Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/6b_AnB6qHb7EpXZGNc0eqKa6ZiQ.roa
File: 6b_AnB6qHb7EpXZGNc0eqKa6ZiQ.roa (raw, json)
Hash identifier: OmgIMKiuF0xRJcAABKrFCThf9zBRIkOBiwmCtGndSWg=
Subject key identifier: E9:BF:C0:9C:1E:AA:1D:BE:C4:A5:76:46:35:CD:1E:A8:A6:BA:66:24
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018C32B91CE04013D210DFE26C69B8E8A5E9
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/6b_AnB6qHb7EpXZGNc0eqKa6ZiQ.roa
Signing time: Mon 04 Dec 2023 02:47:21 +0000
ROA not before: Mon 04 Dec 2023 02:47:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41032
IP address blocks: 185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
62.201.250.0/24 maxlen: 24
62.201.249.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.196.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
62.201.210.0/24 maxlen: 24
62.201.209.0/24 maxlen: 24
62.201.211.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.216.0/24 maxlen: 24
2a02:b60:2000::/35 maxlen: 35
2a02:b60:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:b9:1c:e0:40:13:d2:10:df:e2:6c:69:b8:e8:a5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Dec 4 02:47:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9bfc09c1eaa1dbec4a5764635cd1ea8a6ba6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:39:3d:d7:77:5c:30:1c:21:2d:1a:9d:7f:
2c:a4:28:e0:a6:9c:9a:92:ed:68:d7:e3:88:d7:3b:
c3:87:ac:f0:e9:27:d4:d3:72:92:80:63:84:82:6c:
a9:5e:37:3b:55:65:07:b2:6b:98:c9:9a:f9:92:39:
62:12:9e:7e:97:1f:98:5f:e9:d1:47:bf:38:bf:15:
96:f5:7b:e8:c1:ba:ff:c2:91:d7:0a:68:45:d6:40:
44:4c:40:f1:f6:f7:20:59:fb:2f:7b:34:34:1e:4f:
5e:91:90:46:59:13:e4:47:b3:ac:0e:cd:0c:94:34:
f3:b2:3a:b5:f0:af:43:40:41:a6:6f:08:b4:ec:9e:
a4:36:ff:c5:16:a5:36:33:c4:d5:da:93:22:7a:36:
ed:9d:b4:f4:fd:1f:89:3a:fb:aa:aa:87:70:a3:44:
33:1f:fe:73:a5:d2:80:97:94:a3:b4:bf:26:c3:ea:
60:50:51:b6:e7:09:d4:1a:54:6a:9f:88:d7:e7:ce:
27:7a:f7:a7:49:27:51:e2:a5:81:1c:ee:74:53:d3:
45:ad:1a:ca:d3:0c:38:e9:2b:72:14:b6:62:c9:19:
14:f9:38:09:04:ae:19:c1:fd:24:b2:71:f2:ee:90:
d7:0a:08:58:14:a8:22:ed:5a:3e:5a:cb:81:d8:88:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:C0:9C:1E:AA:1D:BE:C4:A5:76:46:35:CD:1E:A8:A6:BA:66:24
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/6b_AnB6qHb7EpXZGNc0eqKa6ZiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.196.0/24
62.201.199.0-62.201.211.255
62.201.216.0/24
62.201.237.0/24
62.201.248.0-62.201.250.255
185.90.104.0/22
IPv6:
2a02:b60:2000::/35
Signature Algorithm: sha256WithRSAEncryption
22:be:b3:aa:0e:6a:ec:4e:a0:d4:55:b4:62:e1:7d:17:14:8c:
a4:e5:c0:dc:52:96:b9:96:80:02:71:29:37:51:3b:4d:bd:3a:
69:cb:04:ab:69:d8:d3:25:82:00:1c:e3:e1:39:fe:9c:d4:b5:
27:ba:e4:4d:78:c6:5c:e4:ed:03:0c:ed:1a:82:5d:73:98:54:
cc:ee:c8:84:1e:94:cb:90:8f:26:ad:63:fd:a3:c9:18:1b:7d:
c6:c7:c6:f9:d9:a0:0a:02:55:16:63:e0:30:b0:0f:d7:be:4e:
f1:58:5d:01:63:3e:df:db:06:36:36:27:5d:f1:f4:fd:2b:63:
68:e2:c9:05:04:7b:4c:30:d9:ba:f5:94:ad:20:30:cd:4e:7e:
e8:d8:57:c9:fd:9a:b0:05:bc:ad:9c:18:e4:59:10:1a:6b:9f:
a1:7d:4e:66:d6:dc:db:ce:4f:1b:b8:fc:4f:d4:6a:b2:29:bf:
1f:37:42:61:6e:4c:6e:29:20:4e:7d:b0:fe:00:e6:49:d4:3f:
38:b2:e4:87:16:f7:79:a3:68:35:54:94:0f:bf:1b:c5:bb:aa:
2d:35:7d:ab:38:21:ca:77:e0:6d:36:79:b5:ab:b6:04:21:15:
52:68:d8:4a:55:84:74:ff:78:3f:6c:a3:cd:b1:7a:d6:8d:b5:
c5:d4:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:08:50 2025 by rpki-client