Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/x6-dU018D-6NBzGSEJHVeKaaN3U.roa
File: x6-dU018D-6NBzGSEJHVeKaaN3U.roa (raw, json)
Hash identifier: IcEuPhnWMBm3irw4iOSaSQ39Z1nvMLC1n9E617+Fq/k=
Subject key identifier: C7:AF:9D:53:4D:7C:0F:EE:8D:07:31:92:10:91:D5:78:A6:9A:37:75
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018571154CD500D2BF568D86D2F2AED68BF1
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/x6-dU018D-6NBzGSEJHVeKaaN3U.roa
Signing time: Mon 02 Jan 2023 06:04:59 +0000
ROA not before: Mon 02 Jan 2023 06:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35199
IP address blocks: 217.153.228.0/23 maxlen: 23
89.174.170.0/24 maxlen: 24
85.219.196.0/24 maxlen: 24
89.174.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4c:d5:00:d2:bf:56:8d:86:d2:f2:ae:d6:8b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7af9d534d7c0fee8d0731921091d578a69a3775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:8a:7a:2e:29:81:77:f2:7a:9e:17:40:33:
b9:77:3e:30:0f:90:72:f7:f0:82:f2:9d:d6:db:a2:
91:ea:c1:b9:c0:d5:39:cd:95:e7:e9:ee:9a:63:9a:
ce:28:04:9a:15:b7:d3:c2:dc:0b:b5:e4:73:fd:7b:
19:ad:b0:7c:74:ef:d1:de:de:6c:af:c5:d9:6e:1c:
6f:68:c9:1f:b8:2d:52:0b:22:c8:38:fb:4d:18:5c:
0f:ad:b4:7e:81:f3:8f:d9:80:23:2b:43:10:ae:c9:
be:86:fb:d0:25:23:91:ec:c3:0b:e2:a5:04:50:13:
35:97:aa:38:bf:a1:88:cc:4f:ec:e5:32:67:d9:5f:
41:bd:94:e9:9d:41:e0:5c:26:fb:0c:d3:f6:6f:04:
9b:01:83:ae:5f:5a:0b:2f:8c:06:ba:ef:51:07:6c:
14:96:39:69:e9:4b:2d:78:d4:94:09:bb:9b:90:43:
3c:4b:ab:a8:18:59:ce:bb:96:c0:39:fa:a2:39:bf:
72:ea:ba:ba:f3:5e:b0:55:88:be:97:d3:56:9e:ce:
c3:73:70:a7:94:fb:5c:1a:ed:7a:39:73:3e:9f:ad:
e0:f7:3f:66:56:1f:5c:c5:cc:a2:b0:4d:d4:27:10:
85:ca:54:9f:56:d8:bb:52:9f:20:7f:1b:c0:1e:a4:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:9D:53:4D:7C:0F:EE:8D:07:31:92:10:91:D5:78:A6:9A:37:75
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/x6-dU018D-6NBzGSEJHVeKaaN3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.196.0/24
89.174.22.0/24
89.174.170.0/24
217.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
14:20:45:4f:b8:9c:c2:be:2b:c6:fe:86:5d:93:93:bf:bf:01:
ff:9b:1d:4e:4f:96:e9:15:84:4a:0b:94:67:2c:91:6e:9d:a5:
de:0a:bf:79:fb:89:e6:dd:45:09:71:bf:a8:cf:95:80:c5:38:
54:c7:32:17:5b:bc:c4:2f:17:0a:0d:ff:1f:c8:1c:84:df:2f:
d6:08:4f:18:a3:53:02:2a:17:c3:c7:08:c9:98:81:aa:3c:33:
76:9d:f7:37:d7:b5:8e:c7:c4:82:48:8c:f0:cc:1e:13:8b:5c:
32:f7:00:41:0a:4b:62:2d:0f:39:6c:c5:c6:cf:90:79:ce:e8:
36:0f:55:9c:e0:66:e8:fc:63:d7:8e:be:79:02:36:09:e3:8e:
67:60:42:f5:c7:ef:b4:28:70:2d:6f:2f:4a:df:e0:1c:fb:7e:
7d:f0:d4:6f:83:53:87:ae:c9:5a:5d:e5:b9:6a:1b:bd:3c:3e:
a0:c7:d6:32:b7:a1:27:59:55:7a:47:65:c1:75:8c:62:93:8c:
7c:70:b9:f4:ed:d8:59:03:e4:09:15:1c:c6:8c:d0:8a:26:2f:
cc:93:19:13:69:63:b9:ff:41:6e:3c:a4:53:cf:c8:40:ad:2c:
ed:40:b7:ec:75:dd:3f:2d:7f:4d:f8:d7:74:16:22:75:18:38:
cf:84:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:31 2025 by rpki-client