Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/6U73RQEWxo-yJyy9PGS_K5E1ttU.roa
File: 6U73RQEWxo-yJyy9PGS_K5E1ttU.roa (raw, json)
Hash identifier: lKlRXzh4yZxXg7axyvKSt89+Sh5aJXJBW9lU3RkbYhs=
Subject key identifier: E9:4E:F7:45:01:16:C6:8F:B2:27:2C:BD:3C:64:BF:2B:91:35:B6:D5
Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e
Certificate serial: 01856FD4F3C942A784A8D19DC67A56922F08
Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/6U73RQEWxo-yJyy9PGS_K5E1ttU.roa
Signing time: Mon 02 Jan 2023 00:15:05 +0000
ROA not before: Mon 02 Jan 2023 00:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62286
IP address blocks: 185.40.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f3:c9:42:a7:84:a8:d1:9d:c6:7a:56:92:2f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e
Validity
Not Before: Jan 2 00:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e94ef7450116c68fb2272cbd3c64bf2b9135b6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:0a:f9:74:7d:92:1b:6f:f6:c7:84:6a:54:
87:b1:44:7c:41:18:19:e0:48:0b:1c:3a:93:c6:b5:
73:e3:4f:f3:45:e5:9a:43:2a:cf:45:9d:de:d3:14:
c0:07:42:3f:f4:60:c5:4f:ca:12:bb:7c:d5:6d:9c:
d4:9a:a5:05:ea:e6:ae:8f:33:56:e1:31:2c:38:ea:
23:35:c5:dc:d1:97:13:ea:33:63:76:cd:c5:94:e9:
ee:40:b2:e6:eb:b7:da:f9:0a:86:11:c1:72:3f:da:
97:7f:65:37:9a:9b:a3:7b:cd:b9:e8:11:c4:1e:9b:
3d:93:e5:15:c6:83:b7:bd:99:52:98:70:0e:42:e3:
2a:5e:e5:f6:85:81:04:32:7d:e5:20:96:ce:ab:56:
a0:8f:a8:6b:51:b1:25:a8:1d:86:9e:58:9a:3c:a3:
ee:ad:b8:90:36:70:5a:d1:75:8f:8c:47:81:f4:08:
84:78:81:e7:4e:3f:46:dd:75:db:8c:5c:ce:3b:1c:
22:31:7b:2e:e3:23:c0:9c:8f:95:44:aa:6a:9b:98:
92:d9:7e:55:cb:91:53:60:55:aa:97:e4:69:18:d2:
0a:1e:7c:9c:d5:cf:91:9e:f4:cc:d7:cc:7f:a3:c0:
f4:5b:7b:1e:b3:1c:a9:b9:24:b9:cd:03:cd:db:0c:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:F7:45:01:16:C6:8F:B2:27:2C:BD:3C:64:BF:2B:91:35:B6:D5
X509v3 Authority Key Identifier:
keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/6U73RQEWxo-yJyy9PGS_K5E1ttU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.40.0/22
Signature Algorithm: sha256WithRSAEncryption
34:7d:ce:60:86:3d:54:50:7f:63:fc:2c:7d:22:8e:98:fa:43:
ce:b0:d2:d2:ac:e5:e7:83:82:ba:0d:89:89:0a:31:3f:75:e2:
6e:20:96:37:5b:c9:2c:ff:d3:8a:c6:30:dd:6b:f7:bb:55:42:
46:34:62:25:57:39:f6:63:78:49:bf:39:7f:56:98:30:53:46:
e5:95:a9:f7:44:10:f2:b4:0e:5e:95:d4:df:2c:6c:73:f8:80:
73:cb:09:bb:e3:96:0a:5c:c8:60:dd:c9:15:67:2d:9c:3b:e7:
41:dd:89:62:5d:e8:94:8f:ec:b2:69:75:4a:44:e9:5e:48:ee:
99:27:84:87:cf:09:11:5e:6c:a1:fa:b6:ec:7e:0b:9c:58:ae:
1e:47:af:3f:fd:3d:23:60:fa:9f:60:e7:91:81:d2:7b:b5:f3:
f8:82:7f:98:d5:ed:f2:a9:88:d8:6e:7c:61:ef:fc:dc:bb:27:
52:3f:36:e0:99:54:c3:ad:4a:47:9f:83:17:b0:e3:75:7e:34:
3f:92:24:31:33:ab:7a:1b:bb:20:1e:a1:10:2d:9c:4f:d6:87:
32:96:c6:91:6a:e2:f5:3d:a2:98:b9:15:72:0c:71:d8:68:42:
e2:fc:82:16:80:8f:b2:30:45:35:0f:7b:08:e2:40:ec:b0:8b:
fa:3f:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:11:53 2025 by rpki-client