Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/oP6EUGMq6vWuOW8MUgDYGKNJdyQ.roa
File: oP6EUGMq6vWuOW8MUgDYGKNJdyQ.roa (raw, json)
Hash identifier: e2PpK/9A6CxraDn21v+t4kuIWljU73rW/nqBdrc6EzE=
Subject key identifier: A0:FE:84:50:63:2A:EA:F5:AE:39:6F:0C:52:00:D8:18:A3:49:77:24
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 01833630C826EC8F5DD9196B83D148AD29CB
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/oP6EUGMq6vWuOW8MUgDYGKNJdyQ.roa
Signing time: Tue 13 Sep 2022 09:31:50 +0000
ROA not before: Tue 13 Sep 2022 09:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39691
IP address blocks: 185.234.224.0/22 maxlen: 22
185.234.224.0/23 maxlen: 23
185.234.224.0/24 maxlen: 24
185.234.225.0/24 maxlen: 24
185.234.226.0/24 maxlen: 24
185.234.227.0/24 maxlen: 24
2a0d:2f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:30:c8:26:ec:8f:5d:d9:19:6b:83:d1:48:ad:29:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Sep 13 09:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0fe8450632aeaf5ae396f0c5200d818a3497724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:3c:e9:c4:e0:a7:46:fc:6d:0f:e5:8e:77:
9c:bc:cd:2b:3f:e9:3e:71:d5:72:e6:0a:d6:df:9b:
59:f0:c6:3f:6c:fb:0a:98:d8:f5:a8:29:28:8e:dd:
99:d0:5d:62:6e:f9:64:bb:2e:e8:96:c4:e9:b6:73:
54:52:c8:31:3d:da:6a:04:74:e2:b7:c0:c1:39:cc:
5d:af:76:0d:ea:ca:c4:2f:06:24:57:68:42:0a:9e:
3a:a5:77:4f:ad:08:ea:38:07:14:0c:20:b5:94:01:
4a:c7:82:dd:6d:20:56:ad:44:12:b7:f1:99:43:16:
c7:28:ac:46:13:14:75:06:6c:64:3f:25:f1:16:a6:
ca:c3:90:99:56:18:e4:bf:7e:ea:c1:e6:fe:29:f3:
95:59:37:91:0a:b2:72:0d:e5:00:dc:39:a2:7f:d7:
6c:9e:7d:fa:8e:43:25:a0:d2:da:0c:89:d0:7d:86:
78:67:32:8c:50:a4:ec:94:90:56:e7:93:64:b7:aa:
95:ad:2e:2b:f1:56:5f:59:56:2b:48:d1:92:4f:72:
9a:bb:e5:ee:2b:d6:56:8c:99:37:53:10:25:ae:ac:
32:8a:2c:f5:a1:36:da:ed:e0:5c:df:76:ad:d8:81:
28:0a:a2:14:83:2b:fa:8b:33:5f:3a:c4:0f:52:23:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:84:50:63:2A:EA:F5:AE:39:6F:0C:52:00:D8:18:A3:49:77:24
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/oP6EUGMq6vWuOW8MUgDYGKNJdyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.224.0/22
IPv6:
2a0d:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
da:9d:8d:b1:65:01:71:73:b4:aa:1e:d8:88:ed:2b:8a:93:8f:
06:37:ad:cd:aa:00:2e:11:ec:a2:89:b9:67:dd:62:5d:d7:1d:
9f:92:22:26:74:0d:6c:fc:a3:5f:87:5b:d9:76:43:d9:f4:83:
3e:e7:52:7e:cf:71:80:60:82:c6:db:1a:f1:ce:22:4e:fb:c5:
c3:03:6c:d8:33:aa:0f:16:68:bd:0a:11:51:cb:36:fc:45:02:
c8:0a:37:62:1b:c2:ce:03:df:36:ab:7d:4c:58:41:c6:d8:b7:
8d:01:a2:36:4e:67:af:58:6b:fd:65:fc:0b:78:98:59:40:97:
93:6c:7a:f0:cc:90:7a:3b:90:c9:c6:91:5b:15:07:4e:aa:09:
69:ab:be:68:e4:4b:b7:6e:c5:bc:56:74:48:07:3f:8f:cb:fb:
b2:01:57:be:0f:97:b2:50:d3:a1:85:42:f0:88:cd:ba:2b:7a:
ed:7c:a7:91:d5:72:57:38:2f:4c:b1:4d:7f:25:14:1b:49:67:
67:4f:26:e2:a2:da:b1:62:4f:be:6b:03:87:38:4e:b2:18:cb:
6f:de:7e:60:ef:60:98:b4:cc:b2:ee:f7:ac:0c:96:ac:87:14:
ae:30:14:d2:02:f4:58:e3:99:6d:fe:c0:54:12:db:e1:7d:95:
4a:6f:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:11 2025 by rpki-client