Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/6EgmJtKLONaoyH73P06qQRUJwOI.roa
File: 6EgmJtKLONaoyH73P06qQRUJwOI.roa (raw, json)
Hash identifier: p9NFppY0VLH+I5dTe+VuN9A1z3PhmDy0L+dv8mcqScc=
Subject key identifier: E8:48:26:26:D2:8B:38:D6:A8:C8:7E:F7:3F:4E:AA:41:15:09:C0:E2
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94D7FD7CFD4D4FF917D90F9ED2FB9B
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/6EgmJtKLONaoyH73P06qQRUJwOI.roa
Signing time: Sun 01 Jan 2023 23:05:03 +0000
ROA not before: Sun 01 Jan 2023 23:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 107.161.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d7:fd:7c:fd:4d:4f:f9:17:d9:0f:9e:d2:fb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8482626d28b38d6a8c87ef73f4eaa411509c0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:32:ea:7e:01:43:fb:77:6f:ba:b2:b7:55:
6d:a5:07:d7:11:01:76:0d:20:fe:68:1f:aa:d2:59:
39:e6:cf:40:b8:67:81:e2:f0:9b:a7:c0:20:90:a1:
f3:b9:25:f3:5d:ff:14:6a:c2:d3:4b:4f:d0:9a:65:
a1:d2:40:a6:2c:80:96:65:c3:c7:c0:58:c9:c5:4b:
17:7f:c3:6f:a6:65:f3:67:13:74:99:44:5e:c7:f2:
4d:c2:80:62:8a:17:ef:d5:de:93:00:44:5a:db:52:
b8:00:08:98:d9:2b:eb:f5:23:9a:44:5e:56:93:0a:
ce:87:da:fb:c2:62:d6:c2:8f:d1:86:f8:5e:40:58:
ca:d3:22:5d:cf:4c:6e:c8:90:44:71:ae:d8:d5:7a:
e3:0a:63:52:48:e4:38:78:59:fb:8b:1a:cb:59:b6:
71:8b:0c:b9:17:d6:86:37:31:64:bd:6a:36:de:2e:
f6:6d:8d:63:11:ba:d2:93:9d:f7:41:a3:b7:74:56:
f3:b9:2b:fe:4c:77:f1:d1:0c:35:06:fc:72:a2:03:
bc:b0:84:e3:39:17:e7:88:71:21:e3:91:73:31:0d:
ec:cf:6a:f6:b4:99:75:40:c1:4d:c1:93:d5:c5:ba:
cc:44:dc:9c:8c:39:ed:11:8d:40:5a:46:fe:86:e3:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:26:26:D2:8B:38:D6:A8:C8:7E:F7:3F:4E:AA:41:15:09:C0:E2
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/6EgmJtKLONaoyH73P06qQRUJwOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.163.0/24
Signature Algorithm: sha256WithRSAEncryption
93:87:ee:14:5d:1f:9e:2e:0b:14:54:60:69:23:4a:8e:be:55:
39:96:be:3b:1e:1e:bc:99:ea:c3:ca:a4:50:76:70:7b:8f:61:
7c:9a:60:58:c1:d6:09:ab:07:29:7f:c1:87:f7:66:52:67:82:
74:be:79:f1:ae:bd:4f:75:da:92:c5:91:b4:0f:82:da:c1:52:
43:c0:1e:9a:86:3e:1b:02:cb:1d:70:15:2a:21:07:79:c0:d9:
fb:f3:74:53:07:43:79:b6:61:db:01:b1:32:ab:c0:ca:7f:c8:
a1:30:f3:65:4c:f4:a2:ba:1a:af:18:38:43:9a:98:8e:b8:64:
2d:99:5f:e8:27:6d:fc:a4:ad:28:59:8a:9b:b9:9a:04:a0:01:
d6:6e:0c:35:b6:70:00:8b:ac:84:1e:bb:35:8b:2b:44:cc:2e:
85:9a:a8:f7:1d:60:57:29:7b:3b:2f:84:0f:5f:0d:2a:df:04:
53:cc:ae:4b:b9:7a:bf:40:99:b6:4d:28:25:53:9a:44:e2:0e:
bc:25:9c:3f:bb:cb:df:c7:60:c3:fe:d3:55:3c:7e:f0:a2:43:
72:db:74:e4:0b:8a:77:da:53:0d:6e:32:23:37:75:25:ae:f4:
97:3d:21:a7:13:2b:76:5c:28:e6:f3:b8:54:6b:73:62:c4:60:
c1:9e:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:27 2025 by rpki-client