Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/6CPSKrKvVTGHAeItV0j6udisaFY.roa
File: 6CPSKrKvVTGHAeItV0j6udisaFY.roa (raw, json)
Hash identifier: Y0ZotDWWUvPD1ngFkPuWbxDAP8rnABGacf2Tu6qj+z8=
Subject key identifier: E8:23:D2:2A:B2:AF:55:31:87:01:E2:2D:57:48:FA:B9:D8:AC:68:56
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 341392DB
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/6CPSKrKvVTGHAeItV0j6udisaFY.roa
Signing time: Tue 18 Jan 2022 06:30:00 +0000
ROA not before: Tue 18 Jan 2022 06:30:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210594
IP address blocks: 95.183.206.0/24 maxlen: 24
95.183.206.0/23 maxlen: 23
95.183.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873698011 (0x341392db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 18 06:30:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e823d22ab2af55318701e22d5748fab9d8ac6856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:79:66:2e:2a:71:d9:f9:ab:2b:f2:b6:94:
c5:54:4e:42:09:88:b2:4d:aa:2d:8b:7d:81:a8:23:
35:e3:25:91:6c:e8:8a:8f:3a:b7:5d:ee:58:43:5f:
12:ef:3c:7c:e5:1b:4d:42:39:b1:4a:ea:08:9e:5c:
57:98:39:e3:f2:bd:a0:12:59:29:5f:4d:97:8a:a8:
c1:a1:ea:95:88:9e:99:84:d7:6c:93:b5:f6:85:81:
73:29:e8:bd:0b:3f:78:f2:a8:d9:4f:22:ad:f0:68:
7d:ff:90:8a:ba:01:ca:ac:01:a1:9d:11:24:81:e0:
1b:51:b7:cf:92:c6:0f:f2:29:ec:8e:c0:f2:ed:16:
71:ed:f1:8d:0c:ca:e7:f2:ce:f4:14:02:ef:e9:bd:
d7:f7:3f:a9:26:b2:94:d7:71:15:ba:6f:44:d7:a8:
6a:f5:a8:c6:2c:1a:fd:a8:ac:1a:33:1e:f9:88:85:
21:60:8c:ce:f6:27:1c:68:bc:09:6d:cd:52:8e:fd:
61:d2:50:60:4e:da:ff:aa:f1:9b:b3:4b:eb:0d:49:
5b:a3:51:88:42:ae:44:69:bf:ca:76:7a:48:15:da:
83:28:5e:05:3d:bb:31:bd:b4:0a:1a:1f:a1:fc:66:
1b:26:7a:80:ce:75:ad:89:f5:f1:85:84:25:54:e2:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:23:D2:2A:B2:AF:55:31:87:01:E2:2D:57:48:FA:B9:D8:AC:68:56
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/6CPSKrKvVTGHAeItV0j6udisaFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:23:67:9e:13:f3:ad:35:f4:96:4b:5c:76:58:44:18:36:66:
a7:f8:db:b1:86:7c:af:80:55:16:e1:c5:ba:48:10:2c:1f:b9:
94:64:0a:d1:7b:a2:5c:18:a3:3d:e4:5c:3b:9e:13:82:3c:7d:
74:6d:f1:64:d4:73:57:f0:9c:f4:22:be:64:70:1a:50:e4:57:
56:41:37:1f:0e:1a:f7:30:93:5e:c5:d7:ae:e4:b1:c3:04:8b:
df:4a:57:33:ae:b0:c5:33:bd:03:4e:de:c1:e6:65:02:dd:b9:
95:cf:9c:cf:32:55:34:51:05:33:35:1a:59:2d:af:b4:dd:ca:
f5:20:2b:83:dc:9c:10:68:79:fe:87:a5:7a:5c:49:8d:70:0c:
1b:a0:b6:33:79:71:13:04:0d:b4:24:8b:e3:f4:cd:b4:be:62:
79:de:16:c6:25:b5:1d:a1:2f:86:90:b4:d9:cc:06:29:61:79:
88:0e:ca:e9:8e:14:68:0f:f7:8f:39:82:c2:ea:2b:fd:8c:20:
34:b9:34:a2:ac:ac:5a:7e:5a:58:ca:59:8b:72:6c:bb:24:a4:
1f:8d:7a:5e:29:13:f8:5c:b0:6d:48:8b:0d:e6:d2:2e:e4:a1:
07:6c:01:38:fe:88:8d:6b:53:15:70:d2:7e:80:1b:cb:9f:fb:
65:bf:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:47 2025 by rpki-client