Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/9vtpC454GD_qgaJLYjvcf1DsUOw.roa
File: 9vtpC454GD_qgaJLYjvcf1DsUOw.roa (raw, json)
Hash identifier: 11b+MdTKChbLef6/vrXbYAkhnuPbRIYZXlMtXyB6Mfo=
Subject key identifier: F6:FB:69:0B:8E:78:18:3F:EA:81:A2:4B:62:3B:DC:7F:50:EC:50:EC
Certificate issuer: /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial: 01856E38C1D5AA505A0373B393186AAC6FF9
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/9vtpC454GD_qgaJLYjvcf1DsUOw.roa
Signing time: Sun 01 Jan 2023 16:44:51 +0000
ROA not before: Sun 01 Jan 2023 16:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15763
IP address blocks: 185.151.100.0/22 maxlen: 24
156.67.58.0/24 maxlen: 24
85.22.48.0/24 maxlen: 24
85.22.53.0/24 maxlen: 24
85.22.54.0/24 maxlen: 24
85.22.55.0/24 maxlen: 24
85.22.52.0/24 maxlen: 24
85.22.60.0/24 maxlen: 24
85.22.74.0/24 maxlen: 24
85.22.75.0/24 maxlen: 24
85.22.0.0/20 maxlen: 20
85.22.0.0/16 maxlen: 16
85.22.16.0/20 maxlen: 20
85.22.148.0/23 maxlen: 23
85.22.158.0/24 maxlen: 24
85.22.172.0/24 maxlen: 24
85.22.173.0/24 maxlen: 24
85.22.174.0/24 maxlen: 24
85.22.175.0/24 maxlen: 24
85.22.84.0/22 maxlen: 22
85.22.96.0/20 maxlen: 20
212.29.32.0/24 maxlen: 24
212.29.33.0/24 maxlen: 24
212.29.34.0/24 maxlen: 24
212.29.32.0/19 maxlen: 19
212.29.42.0/24 maxlen: 24
212.29.39.0/24 maxlen: 24
85.22.112.0/20 maxlen: 20
85.22.128.0/22 maxlen: 22
2a03:f580::/32 maxlen: 32
2a03:f580:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c1:d5:aa:50:5a:03:73:b3:93:18:6a:ac:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Validity
Not Before: Jan 1 16:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6fb690b8e78183fea81a24b623bdc7f50ec50ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:8f:29:7c:b9:46:9e:eb:88:95:90:ef:fe:
8e:d8:ee:cc:74:22:74:b2:da:9a:bb:1e:d2:42:5d:
73:6a:6a:e3:e4:80:80:0b:4d:84:b0:0e:ba:67:12:
bc:05:31:55:ac:3b:6c:d3:2e:90:06:66:53:64:8d:
24:b2:76:96:bb:89:89:11:39:3b:ac:a6:58:e5:62:
17:43:df:94:b3:d9:ba:7a:6e:06:be:13:ea:2e:d6:
d9:bc:ed:6a:ce:d9:5d:60:61:8b:d6:8a:7c:35:5c:
75:85:48:c9:fd:fc:01:7c:d2:7a:a7:1f:d7:08:38:
c1:b4:0d:38:e2:b9:32:09:c4:dd:fa:08:a9:cb:3f:
6a:bf:4b:47:93:d4:2c:d9:0c:89:17:03:19:37:82:
6a:f4:f6:7c:26:96:0a:0c:1f:de:ea:56:a1:39:fc:
a4:fc:99:20:bb:b5:af:b8:67:93:50:e0:8a:58:7c:
55:b0:1a:39:f2:24:de:18:32:9a:ed:12:23:d5:96:
8c:e5:08:b6:01:fb:85:d3:07:9f:6c:5c:e6:64:0b:
ef:8a:ee:71:54:3b:c9:0a:01:4f:1b:48:d7:95:96:
f6:49:c1:4e:a9:c3:92:b4:ac:26:18:b4:6a:ed:fe:
f5:66:72:a9:89:f0:af:4e:26:fd:9b:97:2d:00:58:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:69:0B:8E:78:18:3F:EA:81:A2:4B:62:3B:DC:7F:50:EC:50:EC
X509v3 Authority Key Identifier:
keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/9vtpC454GD_qgaJLYjvcf1DsUOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.22.0.0/16
156.67.58.0/24
185.151.100.0/22
212.29.32.0/19
IPv6:
2a03:f580::/32
Signature Algorithm: sha256WithRSAEncryption
1e:87:24:e0:1a:67:47:69:e0:ef:18:48:fd:80:a1:37:72:b4:
b8:6b:99:af:01:64:53:7c:cd:97:fd:f7:11:8c:43:24:a1:cd:
0a:f9:c2:9a:29:31:88:37:8b:f7:18:c4:c1:75:bc:cf:45:15:
db:12:aa:da:68:60:8c:54:f7:06:41:38:c1:f8:a8:92:25:c0:
48:bb:a7:92:4b:ce:19:a1:41:65:1f:00:60:eb:88:c3:5c:4e:
5c:bd:0e:e5:c0:bb:43:09:85:ec:83:ba:63:5b:25:82:84:30:
1e:20:12:f8:4e:b9:11:d3:8a:68:47:76:6d:ab:8a:d2:34:2f:
be:2d:0b:41:4c:16:a7:ef:91:11:7b:05:8d:5b:e2:e5:25:51:
a8:a6:a2:ee:ce:3f:bb:e1:49:b6:a1:dd:fb:52:7f:07:bb:05:
5e:5d:3c:82:f1:73:37:4f:9f:7e:7a:af:94:1c:67:f4:32:7b:
46:78:b1:43:7e:f5:77:e2:fb:87:dd:50:89:81:a3:c9:1b:c7:
dc:d3:96:0f:59:1c:3d:52:a3:a5:0f:9b:96:d6:1b:54:ad:0a:
91:cb:02:b1:db:02:da:7a:10:de:86:04:7e:f8:77:79:21:46:
d6:58:70:4d:c6:03:87:03:74:d7:36:46:fa:6f:e1:d3:86:5b:
3a:73:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:08 2025 by rpki-client