Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/F6l_HaImEKuDqdyuv41QB7rUO5A.roa
File: F6l_HaImEKuDqdyuv41QB7rUO5A.roa (raw, json)
Hash identifier: NcVGz/y/TJY+vQa7Itl0yp5MkG7WFUTCJVRr+m7QweI=
Subject key identifier: 17:A9:7F:1D:A2:26:10:AB:83:A9:DC:AE:BF:8D:50:07:BA:D4:3B:90
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 08FE8D5B
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/F6l_HaImEKuDqdyuv41QB7rUO5A.roa
Signing time: Sat 01 Jan 2022 12:56:37 +0000
ROA not before: Sat 01 Jan 2022 12:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35518
IP address blocks: 87.245.64.0/18 maxlen: 18
46.245.184.0/21 maxlen: 21
88.151.144.0/21 maxlen: 21
185.43.200.0/22 maxlen: 22
91.102.192.0/21 maxlen: 21
88.213.128.0/18 maxlen: 18
193.134.4.0/22 maxlen: 22
2a00:d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150900059 (0x8fe8d5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Jan 1 12:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17a97f1da22610ab83a9dcaebf8d5007bad43b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:12:70:1c:08:ac:d6:8b:1a:9d:f6:6e:a2:
93:18:23:44:56:c9:8f:75:34:60:7d:fb:f3:e0:d6:
8f:ef:76:9a:60:0f:47:5c:2d:74:c1:e2:b4:8d:1f:
ca:16:63:c6:82:45:d7:c3:5d:9f:db:80:4c:81:cb:
64:00:38:79:6b:5c:f4:af:92:17:c8:18:0b:de:0b:
dc:b1:38:0d:97:8d:fe:5f:1f:36:a4:f3:de:0b:a7:
4a:93:f0:e4:96:43:98:02:e7:19:bb:5a:d0:b1:ba:
8f:02:b6:f8:f5:12:75:58:87:20:f0:b0:62:ad:09:
46:be:86:5c:55:89:e7:b7:3d:0f:4a:fe:71:fe:c0:
83:aa:b1:d8:5d:85:7b:3d:06:1e:99:66:9d:f4:11:
00:a2:cb:76:ea:2b:bb:d2:5f:f3:15:6e:2f:42:da:
53:73:cd:e9:7d:b4:9a:08:18:e1:55:0e:af:d1:bc:
5f:82:5c:69:13:52:aa:17:03:f1:af:f8:b0:7d:07:
58:49:40:74:8f:95:a8:92:40:bd:e8:1f:6b:08:de:
f6:85:01:24:e9:13:61:37:43:e3:20:8d:9d:37:8b:
c5:4a:2d:ca:39:81:2c:e4:1f:54:38:ab:27:ce:6e:
f0:58:1e:06:e0:a7:8b:41:c1:62:fa:d9:a4:b3:c2:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:7F:1D:A2:26:10:AB:83:A9:DC:AE:BF:8D:50:07:BA:D4:3B:90
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/F6l_HaImEKuDqdyuv41QB7rUO5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.184.0/21
87.245.64.0/18
88.151.144.0/21
88.213.128.0/18
91.102.192.0/21
185.43.200.0/22
193.134.4.0/22
IPv6:
2a00:d80::/29
Signature Algorithm: sha256WithRSAEncryption
61:07:bc:90:3a:d9:82:09:ff:a7:01:f0:39:b7:01:03:62:91:
a1:55:a0:f4:19:58:2d:2e:fa:c2:96:7f:9c:df:4a:8e:fe:e9:
43:9c:64:f0:4c:6b:30:02:c6:6b:f3:97:f8:d8:04:46:db:4a:
8e:cc:17:09:b4:56:4e:da:b9:a9:60:6e:70:61:65:de:ed:b1:
4c:63:7e:9b:ff:0d:60:b2:2a:c2:66:e3:62:f2:96:fd:79:f6:
c4:51:2b:e5:ff:23:45:b9:c0:76:dc:45:1e:f6:5b:ea:8c:4b:
6f:36:48:15:1e:5c:23:6b:93:34:bd:1c:7f:c3:f8:6a:38:f1:
c2:74:09:ee:36:c8:2e:dc:b2:40:71:c5:ad:1f:7f:2a:ef:da:
2f:97:00:03:74:f7:27:34:76:67:3e:91:9c:d9:8b:4a:b2:60:
48:70:1c:f9:4c:07:5e:a7:8b:0b:a1:c9:eb:e3:b8:e8:de:47:
7f:85:0f:6a:5c:e9:7a:44:03:19:bd:e9:4c:d6:31:58:60:90:
c3:ee:1b:87:18:76:df:63:75:67:fe:a9:87:03:b9:f1:06:fe:
9c:7b:1d:22:d6:bd:a7:ee:74:38:93:a1:db:4f:11:71:c0:f1:
97:c6:6f:ae:48:28:7d:f2:84:dc:df:47:18:da:5b:44:61:6c:
3f:31:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:17 2025 by rpki-client