Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/cc_fN7kwh8ib1fIjtv1X0_BaLbE.roa
File: cc_fN7kwh8ib1fIjtv1X0_BaLbE.roa (raw, json)
Hash identifier: nutE9vO3P+wpbx7+oGObEvzdlZhGLMiNNwqspoXY8Sw=
Subject key identifier: 71:CF:DF:37:B9:30:87:C8:9B:D5:F2:23:B6:FD:57:D3:F0:5A:2D:B1
Certificate issuer: /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial: 09581403
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/cc_fN7kwh8ib1fIjtv1X0_BaLbE.roa
Signing time: Sat 01 Jan 2022 03:57:37 +0000
ROA not before: Sat 01 Jan 2022 03:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209622
IP address blocks: 185.201.151.0/24 maxlen: 24
88.218.118.0/24 maxlen: 24
5.154.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156767235 (0x9581403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Validity
Not Before: Jan 1 03:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71cfdf37b93087c89bd5f223b6fd57d3f05a2db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:79:61:bc:6a:01:d0:ce:cd:f4:e4:3e:6f:
fe:78:b7:51:ab:ca:3f:32:48:f9:4e:86:8f:03:b9:
3a:fe:98:9b:60:e9:82:7e:7e:4c:a1:f5:ad:ae:f2:
35:46:b9:0e:ac:0c:ac:a0:70:20:3a:99:dc:32:21:
4e:6e:05:95:ac:7f:84:eb:f3:c1:3d:3a:0d:f7:1d:
be:b1:c4:da:08:20:77:4f:a9:91:88:84:73:a7:97:
31:ad:63:ec:f8:00:0a:a5:b7:8a:5a:3b:60:5d:88:
ab:04:e9:af:0d:93:81:24:6b:61:90:71:1d:97:be:
84:f7:9c:cf:66:9f:b2:7a:af:a9:f2:7c:5e:30:9a:
6e:35:e3:2d:ca:8c:83:1b:ed:6f:95:0d:f9:d4:ca:
58:c7:cc:22:c7:55:47:ed:02:95:c1:c5:af:55:cf:
ed:d9:de:29:ce:ac:6f:66:72:30:cc:98:7a:a3:06:
11:44:4d:c3:a1:bd:22:44:df:66:69:03:94:20:c9:
a0:da:af:3b:72:c4:db:e7:e6:b6:d0:aa:32:42:9c:
59:6e:1b:ce:85:11:1a:c8:42:6c:f0:33:2d:52:a7:
24:17:f9:f3:22:6a:70:80:03:d0:f9:b1:3f:5b:06:
84:74:e3:cd:c5:c0:10:4d:63:8b:87:4f:1e:b0:ac:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CF:DF:37:B9:30:87:C8:9B:D5:F2:23:B6:FD:57:D3:F0:5A:2D:B1
X509v3 Authority Key Identifier:
keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/cc_fN7kwh8ib1fIjtv1X0_BaLbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.240.0/24
88.218.118.0/24
185.201.151.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4b:27:ee:93:82:2f:41:70:5f:f3:e5:cc:3d:5d:08:3f:0d:
22:95:ae:90:29:fe:c8:ff:ac:9a:cb:85:f2:b6:d5:fb:2b:7a:
90:a3:f3:0d:4e:4f:c7:bb:ca:4a:65:8f:45:89:ce:79:8e:d1:
75:5c:7f:2e:fe:0b:4a:a9:d9:b9:d6:f6:70:5f:ee:a8:1c:22:
74:92:99:0b:e7:77:36:04:14:61:71:47:2f:c5:de:67:5b:0f:
bb:a6:9f:89:98:6b:b9:08:53:20:70:4d:ad:c1:f4:8c:4b:14:
f5:ee:bb:1e:07:0f:42:6e:9b:dd:17:1e:34:20:14:92:b8:01:
b5:62:ed:89:e9:f6:78:fc:cc:7a:77:f8:f7:f5:09:f4:85:e5:
db:e9:35:83:81:3c:a9:e9:2a:f3:f0:9c:8d:61:4e:2c:c9:e4:
54:29:8c:36:35:2e:3a:9a:a3:04:4e:d8:8f:72:25:3f:c7:80:
34:67:13:3f:89:a5:15:33:ce:80:47:4b:de:26:f5:7c:94:95:
15:e4:3e:dc:4b:f2:7f:2a:f4:ce:16:23:b3:ce:67:40:96:0c:
0b:9d:63:8b:fb:9a:f8:1a:d7:47:83:ec:8c:92:7a:a0:24:ac:
60:c5:3b:05:dc:e7:06:7c:46:06:9e:68:9d:70:2d:31:bc:ce:
0d:69:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:09:03 2025 by rpki-client