Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/6ReH9o5yxdn-DlDuj3FdiTObLnE.roa
File: 6ReH9o5yxdn-DlDuj3FdiTObLnE.roa (raw, json)
Hash identifier: gbq+fmVkD3FgD2LGesKSXwxG/9NMwzAtEnoM5EDst54=
Subject key identifier: E9:17:87:F6:8E:72:C5:D9:FE:0E:50:EE:8F:71:5D:89:33:9B:2E:71
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 0186549C45F4B6429834299D3474B026751F
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/6ReH9o5yxdn-DlDuj3FdiTObLnE.roa
Signing time: Wed 15 Feb 2023 10:26:13 +0000
ROA not before: Wed 15 Feb 2023 10:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25111
IP address blocks: 193.0.57.0/24 maxlen: 24
193.0.56.0/24 maxlen: 24
193.0.59.0/24 maxlen: 24
2001:67c:184::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:9c:45:f4:b6:42:98:34:29:9d:34:74:b0:26:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Feb 15 10:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e91787f68e72c5d9fe0e50ee8f715d89339b2e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:7b:eb:98:5e:00:28:bf:e2:71:f8:5d:46:
f4:fd:97:b1:ec:0c:48:01:d9:f5:1e:75:fd:30:27:
58:ab:06:93:1b:82:01:f6:dc:31:b0:ce:23:5f:21:
a9:3b:9e:3a:e7:ee:93:20:93:82:9c:cf:c0:5b:44:
28:dd:5c:86:62:e3:2a:f3:d0:f3:3d:88:0e:59:7c:
7d:8b:ef:19:e6:2f:9e:2f:a7:1d:57:0d:a5:3d:4c:
90:dd:2e:0b:3b:ad:fc:82:9c:c6:6a:7d:77:a6:fe:
6f:5e:af:54:51:55:15:4b:5f:a8:5f:56:98:b0:9a:
81:90:62:21:1d:b2:5c:49:65:4b:fc:47:42:3d:d2:
04:f6:35:5b:92:28:e1:0d:4f:35:6b:ba:68:4f:0b:
84:cc:3f:29:39:ad:58:c4:bb:e4:02:01:0a:c1:76:
c6:94:4e:6b:39:82:8f:69:e0:68:62:07:49:b9:31:
f7:45:25:9c:30:34:28:4a:63:b2:92:30:94:25:e1:
15:97:b2:e3:62:97:ef:6c:37:b1:4f:b5:38:c0:07:
af:d2:79:c0:81:05:67:50:39:5f:d6:7f:0d:a1:6e:
19:b5:a0:ed:44:57:c9:ab:7b:44:ab:8c:e4:3e:27:
f9:6d:8b:dc:6c:12:21:8d:87:f5:8f:68:a5:97:45:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:87:F6:8E:72:C5:D9:FE:0E:50:EE:8F:71:5D:89:33:9B:2E:71
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/6ReH9o5yxdn-DlDuj3FdiTObLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.56.0/23
193.0.59.0/24
IPv6:
2001:67c:184::/48
Signature Algorithm: sha256WithRSAEncryption
2d:bb:d1:72:c8:41:40:2f:d3:c2:76:e0:02:35:00:b3:ed:1d:
df:52:24:2b:0a:6d:b3:9a:dc:ec:9e:f1:f8:06:18:02:02:1a:
f2:26:22:c7:24:28:4e:83:6a:5a:bb:90:db:53:19:dd:d4:c0:
20:5c:fc:25:07:33:50:53:9b:89:b0:20:8f:c0:9f:43:c1:8a:
da:fb:ff:9f:ec:a5:06:1e:19:ac:6c:27:94:97:d7:f1:69:6d:
cb:bf:e5:6e:7e:13:25:90:9d:95:e2:a0:bf:0c:8c:19:d9:d6:
ae:ee:94:b6:c9:b0:09:95:5b:d0:66:2a:38:c4:c1:a4:75:b4:
a9:04:34:4c:ca:d0:0e:46:cd:8c:ac:71:0e:9b:a8:4e:2a:73:
40:4d:89:b9:0c:76:47:6f:70:bb:ee:00:9b:83:71:df:c8:d6:
04:5e:9c:52:75:75:a4:3b:8f:72:a4:36:3a:b6:cd:0f:41:d0:
c1:3c:ce:31:bb:17:ab:60:a7:06:35:0e:20:0b:13:74:2d:b7:
63:94:6c:41:08:4c:c0:a8:05:55:f9:41:94:67:a3:a8:2a:c1:
ab:e6:a3:41:39:43:b5:91:9f:02:a6:56:c0:2d:8a:48:5e:db:
a1:ce:ef:7b:5c:49:5e:e0:93:5e:a3:1d:7b:b8:2c:b0:8b:47:
95:1d:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:22 2025 by rpki-client