Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/iLz9uv75i2qkyGOwtZgBA0hygPQ.roa
File: iLz9uv75i2qkyGOwtZgBA0hygPQ.roa (raw, json)
Hash identifier: 3Ens7XHVx4BLBryfmb16j7zd8BzUYj1oKa8BpZykHs0=
Subject key identifier: 88:BC:FD:BA:FE:F9:8B:6A:A4:C8:63:B0:B5:98:01:03:48:72:80:F4
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 01856F2FD6B84842B007847C41598A93882B
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/iLz9uv75i2qkyGOwtZgBA0hygPQ.roa
Signing time: Sun 01 Jan 2023 21:14:44 +0000
ROA not before: Sun 01 Jan 2023 21:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 185.163.92.0/22 maxlen: 22
83.97.80.0/21 maxlen: 21
193.25.102.0/23 maxlen: 23
2a0b:7800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d6:b8:48:42:b0:07:84:7c:41:59:8a:93:88:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Jan 1 21:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88bcfdbafef98b6aa4c863b0b5980103487280f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:60:f9:a0:87:b5:41:f0:10:8f:73:8c:57:18:
8d:99:98:fa:ff:35:82:94:12:fb:ec:ce:2d:e7:fe:
da:95:42:0a:e2:95:10:25:d7:91:aa:f5:4b:f5:30:
ba:f7:ce:ab:cf:57:7c:5c:16:e0:14:b3:ea:1f:e6:
e2:70:07:0a:06:64:a8:69:14:b6:9f:01:a4:75:14:
f9:94:25:3e:36:b5:9f:9e:24:d7:59:87:10:cc:77:
d2:e7:7b:b2:4c:97:a4:f1:bf:87:a3:30:72:f0:f1:
36:25:41:44:01:9b:fc:d0:0f:29:bf:65:b3:1f:4f:
71:ad:43:06:29:75:c7:58:64:3c:d3:c9:eb:94:92:
45:71:f1:ac:39:85:4e:6a:48:ab:49:48:5d:e1:b0:
ac:fe:2b:a7:ce:4d:ca:a9:44:21:4a:38:9d:d3:f0:
a2:01:96:0c:85:ae:08:23:6f:26:a6:79:b2:cf:d3:
48:67:6e:3b:cd:57:d2:de:a0:84:23:76:66:54:a7:
3d:27:ec:0e:d8:20:f6:b0:76:cb:ad:ed:6d:61:4f:
d9:fa:9c:8d:7a:f2:b3:b5:42:be:b8:d9:07:7d:5d:
c2:7d:28:24:22:bf:ad:98:15:a5:55:d4:18:9c:4c:
fb:e3:cc:82:25:4f:ff:57:35:b2:e6:f5:4c:67:49:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:FD:BA:FE:F9:8B:6A:A4:C8:63:B0:B5:98:01:03:48:72:80:F4
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/iLz9uv75i2qkyGOwtZgBA0hygPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.80.0/21
185.163.92.0/22
193.25.102.0/23
IPv6:
2a0b:7800::/29
Signature Algorithm: sha256WithRSAEncryption
61:0c:af:a0:a5:d6:b2:49:94:8e:4d:56:85:b0:2f:aa:83:1d:
6f:3c:03:bc:5f:e3:61:8a:5c:eb:e6:3c:4f:51:93:1c:b7:fc:
f2:b7:32:02:3a:43:6c:fc:fb:68:7f:5a:b8:f8:1c:6c:12:3c:
8d:33:21:86:c7:47:a4:f9:27:88:73:f7:32:bd:fa:ab:33:53:
3d:bf:45:6d:ff:02:44:b9:f8:25:14:53:98:db:83:98:ce:b6:
72:84:88:6d:a9:f0:14:38:81:22:66:1b:13:d6:7e:f8:f3:33:
17:89:88:ee:17:b4:9b:91:0e:a2:c4:ca:11:20:d4:06:c8:f4:
d9:2c:e0:f6:da:5b:66:57:04:e9:9b:a8:d6:1d:cc:bd:c6:35:
87:28:05:fe:e8:8a:20:de:8d:53:61:61:e6:d7:fc:c0:94:e5:
e3:4b:56:12:af:9f:9c:52:39:e7:b4:c4:9b:fb:9d:e0:0d:61:
d6:7a:4a:30:8d:c7:73:8b:f1:62:d0:91:1d:69:00:e6:a9:1b:
a6:72:9d:4d:5f:2d:2d:df:3f:75:0b:24:3f:be:be:e3:db:29:
05:2b:98:07:09:04:1f:ff:6b:3d:72:d3:26:57:3e:f9:8e:6a:
ca:6b:c9:48:eb:2e:97:d0:90:28:f8:59:24:10:14:70:3d:77:
67:8d:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:30 2025 by rpki-client