Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/Z8fpYQ_-WciRbfprMUrvmhVDni4.roa
File: Z8fpYQ_-WciRbfprMUrvmhVDni4.roa (raw, json)
Hash identifier: eQnzSstEPTscYQOyMc+rM/N7wV3BlQUfPUK9ZppTuEE=
Subject key identifier: 67:C7:E9:61:0F:FE:59:C8:91:6D:FA:6B:31:4A:EF:9A:15:43:9E:2E
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 08100B3F
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/Z8fpYQ_-WciRbfprMUrvmhVDni4.roa
Signing time: Sat 01 Jan 2022 15:01:51 +0000
ROA not before: Sat 01 Jan 2022 15:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200428
IP address blocks: 185.151.60.0/22 maxlen: 22
2a0a:2640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135269183 (0x8100b3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Jan 1 15:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67c7e9610ffe59c8916dfa6b314aef9a15439e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:66:94:7a:3b:13:77:1c:9f:23:96:b1:55:
e1:01:79:2d:4c:ec:15:e0:08:8f:97:e7:69:d7:19:
bc:e0:dc:68:f6:e3:3b:c3:ce:e3:6a:78:fe:c0:83:
78:42:b4:cf:13:58:1d:0b:75:d4:49:f8:b5:bf:bf:
84:cf:5c:07:6d:2d:44:56:a7:77:ff:33:da:73:14:
e1:ad:34:23:b2:cf:86:5a:d7:e5:71:91:f7:34:88:
17:54:a3:41:69:00:7e:2c:13:85:08:1b:b9:d6:d1:
f6:35:3a:29:25:6d:45:d8:55:f9:f2:84:2c:06:2c:
c8:ee:6a:e4:62:28:de:dd:e2:cc:30:11:ad:d0:67:
5d:84:56:4f:80:1e:ed:dd:36:16:fc:04:0c:dd:c3:
d7:f3:4b:4b:90:30:6c:87:fb:f0:e3:ba:45:e0:1c:
31:d6:81:f2:6f:5a:fc:75:e9:09:b9:49:c3:56:9f:
ad:fa:ac:04:f1:c0:c6:1c:fd:c9:72:8e:9a:0a:fd:
b3:c2:e4:0b:67:fe:ce:96:25:5e:73:2d:79:87:85:
a4:8c:79:4c:59:bb:56:c0:e3:e3:84:a4:ec:53:4f:
ba:aa:db:e2:57:7d:ce:d2:54:3c:63:e5:b4:bf:2a:
f0:11:3e:7d:f4:cd:bd:ff:42:8a:63:ca:01:9c:20:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C7:E9:61:0F:FE:59:C8:91:6D:FA:6B:31:4A:EF:9A:15:43:9E:2E
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/Z8fpYQ_-WciRbfprMUrvmhVDni4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.60.0/22
IPv6:
2a0a:2640::/29
Signature Algorithm: sha256WithRSAEncryption
1c:e0:07:9c:35:a3:1a:7f:e9:f0:65:91:d7:2c:dd:e8:34:77:
b1:87:66:57:20:b9:10:92:18:e5:c5:bb:dc:4e:48:d4:23:8f:
8a:9b:24:60:d8:2f:97:bb:df:2e:52:f6:ba:7d:d3:44:18:06:
6a:5b:d2:9e:76:0f:55:32:35:9b:7c:87:38:01:9c:0f:99:5e:
d9:b4:ed:01:b0:17:59:dc:7d:cc:a1:45:dd:3f:9e:34:64:8a:
af:85:49:f7:da:cd:33:44:10:eb:27:4f:72:a9:15:66:e6:7d:
eb:57:35:89:e3:80:d3:a6:48:67:85:7e:63:01:67:53:dc:93:
a1:5c:91:92:f3:00:f1:fd:4f:64:b5:e6:72:3a:84:f2:40:5c:
fc:d5:58:05:f1:cd:1c:5c:31:db:0d:0d:4d:4a:da:62:95:ba:
b7:6b:a9:57:42:de:18:b7:87:b8:0d:42:1e:3a:30:6d:d8:ba:
0f:0b:99:ef:69:36:ce:ec:5e:d6:7e:84:33:65:c3:ea:91:6c:
6e:17:d4:df:0a:eb:5b:58:50:09:b7:ae:6c:4a:87:57:54:19:
02:61:8c:c9:87:02:8e:eb:2c:0c:3e:67:f4:91:23:b0:b3:29:
f6:1f:6c:49:db:9f:14:64:fa:1d:79:79:85:76:fd:7c:65:4e:
eb:de:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:22 2025 by rpki-client