Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/7vvpQDacZAOl_g0xcGF2rMEPuAM.roa
File: 7vvpQDacZAOl_g0xcGF2rMEPuAM.roa (raw, json)
Hash identifier: uW/9BpR9dxM00EXoZiryOrSEspGS05FZ0K+6ZYaxJ5s=
Subject key identifier: EE:FB:E9:40:36:9C:64:03:A5:FE:0D:31:70:61:76:AC:C1:0F:B8:03
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 018A210748CFC927C06E42A5E74723B40D0B
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/7vvpQDacZAOl_g0xcGF2rMEPuAM.roa
Signing time: Wed 23 Aug 2023 06:14:00 +0000
ROA not before: Wed 23 Aug 2023 06:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216475
IP address blocks: 185.170.10.0/24 maxlen: 24
2a0c:dd80:2000::/48 maxlen: 48
2a0c:dd80:3000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:07:48:cf:c9:27:c0:6e:42:a5:e7:47:23:b4:0d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Aug 23 06:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eefbe940369c6403a5fe0d31706176acc10fb803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:a5:92:06:7b:92:15:aa:64:93:69:fc:69:
45:6f:d4:95:c7:47:02:54:2a:e4:14:00:13:06:b4:
25:f6:47:6b:e6:a1:a6:17:2b:d5:1b:17:cd:ed:cd:
35:ef:1b:8b:ae:ab:63:b8:fa:7f:ee:45:2b:d0:4f:
55:47:fd:7b:ad:d4:25:58:27:3a:16:26:8a:1a:f8:
45:85:10:f0:1a:d4:c8:81:91:a4:c6:d3:e9:33:c9:
69:a7:d1:5e:a7:54:eb:a2:13:7b:92:d5:33:70:43:
47:f7:98:cd:93:cf:85:68:80:4f:7e:69:83:65:cd:
2d:6c:1e:88:37:41:bb:b2:f8:3b:df:e0:e7:43:95:
45:b2:3e:7b:e4:ba:1e:7d:1d:fa:c7:7e:a2:75:75:
67:a3:75:e1:c9:7a:27:00:b5:51:0f:94:b6:aa:55:
52:bc:7d:6a:c0:45:91:cb:0b:d6:f5:ef:f7:40:85:
6e:8d:fe:c2:a4:99:41:2c:7a:a1:81:7a:40:74:03:
a7:a0:cf:2a:9c:a6:a8:1f:ce:f5:db:d9:b4:09:d1:
6a:8e:35:98:24:83:03:bf:69:a3:12:cb:ac:b3:4a:
f2:37:d6:ca:f3:f9:ae:01:76:7d:7f:d3:02:de:49:
14:9b:ea:09:e2:62:61:c6:a4:2e:68:df:a4:f5:9e:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FB:E9:40:36:9C:64:03:A5:FE:0D:31:70:61:76:AC:C1:0F:B8:03
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/7vvpQDacZAOl_g0xcGF2rMEPuAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.10.0/24
IPv6:
2a0c:dd80:2000::/48
2a0c:dd80:3000::/48
Signature Algorithm: sha256WithRSAEncryption
2c:71:7c:c0:80:7e:d5:a6:50:82:33:32:e1:78:f8:02:f0:9b:
88:d4:e0:6d:1f:27:57:18:47:3a:f0:a2:a2:ad:51:8b:15:c1:
84:ab:40:8d:c8:51:4d:2e:a0:ba:03:ec:ea:f0:47:0c:cf:1c:
3f:a0:8a:5e:cf:b2:e6:42:8e:47:1e:46:59:ed:f9:ce:01:e6:
55:fc:6f:ac:f8:2f:07:51:41:4b:48:7b:7c:b9:30:c2:e4:b4:
68:ec:22:6a:bc:58:3d:96:43:a8:d8:9b:b7:fd:43:e8:35:93:
96:68:ef:9c:70:3d:07:0f:de:90:67:b2:62:16:1f:f5:2b:ed:
5c:64:86:85:bb:33:bf:d1:49:33:34:c6:06:73:4b:f4:62:ad:
13:98:c4:10:21:7c:8c:76:7e:4d:23:28:f1:b6:a8:f5:3e:89:
6f:c9:88:e8:d9:ba:00:43:25:33:ad:97:14:04:d4:d8:ba:dd:
2c:92:0f:b2:65:fc:f6:5a:fc:53:26:ad:fb:04:8e:44:e6:b2:
4e:02:62:cd:3c:1b:bb:59:32:2b:04:a1:b0:13:17:ac:32:e4:
f4:60:d7:75:ac:9d:ea:a3:65:f4:c7:59:07:bc:43:aa:57:5d:
a8:f4:cc:06:e0:ff:11:bd:7b:99:f0:8b:6c:43:63:58:ed:33:
f3:18:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:02:24 2025 by rpki-client