Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/J-3rFzMJ5tygC81C6HEbMIV2d_Y.roa
File: J-3rFzMJ5tygC81C6HEbMIV2d_Y.roa (raw, json)
Hash identifier: mMVhF2WQOIWD3AthhDkWgoAQO86zTMcxqNP6Rih3u+4=
Subject key identifier: 27:ED:EB:17:33:09:E6:DC:A0:0B:CD:42:E8:71:1B:30:85:76:77:F6
Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Certificate serial: 01856F8B8A5A53A69A1BDA43D6263BA1AB75
Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/J-3rFzMJ5tygC81C6HEbMIV2d_Y.roa
Signing time: Sun 01 Jan 2023 22:54:53 +0000
ROA not before: Sun 01 Jan 2023 22:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.64.6.0/24 maxlen: 24
2a10:2307:fffd::/48 maxlen: 48
2a10:2307:ffff::/48 maxlen: 48
2a10:2307:fffe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:8a:5a:53:a6:9a:1b:da:43:d6:26:3b:a1:ab:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2
Validity
Not Before: Jan 1 22:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27edeb173309e6dca00bcd42e8711b30857677f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:1e:8c:6e:e3:31:af:54:c1:3b:91:83:40:
e2:a6:72:95:c1:82:e7:61:25:3d:53:de:aa:da:a6:
66:d5:1c:22:e9:88:08:6f:3c:3e:10:11:6c:75:a7:
d8:df:e9:c0:24:d7:47:31:7c:63:74:be:29:8f:3c:
a1:d1:c7:83:f8:e0:b3:c5:df:5e:8b:1a:f4:62:31:
b2:6e:db:fe:cd:c7:92:b0:ab:35:b2:06:0b:d1:60:
e2:27:65:f2:e2:bc:b2:7e:e0:c3:83:ee:c1:5e:11:
9f:a3:22:bf:7a:9b:dd:0b:d6:3d:1c:65:50:50:1a:
10:84:e0:1a:6a:03:1b:04:d5:15:3c:53:37:97:11:
c4:ae:90:a8:19:84:16:e0:31:0a:09:5d:e3:34:48:
fe:ab:06:74:47:80:9e:2b:3b:22:e2:db:14:86:cf:
9a:91:ad:fc:06:0c:d6:02:85:bb:02:d9:6f:97:97:
61:98:11:f8:6f:f6:9d:44:46:7d:2a:f5:ce:00:69:
5c:7c:bb:e1:3c:0f:55:6b:29:25:d3:2c:27:6b:87:
48:c5:6d:bb:48:c8:b3:b4:7b:fb:4c:9c:25:4f:bc:
d6:e4:2a:32:6b:44:44:b7:fc:e1:46:8b:fb:f5:e6:
2d:ba:d7:8f:54:62:c2:2b:39:87:d0:2a:71:4e:36:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:ED:EB:17:33:09:E6:DC:A0:0B:CD:42:E8:71:1B:30:85:76:77:F6
X509v3 Authority Key Identifier:
keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/J-3rFzMJ5tygC81C6HEbMIV2d_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.6.0/24
IPv6:
2a10:2307:fffd::-2a10:2307:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:27:5a:6c:8a:82:19:84:32:4e:af:73:c5:41:81:e9:7e:23:
54:13:a9:e3:25:90:f2:0d:a4:8c:17:bf:b9:6f:06:a5:04:3d:
68:7b:cc:e3:27:ab:36:50:a9:3b:89:87:11:49:15:70:d8:42:
8e:64:17:8e:19:43:5d:a8:45:89:a5:36:7f:0a:51:83:b8:dc:
da:28:5b:ac:cc:db:cc:b6:a9:39:1e:72:77:c4:18:ce:13:02:
96:a6:33:b1:f6:50:6c:2b:73:cb:44:64:4c:a5:84:00:94:9c:
4c:0a:d8:39:5b:ce:51:99:28:14:b5:e7:b4:64:6e:29:94:3f:
06:2d:5d:3d:be:1c:9d:36:73:85:0d:19:f3:fd:e9:2d:5c:a3:
ec:b9:96:81:38:e8:f8:77:b4:4f:2f:c2:9c:db:25:f0:04:cb:
db:bc:15:05:72:1d:f4:9e:32:d5:4f:78:8d:a0:ac:ba:20:08:
2e:8a:0a:83:8a:51:1f:9a:af:7b:e4:54:f6:45:ec:16:19:88:
9c:79:71:f9:8a:b4:f8:13:b8:9a:4f:32:30:71:c9:71:72:87:
d7:91:23:de:25:b7:fb:ea:c5:16:b4:10:db:f3:38:fa:65:c3:
85:cf:9a:ad:cb:98:80:6a:78:c9:5b:27:50:e2:b4:d9:f0:0a:
1b:f6:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:03:07 2025 by rpki-client