Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/7sJbee9nhWd-AJsH9653xUhyI_g.roa
File: 7sJbee9nhWd-AJsH9653xUhyI_g.roa (raw, json)
Hash identifier: +sJ6puYYZG7L/owc+XqEPl4u29fy3VXKbl/+sWRr6Tw=
Subject key identifier: EE:C2:5B:79:EF:67:85:67:7E:00:9B:07:F7:AE:77:C5:48:72:23:F8
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 018A1E96E6946B3F4F8E257E675F95971AA2
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/7sJbee9nhWd-AJsH9653xUhyI_g.roa
Signing time: Tue 22 Aug 2023 18:52:00 +0000
ROA not before: Tue 22 Aug 2023 18:52:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216475
IP address blocks: 185.170.10.0/24 maxlen: 24
2a0c:dd80:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:96:e6:94:6b:3f:4f:8e:25:7e:67:5f:95:97:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Aug 22 18:52:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eec25b79ef6785677e009b07f7ae77c5487223f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:48:d0:76:75:00:40:cb:a4:58:0b:72:4c:
e9:ae:2f:3e:68:77:6e:80:f2:43:95:a4:44:07:47:
c8:d5:a0:ef:7d:a8:64:15:3b:e1:04:ca:43:e0:e6:
e9:a9:a1:46:1e:b2:8f:ff:5b:5b:95:45:35:f3:ea:
02:55:f9:50:b3:42:e1:f2:0b:9d:45:53:4c:0c:e7:
a0:fd:d6:5e:1f:52:cf:96:0f:1d:78:8b:7d:79:34:
48:bd:f3:a9:44:bb:fc:22:ed:09:52:09:e4:4a:31:
50:da:bb:c2:18:d1:61:75:43:a5:f4:44:6c:16:b1:
4b:a9:2d:52:fa:d4:38:c0:15:8e:be:29:4b:ae:b8:
c4:be:4f:05:89:fe:b3:c6:20:15:b3:b6:ec:9a:a0:
5d:01:4c:9f:8e:92:6b:a3:92:3f:bb:2d:fd:10:f6:
a7:9a:bd:e4:41:0a:fa:b9:83:a9:ec:bb:55:ef:59:
09:97:c2:39:c4:bc:ca:e5:a1:62:1d:ab:6f:1f:be:
25:71:d1:49:db:41:61:cf:0e:43:56:3b:97:0c:dc:
22:b0:30:51:08:a2:1b:d2:e2:96:59:98:52:c4:7c:
ba:b4:f0:e2:7f:95:48:cc:f0:3f:55:2c:7f:57:c1:
00:90:15:76:99:e5:da:10:62:5c:f5:94:89:22:be:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:5B:79:EF:67:85:67:7E:00:9B:07:F7:AE:77:C5:48:72:23:F8
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/7sJbee9nhWd-AJsH9653xUhyI_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.10.0/24
IPv6:
2a0c:dd80:2000::/48
Signature Algorithm: sha256WithRSAEncryption
6f:24:6f:2a:a8:bd:79:59:98:bc:95:e0:08:0d:45:d4:0d:7c:
33:dc:b5:a4:43:60:94:a6:21:15:fa:24:fc:d4:70:ba:8f:87:
d4:de:1c:c8:68:50:94:34:5e:a6:81:c5:d2:f4:ef:a5:69:aa:
a7:59:05:15:1f:a0:58:5e:4a:b7:39:d6:4e:e1:32:48:aa:ea:
ab:cc:ab:27:c9:e6:b7:3a:9a:b5:f2:13:f7:58:d1:32:98:06:
46:0b:4a:8e:27:82:0c:46:28:bc:0a:c3:8e:77:b3:32:09:df:
b2:fe:31:e7:ca:ac:31:57:9e:4d:fb:36:40:7f:90:44:b6:7c:
a8:de:fc:6e:0d:59:c8:48:26:d2:e7:5b:b7:6c:a5:3a:6e:25:
eb:04:b3:b0:53:9c:ce:8a:53:d1:70:3c:d7:12:d9:94:54:78:
f4:f1:a8:63:f5:81:49:87:2b:22:f9:56:fb:6d:e3:9e:e3:ea:
f0:f0:c5:77:d1:f1:a2:75:90:11:22:16:8a:c7:76:dd:89:58:
15:db:13:91:fc:95:80:9b:5b:70:fb:fb:9e:01:7c:65:1c:5e:
a9:9c:81:57:c1:55:a7:ce:f1:82:77:db:94:a0:6e:f7:91:0e:
06:ae:a6:19:31:6b:ae:c5:d8:35:37:1c:04:a4:b4:31:3c:9b:
9f:f5:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:04:57 2025 by rpki-client