Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/w6JuSTYYWVXI00ZTDUekstieSyI.roa
File: w6JuSTYYWVXI00ZTDUekstieSyI.roa (raw, json)
Hash identifier: SsVUd63NtC15lYvZpfodq+/uKbqermUaMdN+DSjWwug=
Subject key identifier: C3:A2:6E:49:36:18:59:55:C8:D3:46:53:0D:47:A4:B2:D8:9E:4B:22
Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Certificate serial: 173FA95D
Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/w6JuSTYYWVXI00ZTDUekstieSyI.roa
Signing time: Sat 01 Jan 2022 15:06:46 +0000
ROA not before: Sat 01 Jan 2022 15:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197690
IP address blocks: 185.35.172.0/22 maxlen: 24
193.104.37.0/24 maxlen: 24
2a00:b060::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390048093 (0x173fa95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89
Validity
Not Before: Jan 1 15:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3a26e4936185955c8d346530d47a4b2d89e4b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:75:09:7d:4d:59:b6:4f:8d:e1:c9:8f:0f:
f1:39:d5:cf:9b:40:15:2d:70:7d:cc:04:0c:80:91:
91:db:4b:76:fe:5f:94:22:77:a0:0d:fb:ca:bd:18:
d1:de:98:5d:ce:23:1a:91:f6:53:16:f4:a5:6a:59:
51:05:ba:28:49:dd:04:f4:6c:25:91:4a:a9:93:ce:
3b:15:0e:7f:c3:33:72:9d:e4:ff:f0:98:d0:d4:40:
96:97:41:0f:c3:e1:0e:f3:0f:d2:68:22:cf:2c:a5:
e0:c6:a9:c0:b1:1f:b2:36:a9:55:99:7b:41:56:14:
e4:cd:81:58:be:7c:54:a2:5f:93:c2:15:8e:81:b3:
97:7a:8c:50:a2:40:23:f2:98:c1:9b:32:56:f1:a1:
cd:e9:bc:a1:45:9a:3f:f0:ba:17:32:34:43:44:21:
f7:82:44:08:41:16:c6:3d:86:cd:02:11:94:c0:6b:
24:fb:b1:a2:74:05:ab:22:e3:42:79:3f:28:16:6e:
b4:38:2b:b3:41:61:9e:c8:e9:a6:ff:7b:78:29:6c:
6a:d0:cb:6e:a2:6e:bb:9c:f8:7b:f4:7c:81:51:a0:
fc:ab:b7:e3:19:63:4d:96:18:6e:e5:60:54:85:f5:
c4:04:a1:1c:68:0f:f6:95:f9:44:33:17:22:0d:c0:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:6E:49:36:18:59:55:C8:D3:46:53:0D:47:A4:B2:D8:9E:4B:22
X509v3 Authority Key Identifier:
keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/w6JuSTYYWVXI00ZTDUekstieSyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.172.0/22
193.104.37.0/24
IPv6:
2a00:b060::/32
Signature Algorithm: sha256WithRSAEncryption
26:30:55:6e:ba:9d:f2:f8:32:ab:f2:10:0e:aa:13:df:b1:02:
c2:0f:86:19:1b:75:94:d1:a9:da:fe:b9:8e:56:7a:62:62:32:
29:78:d5:cf:4e:9c:75:a0:f8:b5:ee:58:15:29:06:17:92:1d:
9c:63:61:2a:ce:e8:0e:b3:b2:bb:8a:7b:f9:2b:18:25:70:fd:
ac:0f:38:7f:2b:7d:c9:03:c4:e6:d8:e9:c8:27:59:49:68:26:
e5:31:5a:1a:db:e8:65:3a:96:09:24:4a:c9:00:70:a4:77:e9:
23:52:d7:2c:18:e1:b0:b0:bf:3e:d5:48:5d:e2:cc:c5:b5:20:
4e:7c:29:ce:c7:ce:5c:07:2c:24:90:32:27:87:31:62:95:7c:
ac:55:e8:70:d7:27:48:11:a4:b6:b3:ec:f2:df:fd:93:35:e3:
28:ab:d5:a1:3c:17:d9:eb:0d:a0:28:e4:5a:90:82:4b:a2:fe:
8f:dd:12:2d:0a:cd:35:28:32:79:4a:39:f7:c5:02:6a:c4:fe:
f8:55:80:7d:c7:24:b1:7c:4b:9c:14:bd:49:a2:88:10:ed:ba:
6d:80:cd:78:96:4d:af:f5:52:1d:c1:da:f9:e3:9c:dd:bb:89:
80:d8:45:8b:30:6a:46:bc:26:13:d1:9f:3c:c0:5a:92:e0:32:
c6:80:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:00 2025 by rpki-client