Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/bu9Qo2PLnkPOtAyz21R1l1RFXvc.roa
File: bu9Qo2PLnkPOtAyz21R1l1RFXvc.roa (raw, json)
Hash identifier: TXlIGLSiOsP7KxIqX18jwZnZ1DczLApqFj9WCO6vW84=
Subject key identifier: 6E:EF:50:A3:63:CB:9E:43:CE:B4:0C:B3:DB:54:75:97:54:45:5E:F7
Certificate issuer: /CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Certificate serial: 018571FA08CBBCA42E6E0ACF08CBAE85A727
Authority key identifier: C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/bu9Qo2PLnkPOtAyz21R1l1RFXvc.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38915
IP address blocks: 178.21.216.0/21 maxlen: 21
193.203.220.0/23 maxlen: 23
2a00:1de0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:08:cb:bc:a4:2e:6e:0a:cf:08:cb:ae:85:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eef50a363cb9e43ceb40cb3db54759754455ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:13:92:46:56:15:41:c4:2c:4a:b4:3a:e5:
9a:b6:1e:00:90:4f:71:c6:de:d5:7b:41:74:c4:b8:
fe:d0:7f:6c:56:76:5c:67:a8:99:87:08:89:25:d9:
31:c9:66:bf:8f:d8:ad:5a:39:3e:6e:8c:ad:52:44:
cf:9a:94:bb:7a:53:2a:8a:2b:b8:8e:23:0e:80:e8:
b9:4c:75:83:6f:36:6c:6b:a9:30:3f:39:dd:64:6d:
56:48:89:d1:8d:54:fd:7d:1f:b0:89:57:50:84:91:
77:e4:26:d4:5b:42:7e:09:0c:0b:5a:79:0a:07:d9:
77:00:07:5f:a3:a9:30:46:35:7b:21:c9:24:36:b8:
80:73:51:39:b7:d0:d0:d3:82:d7:f2:f6:44:89:12:
f4:54:9a:bd:6b:13:c0:02:0f:52:91:9d:bf:5a:35:
ff:15:dc:18:c4:b7:c7:64:eb:56:21:4b:e8:53:4f:
ed:b9:c6:b6:1d:5c:a1:36:f5:83:d1:57:67:31:b5:
b2:a4:86:59:4b:b7:ca:b7:17:15:09:82:8d:6b:61:
e1:13:2b:bd:41:c4:4d:35:22:04:40:1d:72:67:73:
be:be:67:9b:48:5c:19:74:b4:8a:b8:d4:25:48:c5:
24:46:11:49:48:cf:79:81:39:6e:eb:84:76:8b:96:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:50:A3:63:CB:9E:43:CE:B4:0C:B3:DB:54:75:97:54:45:5E:F7
X509v3 Authority Key Identifier:
keyid:C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/bu9Qo2PLnkPOtAyz21R1l1RFXvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.216.0/21
193.203.220.0/23
IPv6:
2a00:1de0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:f1:e0:b9:d7:5d:28:94:9e:c5:47:83:eb:af:31:50:51:6b:
70:9d:d0:44:cd:19:c6:90:b6:32:3c:af:89:03:04:6a:ea:09:
85:ee:4f:4e:1a:a6:ad:c2:22:07:72:84:98:25:f6:8f:5c:c9:
66:26:1a:2c:00:8d:07:a6:72:a3:51:87:6c:f6:6a:b7:61:ed:
5e:6a:d0:2b:d8:1a:28:e3:f0:40:5f:c7:78:f0:cd:f9:0c:72:
8d:62:5e:2d:72:e6:6f:8d:d4:d2:09:cc:bf:ea:ef:2d:8d:58:
be:1f:27:cd:d0:fe:41:98:c0:a3:7f:86:5e:1e:94:44:e1:c6:
af:9e:49:75:8b:d0:e6:9f:10:eb:fb:f8:f6:62:aa:e3:18:fb:
40:02:19:17:76:c1:90:4e:9f:f4:e3:8d:06:cf:56:46:9e:c7:
30:0e:f2:09:0e:b7:0d:6c:85:a3:c0:23:77:12:4a:81:f6:71:
36:e6:68:95:a1:f6:6f:f3:01:2d:3a:0d:6c:82:e7:a8:93:de:
85:07:b3:1a:44:49:4d:70:68:67:c8:9c:42:12:b3:db:7c:b1:
9c:c0:c7:53:1e:7b:4c:5c:fb:3e:37:9d:cb:09:6f:49:d5:4c:
41:06:e4:f8:39:ab:3c:a7:b4:ff:9e:50:ed:ba:8b:42:8a:d3:
93:be:f9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:13 2025 by rpki-client