Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/e6viym4Y0QNoEP2JyUS_rCM2LGM.roa
File: e6viym4Y0QNoEP2JyUS_rCM2LGM.roa (raw, json)
Hash identifier: eTQtj4w3g0/AwWQ1o0MC4d8ennE++/xc2O7ekXjidVs=
Subject key identifier: 7B:AB:E2:CA:6E:18:D1:03:68:10:FD:89:C9:44:BF:AC:23:36:2C:63
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 018B95D3ED5A04205807732BE6232CA2E03F
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/e6viym4Y0QNoEP2JyUS_rCM2LGM.roa
Signing time: Fri 03 Nov 2023 15:36:15 +0000
ROA not before: Fri 03 Nov 2023 15:36:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57860
IP address blocks: 185.129.62.0/23 maxlen: 23
2a06:d380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:d3:ed:5a:04:20:58:07:73:2b:e6:23:2c:a2:e0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Nov 3 15:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7babe2ca6e18d1036810fd89c944bfac23362c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:42:a0:89:f2:39:a4:85:f4:bb:e9:6a:fd:
59:5a:c1:19:64:b5:49:c9:46:6b:be:6f:83:43:c9:
8e:49:ca:40:fc:5d:f1:d6:29:06:d4:ab:85:ac:d9:
ca:73:73:9d:d3:6b:34:69:3f:b0:3e:4a:73:a8:21:
e5:c8:69:2d:a4:f8:a0:06:81:43:ce:bb:f3:ef:4a:
57:a1:2a:d4:5f:c9:2b:d3:03:ea:db:10:ac:71:5d:
4c:4e:6b:3d:2b:5a:16:78:3f:e4:d6:9f:46:18:e9:
82:20:1d:57:df:a8:fc:35:6e:b2:02:0a:12:01:0b:
51:41:e6:e3:55:40:5f:94:21:33:9d:b7:9c:2e:a7:
f1:1e:43:90:a6:34:c0:47:36:f6:d7:38:04:23:81:
27:5b:63:d3:59:14:bc:74:a3:90:75:d4:de:fb:41:
ff:c8:4e:e6:5d:93:47:46:20:71:04:6c:c9:de:52:
e9:77:63:00:bc:3c:f6:73:c9:a9:f3:b8:df:ce:9a:
86:65:96:ff:11:40:35:d2:06:41:10:75:17:38:3b:
50:cb:b2:d8:64:dc:1a:97:57:49:1b:5e:20:de:93:
a1:76:3a:f3:8e:d9:25:5a:09:17:b9:24:b4:bc:91:
08:a4:f0:a7:86:b3:78:b6:e0:fa:6a:e4:f0:b0:27:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:E2:CA:6E:18:D1:03:68:10:FD:89:C9:44:BF:AC:23:36:2C:63
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/e6viym4Y0QNoEP2JyUS_rCM2LGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.62.0/23
IPv6:
2a06:d380::/29
Signature Algorithm: sha256WithRSAEncryption
54:9e:06:78:8a:f1:68:aa:f2:67:f2:4d:a2:e9:3c:7b:c1:72:
49:f7:51:ad:55:13:aa:23:8e:4d:eb:89:ab:8d:c6:22:35:5d:
56:c7:89:6c:4d:82:4e:8b:24:6e:0e:c2:0a:6a:f3:d4:be:50:
c9:1a:28:8d:0b:1d:71:d3:e3:11:9a:8c:85:cb:0a:2d:a9:bc:
3f:6a:52:da:5c:83:c2:80:87:19:ab:bc:70:e1:b7:f8:e1:f4:
2e:45:14:f0:7f:20:4f:c6:0c:58:82:11:92:b5:e6:a5:86:eb:
aa:c1:3e:3d:4c:9f:0d:97:d6:9a:81:53:57:e2:e3:ca:92:7d:
bf:a4:80:ee:70:6c:5a:4a:89:f6:c9:e1:5f:31:db:4c:14:2d:
c0:27:f2:39:a4:21:15:0d:50:7f:81:37:03:92:27:ef:9a:10:
95:4c:76:c2:14:da:b6:5b:b6:42:ef:d1:62:e2:8f:ab:26:f0:
7b:8e:05:10:bd:d4:5b:01:e6:05:c7:78:d6:5d:9f:54:67:07:
ed:ac:66:96:1a:87:b3:ed:24:fd:05:c9:4a:99:0b:31:57:6f:
00:cc:77:64:13:77:4d:af:69:e4:f5:56:1b:bf:a7:24:30:ac:
1c:35:83:72:00:78:32:56:1e:a0:fe:d3:66:88:bb:8c:89:0e:
c3:ae:d4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:06 2025 by rpki-client