Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/6FF9t4_RSJ8kXqNfD5hXs310BOA.roa
File: 6FF9t4_RSJ8kXqNfD5hXs310BOA.roa (raw, json)
Hash identifier: KEv8p+TOQmqE6kGWEAIgiwXr/6k9Jd7qHesSvWZHkJA=
Subject key identifier: E8:51:7D:B7:8F:D1:48:9F:24:5E:A3:5F:0F:98:57:B3:7D:74:04:E0
Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958
Certificate serial: 0AC88741
Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/6FF9t4_RSJ8kXqNfD5hXs310BOA.roa
Signing time: Sat 01 Jan 2022 09:53:14 +0000
ROA not before: Sat 01 Jan 2022 09:53:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 513
IP address blocks: 128.141.0.0/16 maxlen: 16
192.65.183.0/24 maxlen: 24
192.65.184.0/21 maxlen: 21
192.65.192.0/22 maxlen: 22
192.65.196.0/23 maxlen: 23
192.91.236.0/22 maxlen: 22
192.91.240.0/22 maxlen: 22
192.91.246.0/24 maxlen: 24
192.91.244.0/23 maxlen: 23
192.16.164.0/23 maxlen: 23
192.16.160.0/22 maxlen: 22
192.16.166.0/24 maxlen: 24
194.12.128.0/18 maxlen: 18
137.138.0.0/16 maxlen: 16
185.249.56.0/22 maxlen: 22
188.184.0.0/16 maxlen: 16
128.142.0.0/16 maxlen: 16
192.16.155.0/24 maxlen: 24
192.16.156.0/22 maxlen: 22
188.185.0.0/16 maxlen: 16
2001:1459::/32 maxlen: 32
2001:1458::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180913985 (0xac88741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958
Validity
Not Before: Jan 1 09:53:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8517db78fd1489f245ea35f0f9857b37d7404e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:46:08:b6:3b:49:1b:77:0d:77:e6:19:23:
06:d9:68:60:7a:a7:4d:dd:be:e8:b0:c3:d3:73:b0:
b1:06:6d:5f:d6:b0:e0:35:85:d9:89:82:47:22:1b:
f5:c3:58:63:9a:f8:91:48:26:84:41:37:33:4b:1b:
21:fb:53:2e:ca:c6:33:a6:42:74:30:9b:c7:04:e4:
bf:f2:f0:9f:55:c0:c3:ce:90:f1:82:1c:0f:fb:ea:
80:40:95:f7:33:13:ef:f3:31:6a:13:cf:cb:97:2f:
7d:48:b4:27:65:68:4f:3e:19:ee:28:57:e7:f2:45:
47:66:8c:21:6a:00:42:32:a7:44:97:51:03:02:6b:
a4:97:4d:dd:e6:be:d6:bf:b4:90:5f:aa:ee:69:03:
78:fe:85:45:3d:42:9b:9b:dc:e0:0c:2f:61:68:54:
08:a5:11:ff:5f:2e:48:61:51:d2:36:be:ac:79:ff:
e0:a7:4e:0f:bf:06:eb:e1:d6:c4:7c:18:a0:3f:06:
13:89:6d:ff:81:c5:b2:ab:c9:db:97:0b:54:f2:9d:
32:ed:ff:f9:d4:fd:59:78:e9:e2:a7:a2:02:ed:b0:
42:d5:c6:93:95:c3:80:83:d4:31:e4:ba:2d:43:27:
94:01:ee:e0:41:af:06:6c:ff:53:c5:68:42:48:e9:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:7D:B7:8F:D1:48:9F:24:5E:A3:5F:0F:98:57:B3:7D:74:04:E0
X509v3 Authority Key Identifier:
keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/6FF9t4_RSJ8kXqNfD5hXs310BOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.141.0.0-128.142.255.255
137.138.0.0/16
185.249.56.0/22
188.184.0.0/15
192.16.155.0-192.16.166.255
192.65.183.0-192.65.197.255
192.91.236.0-192.91.246.255
194.12.128.0/18
IPv6:
2001:1458::/31
Signature Algorithm: sha256WithRSAEncryption
2e:42:16:ce:60:6a:e4:97:59:ab:20:9f:ab:7e:4b:98:62:07:
8a:ee:84:d7:7f:e6:c0:6f:90:3d:b8:1b:2d:17:7c:d3:9a:cc:
bf:40:ae:49:67:8a:0f:bd:5f:35:a0:e5:96:c4:ea:d8:ab:0b:
82:a1:86:75:1e:0e:d6:ed:9e:8c:cc:65:44:3d:44:6f:06:f5:
d3:b4:9a:a6:dc:1a:8d:db:1d:48:d4:42:f3:16:9a:21:35:7f:
9c:85:b4:e4:dc:77:fd:d2:e7:68:08:53:17:4b:7d:09:b8:4c:
ab:25:e5:05:83:6d:88:f6:a5:39:ca:ec:cc:89:ba:a1:f1:73:
45:e6:67:3f:eb:e1:de:54:ee:05:05:91:76:b0:db:c4:66:6d:
87:b1:49:e6:b8:c3:ac:b1:07:07:e4:00:76:2d:e6:15:5d:bf:
97:76:e5:16:d1:aa:a1:f6:cd:ee:3d:ab:12:ad:77:08:dd:be:
47:47:3a:12:a7:f8:42:0e:29:f3:0f:f9:c4:d6:89:95:c7:93:
b1:36:4b:16:b2:94:3e:2d:73:33:37:52:65:a2:a1:f6:24:98:
2a:73:be:1e:f1:0e:55:a9:75:ef:c3:59:35:1f:3f:12:a9:09:
1a:c5:b2:b7:57:71:14:b9:29:a1:5e:eb:8d:98:ef:5b:3c:04:
8c:1b:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:14 2025 by rpki-client