Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/aJ7oo51mJeAbPa20s602-TZnti4.roa
File: aJ7oo51mJeAbPa20s602-TZnti4.roa (raw, json)
Hash identifier: wMA5LEM3e3aNNqx100pqkTHIrIGlUtCtbKyQfzxWo0Q=
Subject key identifier: 68:9E:E8:A3:9D:66:25:E0:1B:3D:AD:B4:B3:AD:36:F9:36:67:B6:2E
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 3DAC9600
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/aJ7oo51mJeAbPa20s602-TZnti4.roa
Signing time: Sat 01 Jan 2022 12:06:20 +0000
ROA not before: Sat 01 Jan 2022 12:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5435
IP address blocks: 185.178.225.0/24 maxlen: 24
185.178.224.0/24 maxlen: 24
212.93.224.0/19 maxlen: 19
192.160.15.0/24 maxlen: 24
2a02:23d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034720768 (0x3dac9600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Jan 1 12:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=689ee8a39d6625e01b3dadb4b3ad36f93667b62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:ae:7c:33:70:d3:1d:93:5b:ba:67:ee:52:
4f:1a:cc:5a:1c:4f:47:0d:67:5b:b3:72:0e:05:5c:
73:4e:92:f9:9d:22:16:6b:b1:5e:5a:2d:6d:b8:6f:
7e:12:4f:10:71:bf:13:47:02:61:50:91:c5:42:82:
38:40:eb:e5:b2:ee:55:14:67:58:6b:58:ae:fd:e4:
a7:48:5c:05:1a:11:b6:b8:26:0d:cb:46:3d:84:3c:
a1:02:b3:e2:d6:d0:fa:50:21:5c:71:f3:b4:fc:56:
a1:cf:5c:37:30:e6:24:b7:c3:d6:25:b4:f7:69:32:
a8:7d:c1:7c:9d:8e:eb:b4:fb:eb:93:08:f1:d4:60:
3a:51:63:8f:fc:48:11:97:a1:01:83:9f:c0:db:0e:
37:6e:bc:5c:0b:4c:bf:3b:c6:5f:25:96:76:b0:4c:
19:e6:e7:52:2c:a4:75:53:2a:84:04:47:2d:6e:c8:
cd:69:60:81:43:f6:b2:3e:b3:42:a1:8d:c9:94:06:
7e:97:4d:10:d4:97:d9:91:e4:43:bd:e8:3e:72:41:
d9:fe:86:f5:35:53:9b:d9:4c:99:a2:d2:0a:82:a8:
00:29:35:41:4b:19:1f:8a:63:24:5a:18:6e:82:2c:
b2:b1:f1:4c:69:d8:5d:3b:61:30:0f:a0:fc:fb:b3:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:E8:A3:9D:66:25:E0:1B:3D:AD:B4:B3:AD:36:F9:36:67:B6:2E
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/aJ7oo51mJeAbPa20s602-TZnti4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.224.0/23
192.160.15.0/24
212.93.224.0/19
IPv6:
2a02:23d0::/32
Signature Algorithm: sha256WithRSAEncryption
16:d5:83:92:20:91:ef:17:6b:3a:f5:ea:78:fd:91:35:5c:7d:
18:08:17:e1:80:57:f9:a3:57:dc:de:cd:4a:06:74:56:a2:9f:
e5:6d:9e:73:c3:5e:f9:4d:1e:fc:93:8f:b9:a8:08:08:e9:fe:
eb:25:c3:44:c0:44:8c:7f:a7:13:26:3a:10:69:0c:1e:6e:48:
f2:c1:40:66:b3:29:50:4d:3b:f7:31:23:c2:ae:74:a4:86:3a:
c5:6f:b8:a7:92:5c:6b:15:15:bf:54:1f:7c:81:91:d0:42:bf:
4d:2a:aa:4e:77:b0:ee:0e:66:54:5f:51:20:c7:6b:0c:68:b3:
f2:37:1d:44:3a:80:1e:25:8d:b8:00:dc:53:b4:89:21:0c:30:
de:1d:f8:7f:3f:45:cd:d1:0a:0a:2d:28:dd:da:79:cf:56:03:
9b:73:8d:77:73:b4:61:4a:55:ee:1a:41:d5:a7:58:77:c2:c8:
5e:e7:96:f8:10:83:eb:62:26:1f:8d:44:b6:99:74:51:d8:2d:
9c:d8:7a:42:bc:aa:f3:f9:6b:ce:30:79:70:50:65:3f:b8:97:
47:d4:99:35:e0:6a:97:22:82:73:40:eb:b8:32:a9:b7:6c:40:
a7:8d:52:8a:40:b6:32:47:bb:30:55:62:08:8f:89:18:95:e0:
9d:8d:2d:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:03 2025 by rpki-client