Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/n6VuJeVe_TWpa553Jq_pywTXHd4.roa
File: n6VuJeVe_TWpa553Jq_pywTXHd4.roa (raw, json)
Hash identifier: alcDUT19FlVf+tPBM3pv76bZfvxVYZXxjGjTU5vLD1g=
Subject key identifier: 9F:A5:6E:25:E5:5E:FD:35:A9:6B:9E:77:26:AF:E9:CB:04:D7:1D:DE
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 7E8D32
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/n6VuJeVe_TWpa553Jq_pywTXHd4.roa
Signing time: Sat 01 Jan 2022 01:01:22 +0000
ROA not before: Sat 01 Jan 2022 01:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50554
IP address blocks: 139.28.112.0/22 maxlen: 22
185.3.176.0/23 maxlen: 23
185.3.178.0/24 maxlen: 24
185.3.179.0/24 maxlen: 24
89.106.160.0/21 maxlen: 21
2a00:1bc8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8293682 (0x7e8d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Jan 1 01:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fa56e25e55efd35a96b9e7726afe9cb04d71dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:b3:b8:fe:72:bd:cb:3b:13:e9:eb:9b:b0:
da:b9:ee:df:be:e2:cd:12:83:4e:c4:15:8d:b9:97:
37:4f:60:6f:52:a5:c4:0e:c3:69:f6:d9:6d:15:db:
a2:ae:a6:b8:44:12:42:8f:29:9e:87:93:b7:fb:c9:
8e:81:72:ae:30:35:b1:20:ab:63:a8:bc:cd:70:b5:
f6:1f:d9:85:af:dd:28:10:f1:0e:6a:04:57:01:ad:
e8:05:b1:b7:e1:3c:70:44:93:46:ac:07:22:60:af:
61:c0:0a:07:52:2f:ad:34:ec:d6:c4:03:bd:74:6f:
b1:3d:30:45:49:01:2e:51:78:b3:78:6e:b5:39:c2:
86:c3:2d:35:c6:48:cc:a5:62:e6:b8:cb:37:75:b6:
34:b7:c2:ec:8e:bc:06:30:74:c6:58:61:36:d8:e4:
8b:9d:ef:67:bf:4e:e4:da:19:17:fe:47:21:b9:f2:
db:6b:a7:af:03:cd:47:60:a1:23:86:08:f7:38:c7:
19:d3:b3:dd:d3:a2:e5:95:02:ed:f6:58:8e:86:ed:
13:c2:b9:43:a0:74:67:df:89:86:06:7e:b6:f8:83:
7c:e6:2e:a1:95:e5:31:05:37:62:bb:28:f7:6c:cd:
ad:47:35:27:ca:19:74:a4:2b:2c:18:c0:31:d8:96:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:6E:25:E5:5E:FD:35:A9:6B:9E:77:26:AF:E9:CB:04:D7:1D:DE
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/n6VuJeVe_TWpa553Jq_pywTXHd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.160.0/21
139.28.112.0/22
185.3.176.0/22
IPv6:
2a00:1bc8::/32
Signature Algorithm: sha256WithRSAEncryption
31:bc:9d:56:3f:99:3c:7b:5c:dc:d4:20:60:c6:4c:8f:e6:94:
2a:86:42:34:f5:fa:b5:39:9b:71:01:d1:e5:f6:65:b3:ac:47:
80:69:35:cb:3d:a8:4f:44:a7:fa:1c:2c:e1:a2:c1:95:84:6e:
43:8d:52:cf:00:ae:4d:9b:5e:48:5a:80:d3:a2:21:d9:51:d8:
8f:d0:19:c3:82:f0:86:1f:8a:ef:37:94:a3:93:9c:62:b4:35:
c1:c6:ea:89:94:08:de:b3:7d:26:58:f9:43:ad:00:6e:a7:be:
7f:74:88:a2:9e:c2:40:7b:78:1c:b3:02:f8:ea:17:fa:32:ef:
20:f3:fb:1f:73:6a:0b:c9:73:5d:b8:25:d3:79:6c:14:2a:6f:
81:99:e5:0c:39:66:d3:97:07:e0:60:cc:58:e1:53:31:fd:ea:
12:61:b0:7e:47:fc:d8:8f:91:be:9a:03:81:44:68:69:ee:2f:
4d:5c:fb:d9:16:7c:c2:31:24:5f:e3:b7:68:5c:e2:b5:db:b2:
c2:1c:ab:c8:92:83:ff:ef:13:15:66:1a:c3:0f:54:46:3b:22:
80:92:e6:00:99:15:16:ca:b7:ad:d2:9c:12:32:12:ca:0b:e3:
27:6e:40:1d:66:2e:08:70:83:e1:0f:8f:0d:3f:96:c0:3f:6f:
82:e7:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:14 2025 by rpki-client