Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/1-TI2LR5Uqi3iKoNqspqgJBy2lAU.roa
File: 1-TI2LR5Uqi3iKoNqspqgJBy2lAU.roa (raw, json)
Hash identifier: 6Khmg+a6KicrWheOpidmFRgo7mOyj/sVFhqxQBTu7os=
Subject key identifier: F9:32:36:2D:1E:54:AA:2D:E2:2A:83:6A:B2:9A:A0:24:1C:B6:94:05
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 0185710328C88AD6FDBF72BF01659634788C
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/1-TI2LR5Uqi3iKoNqspqgJBy2lAU.roa
Signing time: Mon 02 Jan 2023 05:45:10 +0000
ROA not before: Mon 02 Jan 2023 05:45:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47902
IP address blocks: 84.247.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:28:c8:8a:d6:fd:bf:72:bf:01:65:96:34:78:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 2 05:45:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f932362d1e54aa2de22a836ab29aa0241cb69405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:41:07:77:9b:f1:00:d8:96:bd:3d:3b:8a:
c7:66:2c:7d:10:c3:d9:0d:0a:0c:3e:2a:96:1d:fb:
16:74:14:4f:a4:b8:e4:6e:8e:b1:d2:27:3d:81:12:
ee:5a:7b:43:aa:50:ee:fd:a9:8d:98:49:36:12:dd:
0c:c5:8d:23:05:f6:60:3c:db:3f:84:45:ad:56:2d:
19:12:d3:45:c9:35:9d:75:e7:6d:1f:e3:c8:1d:01:
2a:59:ab:44:9d:4d:77:94:50:ab:61:5b:31:c3:5b:
c4:2a:80:99:45:02:aa:50:59:3a:e4:f3:f6:20:b5:
d0:8c:7a:06:11:13:23:61:8d:86:0e:3d:23:9f:08:
96:97:9b:08:f9:a9:57:3d:58:22:3f:a2:85:96:97:
0c:dd:4e:03:6d:66:0c:4b:c5:c8:84:0c:4c:c8:e4:
80:de:e9:00:56:51:a7:fa:b1:97:55:b2:55:36:0b:
ef:31:4d:43:15:c9:b1:96:20:9f:da:cf:86:b2:06:
43:1e:78:10:f0:64:19:1f:04:0b:ff:09:99:bf:43:
82:e2:15:57:1f:f7:b7:e6:d6:7f:e1:94:1f:e8:1f:
b3:89:4d:87:8f:67:98:d0:ea:ad:7c:9f:9e:78:36:
38:9c:31:38:93:67:e5:16:ba:7d:77:e2:1d:50:cb:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:36:2D:1E:54:AA:2D:E2:2A:83:6A:B2:9A:A0:24:1C:B6:94:05
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/1-TI2LR5Uqi3iKoNqspqgJBy2lAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:f0:23:f6:fe:46:e1:38:29:77:0a:d4:2e:d7:29:8f:d8:29:
a5:6a:d8:a6:85:7d:03:93:cb:3c:11:6a:99:6a:a4:f3:c6:1b:
3e:ea:77:3c:f8:df:e9:e1:e3:c9:fa:33:c7:66:29:0c:e8:33:
4d:2d:c4:e4:0e:96:83:74:11:1a:b5:83:ea:d8:60:69:70:70:
5e:f7:da:c3:7a:5e:5c:93:7e:23:b7:6e:f2:71:b5:17:93:7e:
40:55:56:f3:82:d5:fc:79:a7:b7:c9:51:da:4e:61:c9:11:a8:
fd:4f:1f:ae:4e:b7:27:b6:92:13:72:3e:10:c9:a0:a9:52:34:
b5:95:c0:65:aa:52:6a:de:33:90:fc:32:1e:5c:d9:75:a0:c2:
cf:37:15:8e:63:20:08:27:5b:0c:f0:f2:fd:e7:98:f6:11:31:
3e:c7:24:ad:74:8b:93:47:a6:5e:97:d5:4c:5f:14:bb:bb:c0:
24:31:d7:d4:d0:91:6f:36:2e:6b:c1:0f:d5:fb:3b:91:27:0d:
f4:10:9d:8a:4b:0b:4f:21:73:01:f2:d8:d0:32:03:63:ff:13:
49:af:7e:fb:f9:5d:a8:bf:4e:4f:94:8a:9d:43:20:34:62:1b:
44:10:86:d9:8c:1e:71:b8:17:6f:5d:6d:07:a9:0d:28:28:48:
8d:74:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:17:13 2025 by rpki-client