Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/2mG-CLF7P8umzRTqQSZF-RKM6Pc.roa
File: 2mG-CLF7P8umzRTqQSZF-RKM6Pc.roa (raw, json)
Hash identifier: +CfdFRgnduMRvvwCObEDlzTeUC2TNLgbPSm2TWJEDYU=
Subject key identifier: DA:61:BE:08:B1:7B:3F:CB:A6:CD:14:EA:41:26:45:F9:12:8C:E8:F7
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 0572EFBC
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/2mG-CLF7P8umzRTqQSZF-RKM6Pc.roa
Signing time: Sat 01 Jan 2022 06:59:13 +0000
ROA not before: Sat 01 Jan 2022 06:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61315
IP address blocks: 93.101.80.0/20 maxlen: 24
93.101.96.0/20 maxlen: 24
93.101.112.0/20 maxlen: 24
93.101.16.0/20 maxlen: 24
93.101.240.0/20 maxlen: 24
93.101.32.0/20 maxlen: 24
93.101.48.0/20 maxlen: 24
93.101.64.0/20 maxlen: 24
93.101.176.0/20 maxlen: 24
93.101.192.0/20 maxlen: 24
93.101.208.0/20 maxlen: 24
93.101.224.0/20 maxlen: 24
93.101.128.0/20 maxlen: 24
93.101.144.0/20 maxlen: 24
93.101.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91418556 (0x572efbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 1 06:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da61be08b17b3fcba6cd14ea412645f9128ce8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:b1:9a:08:38:3c:3b:04:e6:46:24:f6:44:
77:3c:ad:2b:4b:c9:69:7f:9f:00:43:26:89:c7:63:
58:81:8d:bc:b6:5b:5c:20:6a:30:1e:cd:89:4e:d7:
f8:3b:c4:b6:cc:f3:98:b5:b4:72:d3:92:d4:71:f6:
86:63:59:f2:e9:9d:d5:44:e9:73:fc:fe:27:fe:93:
08:4a:e8:0d:d9:4e:e7:9e:ea:a6:71:4c:52:c5:d8:
b2:fe:5b:fa:83:8e:46:c1:ff:e9:95:c3:99:c2:04:
e1:5f:7a:9e:ea:b8:d9:72:f3:a9:28:d9:56:f9:d5:
6b:e4:2b:5d:d0:58:ee:5a:3b:9a:77:f4:73:58:65:
4a:72:cb:41:49:fc:9d:3e:5e:1b:4b:82:44:1e:f5:
b2:d6:0e:63:ce:91:ea:31:16:21:f5:2e:c0:6d:c8:
8f:35:d6:97:05:d9:70:fd:21:2e:d8:ab:29:4f:77:
5c:fa:2e:24:d4:5e:8b:4c:68:21:63:d3:77:f0:d3:
1d:14:97:91:88:37:11:68:2b:bc:2d:d7:93:d3:e2:
12:b9:14:f7:7f:f9:26:f8:08:e1:23:d1:c0:a0:70:
5d:01:75:52:6b:56:56:b6:c9:a2:2e:fe:ca:d0:af:
79:8e:73:31:94:e9:18:00:ca:dd:18:dd:39:1a:46:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:61:BE:08:B1:7B:3F:CB:A6:CD:14:EA:41:26:45:F9:12:8C:E8:F7
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/2mG-CLF7P8umzRTqQSZF-RKM6Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.16.0-93.101.255.255
Signature Algorithm: sha256WithRSAEncryption
25:4f:c6:ac:5e:ee:04:7d:16:36:fe:d4:54:14:28:e0:3e:97:
fd:eb:99:c6:f9:47:37:0f:bc:90:9c:e0:d0:1e:95:5d:55:0d:
4e:58:a9:70:1c:4a:2d:ed:1e:2d:10:1a:68:cd:9c:b1:5f:06:
9b:63:db:7a:3f:93:a1:8a:2d:e6:63:2d:9a:ae:1f:3f:78:bd:
36:b5:50:cf:16:50:c3:6b:fd:5e:69:1c:47:34:63:1f:17:42:
95:e3:e6:9e:47:5e:92:ca:d1:62:a1:c4:65:54:4f:f8:f2:f5:
e5:00:5a:4a:f0:db:52:fe:7c:ce:87:09:53:97:65:39:c0:cb:
76:f3:2b:6b:07:71:71:b4:41:00:61:84:fe:58:ab:89:1d:de:
33:a1:89:af:1a:4a:94:73:5e:6c:21:ba:43:42:be:f1:bc:b8:
80:a2:73:1f:13:53:0e:dd:32:c1:85:95:c4:4e:b1:19:f7:f3:
17:6b:62:f4:38:87:73:7b:d0:dc:4b:0e:91:6d:ab:33:d1:16:
f9:b6:16:3f:cc:cc:e0:da:de:d0:65:f7:0b:59:63:24:31:00:
16:40:c2:f5:9a:c1:d8:4d:6c:c3:a3:ba:d0:9c:1d:dd:07:01:
e5:bf:9d:99:d9:58:db:bb:09:8b:ce:a2:2b:ad:3d:0f:82:7c:
9c:c6:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:47:06 2025 by rpki-client