Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/ivTQ07t1-Vq1qoo8pTxEHCWzoGw.roa
File: ivTQ07t1-Vq1qoo8pTxEHCWzoGw.roa (raw, json)
Hash identifier: CHNzny9rmg59yr7rfe4KoWczyhuXYTmBuCh4FdRHQaI=
Subject key identifier: 8A:F4:D0:D3:BB:75:F9:5A:B5:AA:8A:3C:A5:3C:44:1C:25:B3:A0:6C
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 0A21C48B
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/ivTQ07t1-Vq1qoo8pTxEHCWzoGw.roa
Signing time: Sat 01 Jan 2022 15:05:50 +0000
ROA not before: Sat 01 Jan 2022 15:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202682
IP address blocks: 185.155.128.0/22 maxlen: 24
2a07:9444::/32 maxlen: 48
2a07:9440::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169985163 (0xa21c48b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Jan 1 15:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8af4d0d3bb75f95ab5aa8a3ca53c441c25b3a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:07:28:01:a6:b7:de:53:f6:f6:0a:39:3d:
e7:e7:de:54:a7:94:05:21:96:48:38:e5:bc:06:04:
67:2e:77:45:73:db:7f:4d:da:ae:bf:00:a9:44:dd:
ee:e2:eb:1c:07:a9:04:18:2c:c7:f0:08:1e:51:90:
b1:41:9f:c6:9e:56:8a:5a:30:5b:17:2a:f5:0c:4d:
16:c2:54:6b:0d:a0:c5:dd:3b:24:88:5a:65:4c:38:
b9:d4:33:5b:f0:1b:a0:39:a5:4d:44:73:13:ef:9d:
f1:e2:d6:6a:f5:19:71:62:3b:8b:36:88:4b:6d:10:
30:02:76:95:c0:88:a1:58:52:9f:ec:19:09:82:f7:
88:7e:5f:68:45:bd:6a:26:f3:50:3e:4c:2e:34:f0:
b5:84:be:95:f2:52:23:7c:17:cb:8f:a1:98:24:38:
9d:b4:8d:51:21:8a:14:88:8a:1e:b2:7a:49:7a:0c:
55:48:f5:d6:da:83:0c:72:d9:03:b4:ad:55:fe:43:
57:c6:15:f2:27:6f:1c:1a:ed:1b:05:5c:0e:9c:8f:
55:d1:d2:bf:af:2f:6c:a1:19:cb:93:c2:19:56:d3:
3b:e0:41:77:71:c5:2b:67:42:01:07:a2:b6:dc:98:
6f:d4:11:e1:61:78:fb:55:b1:94:70:a6:eb:17:fc:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:D0:D3:BB:75:F9:5A:B5:AA:8A:3C:A5:3C:44:1C:25:B3:A0:6C
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/ivTQ07t1-Vq1qoo8pTxEHCWzoGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.128.0/22
IPv6:
2a07:9440::/29
Signature Algorithm: sha256WithRSAEncryption
b9:e2:a7:db:f9:2a:31:19:ad:f4:90:be:01:f4:18:28:2f:13:
76:f8:4a:c8:4f:71:45:09:21:e7:a6:33:df:dd:1e:e6:77:cc:
25:65:2a:41:28:86:a3:28:7e:a3:7f:e4:1e:37:c4:12:aa:48:
ca:57:19:12:6d:e5:a9:71:6f:e1:bd:e6:68:b7:65:bd:1c:2c:
9e:5c:57:2e:ec:f7:4e:d7:f1:67:89:f1:3a:3c:d8:a7:78:95:
06:6c:30:68:6e:91:d0:a6:13:a2:a2:e7:5d:68:5d:2c:5f:83:
15:35:e7:20:27:58:fd:b6:8c:30:79:2e:56:0c:5b:99:a9:bd:
40:90:57:b0:25:f6:f2:8c:f5:91:9d:27:37:71:9a:51:85:15:
de:18:b8:d1:83:57:1b:2d:33:04:6b:cd:7c:ec:dd:15:41:7d:
e9:cc:de:c0:96:40:b9:22:4d:de:7a:c6:d9:03:18:f2:dc:78:
61:72:9f:ca:03:ee:7f:6e:c8:ec:54:e9:5d:cd:04:7e:04:3e:
3e:58:b9:9c:c5:1a:dc:b7:89:c8:1d:9a:9d:bb:c5:f4:fc:89:
63:91:6f:4d:a0:99:f3:16:7d:56:5b:0c:ef:99:1c:eb:7c:36:
21:96:3b:00:1b:aa:1c:d8:17:f0:4d:88:3d:55:60:7b:85:29:
11:f5:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:57 2025 by rpki-client