Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/6S6Fesq5YT5t_7fRJ6RCSm2ba5k.roa
File: 6S6Fesq5YT5t_7fRJ6RCSm2ba5k.roa (raw, json)
Hash identifier: u/imOS5Y87FUM6D7RhzU59ICT61qJQPn075QE7xjYe8=
Subject key identifier: E9:2E:85:7A:CA:B9:61:3E:6D:FF:B7:D1:27:A4:42:4A:6D:9B:6B:99
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 01856EB8F5708BDDFFE9202005347D1FF1FA
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/6S6Fesq5YT5t_7fRJ6RCSm2ba5k.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25151
IP address blocks: 37.46.136.0/21 maxlen: 24
109.235.72.0/21 maxlen: 24
85.158.200.0/21 maxlen: 24
185.54.112.0/22 maxlen: 24
93.94.224.0/21 maxlen: 24
2a01:518::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f5:70:8b:dd:ff:e9:20:20:05:34:7d:1f:f1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e92e857acab9613e6dffb7d127a4424a6d9b6b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:f1:31:4f:1b:8e:67:2c:3d:f5:56:da:6f:
3e:87:10:aa:87:32:b9:b4:d4:82:2a:2e:4b:3b:6b:
a4:f7:77:06:ee:1d:fa:45:11:4f:87:99:ab:9f:89:
85:b9:25:ff:1d:7d:48:db:97:43:a8:4d:4c:52:10:
97:71:82:e6:05:13:ad:f4:89:d6:fd:e4:4f:34:ee:
1d:9d:ad:ab:4d:62:69:3e:43:54:a5:54:88:da:35:
56:1b:c2:75:6a:6e:41:7b:06:58:55:01:ae:4f:c0:
e2:0b:5b:f3:72:f1:0a:07:3c:53:0c:23:8c:29:6d:
de:43:d0:04:b5:e6:40:82:87:e6:4e:33:6f:17:df:
3f:7d:30:72:99:e8:3d:96:a5:fc:a6:34:44:31:08:
aa:e8:b2:05:97:96:cc:25:2f:c9:d6:8e:4e:07:0e:
3d:1d:0f:f8:65:86:50:b9:67:f5:38:8e:41:75:6d:
a1:dd:31:7e:47:04:29:62:eb:85:ab:84:7f:37:71:
aa:08:ae:0a:db:2e:51:3b:4a:e3:ae:c0:7b:36:09:
4d:51:c9:a7:82:53:93:76:d0:3f:76:32:0b:04:0c:
1d:33:10:2b:96:a6:b6:1b:37:79:af:a4:75:2d:36:
19:fe:d5:f9:71:c8:4f:5f:b2:f4:44:f7:de:e2:d1:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:85:7A:CA:B9:61:3E:6D:FF:B7:D1:27:A4:42:4A:6D:9B:6B:99
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/6S6Fesq5YT5t_7fRJ6RCSm2ba5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.136.0/21
85.158.200.0/21
93.94.224.0/21
109.235.72.0/21
185.54.112.0/22
IPv6:
2a01:518::/32
Signature Algorithm: sha256WithRSAEncryption
8f:52:89:04:67:0c:83:ec:76:f4:9c:c7:65:70:df:25:1a:f0:
66:a2:b4:a5:bb:07:f8:d8:e4:27:b2:53:26:ce:40:ef:d7:2a:
ce:88:a5:1d:9d:d8:42:fc:cf:38:19:66:e7:9c:cb:89:f0:fc:
4b:fa:a2:9c:ff:35:ea:6a:85:6b:9f:13:e7:fb:cf:62:fe:1f:
f4:d3:cd:7f:97:b7:46:59:c2:47:14:70:23:6f:6b:38:cd:7d:
53:24:e6:18:54:03:8e:95:aa:ae:fe:63:aa:e8:47:6b:b0:f4:
aa:2d:cb:a8:42:16:0f:6b:4a:91:bc:81:b0:f6:ca:bd:d5:bd:
99:e8:45:47:83:3f:36:f6:31:78:1a:a4:90:87:66:dc:d5:27:
3e:b2:b4:80:21:22:e0:52:21:d1:1f:b4:7c:d3:fb:2d:4f:86:
b0:ac:2a:12:9d:d5:2c:26:a5:9d:6b:6b:e8:d8:1f:a6:a5:77:
18:3f:2c:7c:35:72:96:5e:39:ca:c6:6d:91:23:39:3f:f0:e3:
67:01:d5:cd:fc:10:bf:c7:33:6f:c9:7a:0e:90:46:da:8e:3b:
07:31:57:6f:fb:ac:de:e6:e4:df:2c:55:1a:19:6f:0f:a7:23:
c7:c1:e1:b1:53:67:c5:4c:4e:64:45:96:d3:70:8c:11:52:89:
ff:64:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:46 2025 by rpki-client