Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/PL6B555a7_xR-Za8I_rmuN1UpfE.roa
File: PL6B555a7_xR-Za8I_rmuN1UpfE.roa (raw, json)
Hash identifier: gGPudmQCRMUKm5GBO72fKRmtSRQoipmeB0slFrnfI6s=
Subject key identifier: 3C:BE:81:E7:9E:5A:EF:FC:51:F9:96:BC:23:FA:E6:B8:DD:54:A5:F1
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 018570675E2168C351F0033019B02DCB2A1E
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/PL6B555a7_xR-Za8I_rmuN1UpfE.roa
Signing time: Mon 02 Jan 2023 02:55:00 +0000
ROA not before: Mon 02 Jan 2023 02:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200813
IP address blocks: 185.94.161.0/24 maxlen: 24
185.94.160.0/22 maxlen: 22
185.94.160.0/24 maxlen: 24
185.94.163.0/24 maxlen: 24
185.94.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:5e:21:68:c3:51:f0:03:30:19:b0:2d:cb:2a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Jan 2 02:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cbe81e79e5aeffc51f996bc23fae6b8dd54a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:06:78:9d:f6:30:80:10:38:e8:b8:dd:a4:
00:6c:c7:86:d5:9b:76:ac:cb:69:7c:cc:c3:d7:cd:
cf:f3:95:d6:1d:28:b9:71:50:8f:bb:b6:28:2e:ea:
b7:ec:73:a9:d9:fe:7e:71:44:54:40:6f:f3:f8:84:
54:76:c8:9e:51:42:b5:92:ce:90:39:0d:54:6e:a1:
45:9a:c3:5d:e5:99:09:24:9b:e8:ab:7a:f9:35:0b:
2a:2f:70:63:d4:7b:73:a8:97:a9:4a:6d:ca:d9:6f:
9d:8e:f0:68:b5:13:1d:5c:3d:81:e3:36:5f:a0:c8:
ef:f3:2a:e3:ff:7f:94:bb:6b:41:4f:e8:25:0b:82:
f2:1c:a0:c2:d9:02:db:65:f5:6e:7e:34:31:13:4d:
bf:e4:f7:ee:4d:3d:f5:70:da:90:5e:01:82:9b:22:
21:2f:b9:cd:f6:09:39:29:ef:41:10:fa:38:3a:f4:
56:48:44:a6:bd:81:cc:19:3d:e9:33:1a:73:e8:1c:
9e:e9:63:f6:8a:7a:99:93:6a:05:3d:fd:4c:d6:5f:
42:90:77:30:b5:1c:e1:87:b8:4a:40:9c:b3:74:eb:
bc:4c:76:78:59:dd:c9:cc:c2:da:cf:1e:7f:6b:91:
8b:22:c4:92:60:d9:9d:da:55:7d:90:cc:44:94:ac:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:81:E7:9E:5A:EF:FC:51:F9:96:BC:23:FA:E6:B8:DD:54:A5:F1
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/PL6B555a7_xR-Za8I_rmuN1UpfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.160.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ec:61:0c:ff:d9:94:a0:56:0f:22:a2:74:b1:21:e7:c5:c2:
7c:fb:5c:da:fd:97:71:67:4f:ba:d7:67:c7:f3:c1:a8:8e:f7:
5c:da:2d:6f:dd:47:aa:5a:f8:2a:db:bc:2e:a7:d6:91:12:69:
79:33:5f:d3:d8:10:0f:cb:53:43:5a:09:fd:69:fd:cf:7b:63:
96:58:9f:50:09:82:9a:f2:53:e5:5c:27:0e:89:c8:e3:53:76:
a1:fa:35:63:e3:26:97:d4:3d:d4:43:cd:22:ea:95:ba:3a:78:
7c:ae:4d:74:e5:fb:5d:8c:82:46:0c:3b:1c:28:b9:3f:d3:9b:
b8:8b:94:70:4e:f0:f4:07:ad:a0:87:54:43:53:e6:25:50:84:
54:67:16:22:62:87:ca:3a:16:70:bb:09:e7:38:0c:f2:44:8c:
bf:30:7a:51:7e:fd:db:29:77:85:0b:1a:46:b4:35:60:70:7b:
c7:9b:b3:be:bc:21:7a:56:4e:4c:13:e9:7a:ac:93:ca:c7:ce:
cc:63:e4:bb:e8:b0:4a:ab:09:86:b6:d9:44:48:34:78:97:b2:
70:1a:50:b9:ed:7e:4f:4a:e8:9b:b7:dc:45:75:cb:a8:80:bf:
a5:4c:a8:26:f7:bc:4d:cb:45:14:bf:16:00:b2:3e:55:2f:a6:
95:fe:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:51 2025 by rpki-client