Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa
File: 6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa (raw, json)
Hash identifier: 46hILNW9vNy6rDMwURsS7l6lFHV4bFpglTa8LCjFEeo=
Subject key identifier: E8:CA:E6:F3:B3:78:31:DD:28:CA:8D:7E:D1:B2:1E:24:AF:04:77:24
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 424FD60B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa
Signing time: Sat 01 Jan 2022 14:02:54 +0000
ROA not before: Sat 01 Jan 2022 14:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1881
IP address blocks: 192.71.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112528395 (0x424fd60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8cae6f3b37831dd28ca8d7ed1b21e24af047724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:7c:df:1b:dd:57:c8:f3:2e:a4:eb:92:e1:
f5:26:5d:44:1e:a2:35:19:d9:5c:f8:4a:0a:b5:12:
28:c4:fb:29:ec:5c:37:ea:0c:41:a6:81:ff:d1:6e:
b2:56:31:b8:e6:46:18:47:9c:6b:fa:f7:c6:fe:9a:
c5:7f:8e:22:00:69:e1:4f:67:95:4a:ef:12:66:5d:
73:3a:39:cd:d9:b2:11:76:17:e2:4e:d0:72:08:66:
55:8e:c3:7a:03:1d:7d:18:78:81:71:43:af:aa:d0:
6f:17:40:ed:75:c3:2a:2b:dc:e1:8f:e6:72:ca:d3:
73:75:4f:fb:09:90:da:49:72:e0:51:43:64:53:3d:
1a:01:86:f7:96:5f:9e:22:8a:1b:be:e9:74:0f:6c:
39:20:8e:2e:b9:ce:d8:72:1b:66:74:53:e3:8e:48:
d0:64:ca:ed:ae:f5:34:16:9b:11:b2:bb:ea:89:c4:
cf:09:91:1b:3f:54:26:50:5f:a5:a3:fd:3a:8b:c3:
36:41:59:d7:4c:ed:39:d4:ef:cb:60:96:4c:89:91:
6d:43:5e:40:c5:4e:07:1f:4f:c7:04:02:27:f3:88:
22:40:30:a4:4f:2b:74:a9:d3:b0:dd:16:dd:ae:92:
0a:ec:9d:fe:b9:4b:c9:90:3d:ca:60:e5:70:66:f6:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:E6:F3:B3:78:31:DD:28:CA:8D:7E:D1:B2:1E:24:AF:04:77:24
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6Mrm87N4Md0oyo1-0bIeJK8EdyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.128.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2b:28:af:30:3c:a4:64:ed:f6:8e:dc:cb:50:3b:4b:59:49:
ac:23:1d:be:e4:22:06:19:ab:7d:b6:3e:cb:7d:14:bc:74:4b:
33:e4:1d:58:a2:8a:21:0b:aa:70:f9:89:87:2f:83:aa:ea:9e:
c3:6c:f7:3a:bf:9b:06:19:29:84:ca:1c:a1:e5:45:96:b6:07:
b4:45:ae:6c:5a:e1:66:3b:9d:df:42:4b:bf:84:9f:af:82:7a:
25:9a:12:db:cc:4f:f8:83:29:bc:a5:89:6a:e5:fb:ca:96:9b:
ae:52:b0:ab:c7:92:5a:e3:69:d6:37:f5:b9:32:c3:dc:f5:bd:
28:6c:5b:89:40:52:fb:24:83:c2:24:55:d9:be:a7:d8:f7:ba:
e7:41:53:43:da:65:83:47:03:34:9c:33:8f:2e:61:06:6a:13:
18:29:cc:41:2e:d2:7e:df:04:2e:bf:16:f6:22:bf:27:4e:3b:
7b:54:a3:5b:04:f6:61:61:66:07:11:44:95:bf:e6:cc:d4:d0:
72:98:96:04:86:16:5e:83:92:7c:88:d6:93:4d:e6:48:92:0e:
4c:16:69:dc:71:94:a1:fb:f4:dc:6d:6c:22:8f:4a:90:90:ab:
e4:21:b4:d9:b0:c4:e2:da:06:2d:e8:ef:eb:58:9f:95:be:98:
57:5e:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:52:07 2025 by rpki-client