Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/6517Ul34Km38LTdwn9GS7oM5kvA.roa
File: 6517Ul34Km38LTdwn9GS7oM5kvA.roa (raw, json)
Hash identifier: 2blc/n32/pGpeNIIzvO1cf0QOUcqx+TRWXBVPzIg9vE=
Subject key identifier: EB:9D:7B:52:5D:F8:2A:6D:FC:2D:37:70:9F:D1:92:EE:83:39:92:F0
Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial: 37CE09A4
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/6517Ul34Km38LTdwn9GS7oM5kvA.roa
Signing time: Sun 17 Apr 2022 20:16:53 +0000
ROA not before: Sun 17 Apr 2022 20:16:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205950
IP address blocks: 109.235.245.0/24 maxlen: 32
109.235.244.0/24 maxlen: 32
109.235.246.0/24 maxlen: 32
109.235.247.0/24 maxlen: 32
2001:1b28:800::/37 maxlen: 128
2001:1b28:406::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936249764 (0x37ce09a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
Validity
Not Before: Apr 17 20:16:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb9d7b525df82a6dfc2d37709fd192ee833992f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:c6:4e:c7:76:7e:36:f1:84:ee:10:36:4d:
24:32:ab:2f:4f:9e:06:2b:89:9a:60:67:05:ae:25:
63:f1:5d:be:0b:5a:6a:ba:e1:e0:a6:84:ac:97:87:
b0:9b:57:37:4a:ca:6a:e1:1d:9f:ec:a3:70:fb:45:
e6:85:d4:c6:54:ed:d1:b8:e3:2d:0e:2f:6e:64:99:
fa:42:49:24:e9:ad:e2:eb:c1:7c:a5:74:96:aa:95:
72:5c:04:d8:c4:f8:9f:ec:9d:6f:7d:8d:fc:21:7b:
88:53:d9:c0:6c:aa:a9:27:fd:e1:53:cc:93:e7:db:
02:02:86:74:61:ea:bb:50:10:1a:1a:55:00:5d:49:
67:50:39:f2:df:c9:e0:f9:a1:8f:a8:0a:fa:d8:53:
a0:52:62:38:80:3b:4b:1e:7c:b0:93:92:9c:b6:a3:
c1:18:f4:f6:c1:1d:22:94:66:cb:b1:c9:cf:bd:55:
41:75:b9:f4:02:71:1d:53:c1:27:fd:9e:13:06:4c:
ad:1d:98:0c:4e:1a:b4:66:d6:8f:f7:9d:3d:cf:b2:
01:dd:e5:12:17:d9:2a:77:39:62:79:6a:10:93:2e:
bf:ce:68:5d:e5:ce:6b:6e:06:8f:5f:bb:f5:62:54:
70:bb:01:7b:e4:4f:48:c6:72:55:72:24:ce:2e:86:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9D:7B:52:5D:F8:2A:6D:FC:2D:37:70:9F:D1:92:EE:83:39:92:F0
X509v3 Authority Key Identifier:
keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/6517Ul34Km38LTdwn9GS7oM5kvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.244.0/22
IPv6:
2001:1b28:406::/48
2001:1b28:800::/37
Signature Algorithm: sha256WithRSAEncryption
90:f8:60:b1:16:b5:9e:d7:be:ff:5b:c8:e7:b1:c7:ea:b6:21:
66:15:d3:95:3e:4f:2a:d5:68:f8:a9:8b:a1:96:32:35:9a:99:
95:da:65:64:dd:5c:e4:1e:4f:10:8f:9b:79:f0:43:fa:b9:ed:
23:5e:db:2c:9f:3c:ed:6f:fb:b9:38:31:cc:58:75:21:86:66:
cd:4b:96:b9:f6:51:72:a6:44:75:2a:c6:37:d9:a5:3a:48:54:
06:16:b9:0c:c9:cf:11:52:1e:07:3b:eb:4f:3a:df:f3:22:ee:
b0:82:af:20:26:66:3d:d1:9e:2c:49:54:73:1b:c6:fb:7a:a8:
cc:c8:c2:96:24:45:5d:3d:3e:c8:d3:e5:7f:c2:09:3a:3f:7b:
51:a1:d4:ab:a1:9f:f8:30:d0:53:6b:09:b1:ad:a9:9a:17:86:
ef:08:d5:97:9a:59:a4:1f:24:17:f4:23:90:e8:32:52:b9:64:
2f:eb:40:82:24:f8:1c:f2:6c:61:17:0a:11:8a:b8:b1:6b:69:
b1:63:d9:34:ad:96:07:72:79:1a:a4:b9:34:6f:dc:00:cc:3c:
13:82:87:b8:78:c1:1e:30:a2:23:67:34:76:cb:e1:fd:11:6a:
e5:44:93:c9:0e:6e:f0:ae:01:e8:71:2a:5e:d3:71:95:3a:5b:
d3:0d:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:11 2025 by rpki-client