1f:1f:e4:fe:51:cb:42:39:7c:9a:3c:4e:
a7:72:a8:6d:10:a1:7c:a8:d0:7e:78:5a:78:2f:6d:
8b:4f:63:56:ce:42:14:36:75:0c:ae:d5:39:81:81:
27:db:d6:2e:4d:68:89:20:23:39:82:c5:b0:66:04:
2e:4d:cd:15:64:b6:ec:b8:52:ff:11:b0:50:42:70:
a6:ca:cc:12:6f:02:3f:2e:5a:f5:b8:7a:2b:35:bf:
1c:7a:e8:f6:b2:c8:fc:c4:f2:fc:b9:13:9f:47:9f:
82:cb:cb:52:e0:b9:a1:93:59:26:1c:38:a3:7d:f6:
9b:b4:c2:38:9b:ab:69:5a:23:8c:1b:64:20:95:76:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:E8:C3:79:5D:3B:7C:BD:4B:51:ED:84:26:BD:D6:3F:8B:9F:93
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/6Cbow3ldO3y9S1HthCa91j-Ln5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.101.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3e:57:54:28:7a:5d:9e:7e:e3:e2:5d:31:d9:0e:71:7d:c1:
fc:a5:88:dd:33:dc:38:e1:f7:2d:29:2f:03:0b:f3:13:fe:ed:
ba:e3:b4:0e:cc:38:2a:61:2d:1c:f1:b5:66:94:39:5b:0c:da:
1d:74:4a:db:73:2e:f5:cb:58:d2:59:31:72:2d:4d:4e:d9:c1:
65:02:06:1e:29:07:c4:47:03:86:e6:96:3d:db:b2:bf:50:c7:
c8:47:43:f9:da:1c:69:ad:e6:c9:ce:33:a4:54:1d:1d:94:84:
75:b3:8d:c6:95:1b:d4:17:c1:c9:8c:fe:20:57:d7:5f:38:92:
40:e1:64:ad:33:ee:09:4c:87:37:95:ed:6f:f7:bf:d4:28:fe:
33:53:91:b5:fa:3d:78:92:35:69:18:26:2b:ce:c6:c4:82:d8:
8e:14:24:d1:5f:73:20:87:c5:56:9c:88:63:9f:00:28:a4:ad:
0d:51:8a:86:35:49:e5:9b:ab:6b:6c:fb:ee:08:31:cf:e0:45:
6c:60:3e:22:42:d9:4c:b6:94:05:00:d5:e2:53:31:1f:6d:4d:
92:26:03:1e:be:56:5e:f6:ce:44:28:40:e7:f0:98:00:86:92:
84:25:53:e7:31:aa:ae:c1:c0:a2:b1:4f:0f:20:c0:73:06:67:
ed:5b:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:25:47 2025 by rpki-client