Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6dFFujUSiCWsGc5Lhd_hXxu9jjk.roa
File: 6dFFujUSiCWsGc5Lhd_hXxu9jjk.roa (raw, json)
Hash identifier: W2CUyeSMflH8rbiuSA2LyZrukOJMuLAFicnXebpGLNo=
Subject key identifier: E9:D1:45:BA:35:12:88:25:AC:19:CE:4B:85:DF:E1:5F:1B:BD:8E:39
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 068FE828
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6dFFujUSiCWsGc5Lhd_hXxu9jjk.roa
Signing time: Tue 12 Apr 2022 19:00:36 +0000
ROA not before: Tue 12 Apr 2022 19:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 93.152.219.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110094376 (0x68fe828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 12 19:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9d145ba35128825ac19ce4b85dfe15f1bbd8e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:85:ab:45:d2:3b:99:36:f6:fe:b2:c2:71:
34:43:63:aa:8e:89:e5:46:8c:17:ff:5f:e4:94:f6:
a2:22:c2:3b:62:1f:b5:a6:ef:77:29:10:db:c5:67:
1c:18:c8:c6:8a:f1:62:db:f5:24:36:3f:9b:97:b5:
1f:72:a4:4e:9f:c3:22:cd:c4:85:9c:9b:6b:ba:a5:
8a:85:dd:96:4f:f0:d3:29:70:fa:4e:13:6f:8d:56:
09:20:2f:56:70:32:8a:41:e0:d2:84:41:b1:6e:53:
ee:25:79:ce:4d:94:d2:8b:82:1a:19:0c:2a:4d:0b:
22:c8:35:f3:41:54:a2:21:7d:19:58:d0:57:02:d3:
b9:e3:2a:36:df:56:11:b0:fd:8e:b6:0f:62:1e:6b:
67:27:e9:f2:14:c9:cc:5e:b4:27:56:97:5b:20:30:
36:78:84:69:4c:7b:6e:6a:86:3c:81:a5:ba:86:fe:
11:5d:e0:42:5e:48:da:2f:ad:be:d6:98:61:1e:51:
59:48:ae:74:e8:c9:ec:2a:c5:1c:e8:7a:e5:6e:ea:
6c:4a:51:45:9e:82:49:35:09:ee:db:88:49:2a:fa:
1e:05:f1:27:91:a9:cc:6f:03:4f:fc:45:72:1b:a0:
5f:e3:40:a7:cf:6e:47:05:c2:50:04:81:a9:74:41:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D1:45:BA:35:12:88:25:AC:19:CE:4B:85:DF:E1:5F:1B:BD:8E:39
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6dFFujUSiCWsGc5Lhd_hXxu9jjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.217.0/24
93.152.219.0/24
93.152.222.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3c:73:d3:7f:c7:5e:09:9e:6d:a6:03:a5:fc:11:1a:0b:0b:
9d:c3:e4:e4:04:9d:99:b5:82:fc:7d:aa:1a:68:fc:4d:18:d4:
b7:92:f7:b2:7e:45:08:77:22:e5:a8:77:e4:bf:d2:37:78:e1:
2b:97:c0:f1:39:d4:9e:0e:5a:e2:04:e3:d6:de:8e:7c:69:a6:
dc:9b:f0:dc:4f:35:eb:ec:a9:54:2d:2e:65:d9:7d:26:34:f7:
1f:45:cc:3c:2b:e6:2e:1c:9a:bc:09:10:b1:2d:5a:f6:37:74:
fc:0b:d1:b6:e4:dc:d9:b0:45:e6:ca:77:f8:ee:34:b6:f3:14:
36:6c:4e:90:2c:ba:2f:ec:37:e5:36:7e:1f:03:4e:43:21:88:
41:78:14:1f:e8:1a:17:2f:27:c6:c2:6f:15:f7:57:ed:3f:f3:
67:ac:07:8d:93:d3:9a:63:22:79:9a:68:f3:6e:0a:a2:6c:52:
5b:ad:ef:4a:75:f4:95:7c:7b:96:f7:ed:9b:34:87:2c:3a:fd:
c2:7a:cf:a2:9f:24:2d:76:2d:af:17:0a:8b:48:a1:b8:e9:29:
f4:b6:17:1c:7c:18:74:23:69:17:94:2e:13:8b:16:51:3f:d1:
25:d7:9b:50:9a:ad:ac:d5:27:30:47:b5:17:eb:6e:b0:05:50:
8a:2e:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:53:15 2025 by rpki-client