Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/v6vsZWrqGXgJPBPFeETrUsTF-FQ.roa
File: v6vsZWrqGXgJPBPFeETrUsTF-FQ.roa (raw, json)
Hash identifier: cQy93eBKXYzFva/lkVveDo0A8+UOe6LVrgep5g7MDd8=
Subject key identifier: BF:AB:EC:65:6A:EA:19:78:09:3C:13:C5:78:44:EB:52:C4:C5:F8:54
Certificate issuer: /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial: 01856B0A393B1312754D27000622B54B0F35
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/v6vsZWrqGXgJPBPFeETrUsTF-FQ.roa
Signing time: Sun 01 Jan 2023 01:55:10 +0000
ROA not before: Sun 01 Jan 2023 01:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202191
IP address blocks: 185.26.211.0/24 maxlen: 24
185.26.210.0/24 maxlen: 24
185.26.210.0/23 maxlen: 23
193.53.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:39:3b:13:12:75:4d:27:00:06:22:b5:4b:0f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Validity
Not Before: Jan 1 01:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfabec656aea1978093c13c57844eb52c4c5f854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:8c:10:5a:b3:c8:cc:14:67:c5:74:02:ff:
04:df:4f:6f:23:92:0c:56:37:b6:83:f6:46:b7:2a:
94:4b:3c:c3:71:c7:f6:00:cd:72:3c:2f:96:6f:12:
d9:f6:5b:6e:15:09:9b:c4:f0:9a:8f:98:6d:18:91:
38:b9:c5:38:8d:9d:0a:3f:2c:98:75:4c:71:89:81:
c8:20:46:e7:8d:52:e9:51:c1:65:5f:c8:f8:17:a6:
30:e8:c7:12:c1:51:df:5f:58:d6:c1:78:84:40:3a:
a9:8d:e7:cf:8d:52:54:cc:9b:7e:1d:f2:9b:17:13:
db:c8:15:1c:00:66:e1:d0:34:d3:3d:58:60:bd:da:
bd:06:e9:7c:55:a4:dd:7f:cc:97:cb:4a:da:69:27:
18:de:a3:24:79:9d:7b:66:93:9a:76:3a:f8:7c:d8:
6a:a5:7b:b5:27:48:1d:a8:6b:95:3b:66:1c:5b:96:
a1:b4:2a:fc:cd:d9:51:0d:29:32:56:9b:db:84:7f:
35:8f:97:c4:51:ab:5d:f1:27:72:d3:86:ac:d6:31:
1f:35:1b:fc:fb:65:a6:9e:c0:34:93:44:ae:e1:34:
38:02:7c:42:19:99:e9:62:4f:ed:50:aa:d9:8f:da:
0a:01:33:2b:81:7d:bb:25:7c:8e:98:3a:b6:41:d7:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:EC:65:6A:EA:19:78:09:3C:13:C5:78:44:EB:52:C4:C5:F8:54
X509v3 Authority Key Identifier:
keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/v6vsZWrqGXgJPBPFeETrUsTF-FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.210.0/23
193.53.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b0:d0:f6:88:6a:62:3e:1a:80:49:5a:cb:31:ae:99:9b:db:
aa:ce:72:55:6f:71:55:ad:06:bb:f3:d8:48:4f:c4:5e:12:61:
f3:62:81:f9:7f:e3:a6:2f:2f:f8:e5:6c:97:ab:56:e0:b5:da:
04:ca:81:26:48:5d:b5:cc:51:a4:2e:c4:cf:03:ed:a4:b7:cf:
82:15:6e:c8:26:04:fb:ba:ec:d9:a8:96:11:a3:90:d4:25:8c:
cd:55:64:8b:aa:2a:7b:ed:e1:31:71:06:e3:78:35:02:75:fe:
ca:fb:68:d2:34:8b:f7:bc:0f:91:af:c7:e2:71:78:af:39:47:
29:72:2f:ce:c4:c4:13:06:70:3b:67:4f:8a:fd:04:36:68:8f:
43:50:24:b5:97:5a:f4:83:af:57:9a:2a:50:c9:d8:e4:30:07:
ec:0c:b1:39:24:4e:62:d4:9a:22:61:cd:08:6b:10:4b:5f:a1:
5c:d5:1d:7c:44:e9:67:15:bb:cc:25:3c:06:37:c8:3e:88:75:
68:78:e2:01:79:37:f8:7f:7a:22:e6:4e:aa:99:65:cc:bf:c5:
20:42:98:ca:53:e8:a9:53:e4:7d:b6:05:ff:85:dc:57:20:83:
67:d3:fd:fa:1d:fe:96:49:a3:5d:52:b1:8c:8f:73:a5:59:fb:
c9:81:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:08:58 2025 by rpki-client