Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/t6ykEht9btzAf63rxHEpmvekhUE.roa
File: t6ykEht9btzAf63rxHEpmvekhUE.roa (raw, json)
Hash identifier: uaJ0tYu/HudtKXvBxfES/meywsPDLpJl0oidJupLGk8=
Subject key identifier: B7:AC:A4:12:1B:7D:6E:DC:C0:7F:AD:EB:C4:71:29:9A:F7:A4:85:41
Certificate issuer: /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial: 01856C413E5D15F34E722D76B8C0B90D62E7
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/t6ykEht9btzAf63rxHEpmvekhUE.roa
Signing time: Sun 01 Jan 2023 07:34:53 +0000
ROA not before: Sun 01 Jan 2023 07:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.1.191.0/24 maxlen: 24
2001:7f8:105::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3e:5d:15:f3:4e:72:2d:76:b8:c0:b9:0d:62:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Validity
Not Before: Jan 1 07:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7aca4121b7d6edcc07fadebc471299af7a48541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:09:a1:f8:5f:66:2b:52:91:00:f4:40:a8:
24:c1:74:a2:af:ef:a4:50:18:75:66:4b:42:38:0b:
ea:03:56:92:0c:45:f5:88:c2:66:6f:9c:5b:49:da:
3b:f2:42:e0:f7:83:62:08:13:02:3c:9e:93:54:6d:
b9:4a:e9:39:79:3b:c3:e9:17:82:54:b1:31:32:6a:
a5:9d:d0:55:bf:ca:2f:8f:dd:73:5e:22:0e:ab:d4:
5e:af:68:d1:0b:ba:fd:c4:7e:8f:6a:ac:6b:5a:36:
a3:7a:0b:97:38:64:34:d2:b6:af:d9:96:43:b6:7c:
b3:ca:5c:e0:d4:44:07:86:00:e0:6a:8d:e0:21:9c:
93:72:2e:c9:11:3c:cf:31:c8:5b:4d:04:37:81:43:
7a:1b:5d:59:30:31:a9:ac:64:06:19:0a:63:77:4c:
29:84:56:9c:6b:cb:e4:5a:19:6f:9f:cd:4e:66:d0:
d4:fe:ea:f7:2c:3f:f9:ec:20:8b:34:e6:75:60:72:
d4:36:5b:62:86:0f:41:b8:89:7f:39:4a:81:46:fe:
97:2c:d3:b7:dd:ab:38:2c:a3:d9:e3:16:f9:91:e7:
d6:47:d5:ca:a0:16:ca:6d:ba:5e:d8:e0:7a:c7:f2:
f4:35:04:e7:c8:38:40:92:e4:7f:e0:9f:e7:6e:9d:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AC:A4:12:1B:7D:6E:DC:C0:7F:AD:EB:C4:71:29:9A:F7:A4:85:41
X509v3 Authority Key Identifier:
keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/t6ykEht9btzAf63rxHEpmvekhUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.191.0/24
IPv6:
2001:7f8:105::/48
Signature Algorithm: sha256WithRSAEncryption
08:ad:ea:6b:d6:cb:23:59:13:36:65:7d:65:f9:be:fe:0c:cd:
b3:8b:7f:97:d7:1f:c9:02:06:3a:8d:06:96:b1:18:fc:c7:b6:
88:56:4b:25:5a:7d:6f:e6:85:74:88:dc:da:dc:0d:00:63:3b:
c7:01:a7:44:ec:21:53:2d:ab:ce:92:6d:07:f7:17:9d:a8:5f:
6a:7c:6f:83:5b:cd:a6:53:79:3b:b4:eb:5e:05:63:a8:2c:d0:
9f:65:8e:5f:ab:18:a4:9c:b5:9b:78:37:e0:27:18:a2:ef:de:
88:c1:dc:a3:7f:4e:41:a3:95:93:17:62:93:4c:4e:01:b6:9a:
86:26:f9:bf:b8:8f:35:ce:43:18:29:2f:5f:92:89:2c:bf:e9:
5d:ba:06:9c:7a:77:22:7a:dd:28:7c:19:29:ce:e7:71:c4:44:
20:b5:f1:07:08:1e:9f:c3:ac:13:e9:06:9a:6f:61:48:a2:20:
21:2b:16:a3:ef:f7:85:e7:b8:30:44:77:dd:ca:8a:1b:4d:32:
2d:0c:0e:3f:77:d0:de:96:e6:37:29:ac:f9:e7:37:46:67:23:
dc:b4:a9:ee:af:89:b6:7a:20:e4:6e:26:a4:e9:14:bc:73:89:
19:ec:98:c4:af:7a:a9:be:f5:af:57:ec:c6:d6:b6:66:cc:3f:
6a:c2:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:46 2025 by rpki-client