Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/6ckiwtQHcAbTvdGLNBFLwD5h0jg.roa
File: 6ckiwtQHcAbTvdGLNBFLwD5h0jg.roa (raw, json)
Hash identifier: UaQ6O5uQ8f4qpDgsquomXDeEReB7jG4mCO6ZI+OtEy0=
Subject key identifier: E9:C9:22:C2:D4:07:70:06:D3:BD:D1:8B:34:11:4B:C0:3E:61:D2:38
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0186DDB07445733D4C4DBE6B7D5F56513BFC
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/6ckiwtQHcAbTvdGLNBFLwD5h0jg.roa
Signing time: Tue 14 Mar 2023 01:16:14 +0000
ROA not before: Tue 14 Mar 2023 01:16:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 85.94.226.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dd:b0:74:45:73:3d:4c:4d:be:6b:7d:5f:56:51:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Mar 14 01:16:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c922c2d4077006d3bdd18b34114bc03e61d238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:9f:22:c1:ec:4a:be:d8:70:13:c4:06:2a:
ee:28:c6:2a:91:d4:7f:4f:d0:01:8f:46:4d:bf:a6:
e7:72:a7:0e:7b:7c:87:69:5f:3b:74:72:e3:5f:e2:
46:fa:80:f0:d4:08:41:f1:4c:cf:96:70:9e:f5:f2:
af:8b:94:67:aa:e0:53:3a:a3:1e:8a:07:bd:d6:f7:
fc:da:84:55:3a:51:12:84:98:a9:35:14:d7:c2:cc:
0c:ca:74:ee:df:50:45:cb:e0:af:de:94:07:93:65:
59:9c:fd:6c:0d:16:44:d2:39:79:6b:d7:84:3e:4c:
a9:42:a0:8b:fe:5a:f5:b5:44:02:55:09:98:dd:33:
a5:da:85:67:b1:96:64:2b:2f:66:8b:58:bc:ae:c9:
55:aa:4b:a6:f5:5b:e1:aa:8c:29:43:48:b4:5e:aa:
d5:ee:6c:4e:9e:b2:17:69:8a:e9:e0:dc:5e:6c:ff:
ef:84:eb:f9:24:06:03:bd:ac:0b:2e:65:da:67:02:
9a:6a:88:24:93:93:7a:3c:96:5a:e1:84:c0:dc:df:
6b:d3:85:cc:8e:2d:24:45:d0:89:9c:0d:19:56:92:
f1:4d:3b:c2:fc:9b:8c:66:e0:02:ff:0c:c1:73:b2:
06:64:86:52:2d:bb:74:9f:61:6d:b0:3e:df:68:6e:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C9:22:C2:D4:07:70:06:D3:BD:D1:8B:34:11:4B:C0:3E:61:D2:38
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/6ckiwtQHcAbTvdGLNBFLwD5h0jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.226.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:d9:17:1e:2f:1e:12:a2:e6:25:11:0c:4e:39:00:ad:c5:ca:
94:93:aa:47:e1:b9:aa:f4:70:1a:ce:a4:7b:3e:50:cb:28:b0:
f0:cc:04:0f:64:3a:12:ee:1f:78:89:c3:05:46:6b:03:9c:d5:
2c:e1:5c:b9:1b:c1:bb:27:75:6c:d6:51:1c:7c:39:3f:f1:8c:
55:5b:6c:e8:e6:be:0c:2f:05:5a:7a:19:86:a3:b2:15:3d:12:
39:ad:0d:44:ae:08:cb:85:ab:58:e7:08:20:4b:2e:cf:e4:aa:
9a:30:07:ce:6f:a1:8c:f8:58:60:27:e6:45:be:7b:37:b0:13:
1c:d5:8d:28:70:41:e3:aa:fb:67:97:42:b6:3c:45:ee:e9:fa:
60:1f:f5:19:76:a9:ef:2f:2e:e9:56:2f:b6:61:a6:fe:6e:cd:
1e:45:6f:40:6c:e0:72:9e:d9:95:5c:83:ec:67:2f:ce:cc:aa:
20:44:e0:91:f0:87:d2:5e:46:07:eb:01:6d:75:31:23:b9:b4:
2a:aa:62:39:c7:bf:ea:05:1e:ca:ab:a5:a6:3c:1c:6e:1b:ed:
22:3c:be:76:a2:69:8a:a7:8e:89:47:25:d1:b6:de:d8:ed:f2:
94:06:24:82:a5:2b:27:8c:c4:f4:02:b4:bd:6d:48:c3:1c:96:
57:dc:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:02:41 2025 by rpki-client