Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/6cdOseOEueenN68waoQq4fug9nk.roa
File: 6cdOseOEueenN68waoQq4fug9nk.roa (raw, json)
Hash identifier: cIcjGv1lE8sB6dhcO45xHbmjv9V6M7NFtVpbhhsnLfo=
Subject key identifier: E9:C7:4E:B1:E3:84:B9:E7:A7:37:AF:30:6A:84:2A:E1:FB:A0:F6:79
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 01856E265F09E640C0C103313DDFB417217B
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/6cdOseOEueenN68waoQq4fug9nk.roa
Signing time: Sun 01 Jan 2023 16:24:46 +0000
ROA not before: Sun 01 Jan 2023 16:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201789
IP address blocks: 185.54.163.0/24 maxlen: 24
185.54.162.0/24 maxlen: 24
185.54.161.0/24 maxlen: 24
185.54.160.0/24 maxlen: 24
185.241.213.0/24 maxlen: 24
185.241.214.0/24 maxlen: 24
185.119.88.0/24 maxlen: 24
185.119.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:5f:09:e6:40:c0:c1:03:31:3d:df:b4:17:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 1 16:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c74eb1e384b9e7a737af306a842ae1fba0f679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:3f:0b:86:91:12:a2:21:f5:6c:46:3a:77:
20:cb:33:d1:a0:38:b5:fe:95:36:eb:06:c5:1b:49:
a3:62:f9:b3:34:4c:b5:b7:7e:f5:5f:5d:89:d0:94:
6b:f0:2c:60:62:1f:c0:45:16:90:fe:3d:37:97:c7:
ee:d2:66:f8:ce:24:c6:ea:d1:ba:cc:9b:8d:50:c1:
f0:07:d0:b8:04:10:e5:de:f6:e4:54:0f:c0:9b:97:
ed:e7:77:00:6a:53:27:52:b9:1e:56:7e:a9:2a:5b:
32:1d:86:7a:36:63:e3:4b:ba:88:1c:6e:1e:7f:1b:
37:28:7d:97:e9:17:7f:df:8c:b5:3c:69:9c:aa:b4:
9a:5f:12:5d:e2:4f:52:25:47:22:7c:58:f2:53:12:
67:42:90:01:1f:8c:99:f4:7d:23:3e:95:e5:99:d9:
b1:14:67:bb:2a:2c:2c:ad:53:d7:87:48:4a:58:e5:
17:a7:25:4d:66:f5:b3:28:b7:cb:cc:d7:d3:bd:88:
1f:82:24:35:f9:00:8b:b4:fb:96:9e:10:2f:9b:e4:
c5:27:ee:ac:d9:ed:45:b9:9e:69:06:b3:1e:bc:ab:
58:53:ae:56:28:ae:87:a0:f5:5b:e2:ae:25:d0:ed:
3d:06:f0:e1:10:1f:9f:6e:44:16:99:36:36:b2:1b:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:4E:B1:E3:84:B9:E7:A7:37:AF:30:6A:84:2A:E1:FB:A0:F6:79
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/6cdOseOEueenN68waoQq4fug9nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.160.0/22
185.119.88.0/24
185.119.91.0/24
185.241.213.0-185.241.214.255
Signature Algorithm: sha256WithRSAEncryption
47:d3:88:88:f3:ea:58:83:3a:1b:6a:be:46:87:2f:a6:b5:82:
02:08:08:d1:c7:1f:e0:03:96:a2:df:c6:e5:60:cf:8d:b1:2b:
29:a9:57:4e:e1:21:ee:2d:26:d4:f9:22:57:10:77:03:cb:fc:
c6:f6:05:60:2a:ce:25:9d:b7:74:8e:06:41:05:b9:91:1b:c7:
69:d2:a3:25:3e:f6:f8:b9:cb:50:6e:0f:1c:6d:ce:c4:23:87:
85:a9:37:6d:a7:3a:9d:45:c5:e1:5a:2a:b3:56:16:7c:ec:27:
17:d4:c2:98:ba:51:b7:c8:db:c9:39:05:5d:13:10:a5:1d:e7:
08:d6:2f:4b:d1:d7:21:29:bf:2f:d4:f6:67:53:a9:d9:1b:6a:
83:91:1b:ff:1a:da:3c:65:dd:f4:9b:9c:e0:f7:65:29:cf:ae:
f2:04:ac:e9:6a:96:50:68:d9:64:0d:c5:d2:9a:20:d4:52:6f:
52:77:37:78:12:5c:19:4c:19:5e:67:3d:cf:7c:5d:4c:50:09:
88:ca:07:07:c0:2a:80:22:57:4f:13:20:99:d1:ba:8f:43:2c:
10:4f:56:ab:80:04:3f:7e:ed:15:dc:96:ac:23:25:35:17:43:
45:55:11:0b:6c:b2:9c:1b:12:d5:f6:3f:4a:20:98:28:fd:53:
a6:1e:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:16 2025 by rpki-client