Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/C6jpCUlXMAx5qsSu_ZLoESylR5A.roa
File: C6jpCUlXMAx5qsSu_ZLoESylR5A.roa (raw, json)
Hash identifier: KWjYsr4ZtNoFHljRktvpNvGh2zFNuQT/19SxtZRcuE8=
Subject key identifier: 0B:A8:E9:09:49:57:30:0C:79:AA:C4:AE:FD:92:E8:11:2C:A5:47:90
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 01856D0171BFA61F4F95CE9B9B9DFF146DBB
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/C6jpCUlXMAx5qsSu_ZLoESylR5A.roa
Signing time: Sun 01 Jan 2023 11:04:49 +0000
ROA not before: Sun 01 Jan 2023 11:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 185.93.1.0/24 maxlen: 24
185.93.2.0/24 maxlen: 24
185.93.3.0/24 maxlen: 24
185.93.0.0/24 maxlen: 24
89.187.165.0/24 maxlen: 24
89.187.160.0/23 maxlen: 23
89.187.162.0/23 maxlen: 23
89.187.164.0/24 maxlen: 24
89.187.172.0/23 maxlen: 23
89.187.166.0/23 maxlen: 23
89.187.168.0/24 maxlen: 24
89.187.169.0/24 maxlen: 24
89.187.170.0/23 maxlen: 23
89.187.174.0/24 maxlen: 24
89.187.175.0/24 maxlen: 24
89.187.176.0/22 maxlen: 22
89.187.180.0/22 maxlen: 22
89.187.184.0/22 maxlen: 22
89.187.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:71:bf:a6:1f:4f:95:ce:9b:9b:9d:ff:14:6d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Jan 1 11:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba8e9094957300c79aac4aefd92e8112ca54790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:67:44:55:3a:a9:91:90:e3:b9:77:24:de:
3a:75:61:2a:f5:6c:4d:22:e2:17:0b:9c:c4:78:bd:
c4:43:8a:2e:c3:72:0b:ea:63:3d:f7:54:55:70:c4:
d5:ab:84:0e:b2:bc:ef:cb:4e:ff:bd:c2:41:11:bb:
d7:4c:e1:18:53:df:e7:f1:ef:e7:b7:c7:12:ae:f1:
c3:a3:0d:b8:46:f2:c5:5f:a6:e7:e3:b5:bc:eb:fd:
c2:89:af:78:06:7d:95:f9:b3:4e:fe:36:ad:c6:ba:
45:ab:46:48:a8:27:8b:16:4e:3d:a0:2e:51:f9:50:
e7:ef:76:83:02:4f:e9:67:33:95:22:e6:7a:11:f9:
3e:9b:98:48:0f:6b:b5:05:bb:3c:cc:a8:03:f3:e2:
f0:3e:aa:dc:bb:c1:34:f9:4c:2c:29:8d:b5:77:af:
86:37:f8:c9:ca:64:34:80:53:18:22:2f:03:ef:b4:
c8:a3:9e:52:10:be:95:e6:e1:8b:f0:27:7e:42:22:
92:56:76:62:45:a5:4a:29:77:4b:a7:a4:52:60:55:
c7:be:2b:20:56:9b:5e:54:30:af:8e:9c:68:d6:d9:
7f:e1:8c:88:86:c9:12:0c:b6:02:46:09:0a:75:b3:
73:e2:15:d2:ae:5e:4b:89:58:fc:d4:7a:1d:f0:85:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:E9:09:49:57:30:0C:79:AA:C4:AE:FD:92:E8:11:2C:A5:47:90
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/C6jpCUlXMAx5qsSu_ZLoESylR5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.160.0/19
185.93.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:74:06:14:6f:d9:e0:fd:de:66:65:85:2a:4a:f1:a5:c0:c1:
4d:af:f5:33:bb:8d:58:8b:1a:b3:c3:2f:cb:10:27:5f:cc:db:
9a:bc:4b:e9:ee:3a:69:ae:b0:02:e9:cb:ee:11:3b:a7:69:bb:
5f:fa:3a:dc:19:ad:f7:2e:03:46:02:c8:be:63:1f:0a:f9:aa:
29:06:86:d2:25:7b:e0:c9:b3:15:a8:41:2c:c6:0e:94:59:56:
8d:c5:07:9a:93:f3:42:6d:69:c7:f3:77:0d:d0:92:70:ae:66:
23:d9:08:9f:73:cc:3b:63:fe:d3:7b:ff:fc:c1:a7:5e:29:ba:
f8:07:9e:1e:d9:1f:a6:3f:45:3e:6c:ea:76:3b:01:9b:3c:45:
30:61:14:49:7b:6b:82:c9:f8:db:3a:69:67:94:61:0c:b8:80:
4a:23:1f:a1:2d:03:d8:41:02:b2:56:2f:7b:39:c6:10:1e:a7:
bd:ac:c5:16:84:76:b1:af:7d:b7:b7:37:1f:35:55:92:62:a3:
d9:e1:b4:aa:a1:e4:70:71:f3:f6:1e:c4:11:e3:5f:b1:15:f6:
b4:4b:22:b0:45:af:8c:0f:57:0e:14:a1:7a:e0:b8:a6:8d:bb:
ac:a9:3d:a7:26:5d:93:7f:90:35:8e:98:01:be:51:27:fb:b2:
7b:a3:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:00:08 2025 by rpki-client