Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/a_S6-I3zOt-nIVykhv3CkFZrH9g.roa
File: a_S6-I3zOt-nIVykhv3CkFZrH9g.roa (raw, json)
Hash identifier: gc8AjiiF0CBgKWp4BwCLz1t4NLVtRuS7dikQpGsgg1E=
Subject key identifier: 6B:F4:BA:F8:8D:F3:3A:DF:A7:21:5C:A4:86:FD:C2:90:56:6B:1F:D8
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 07DCFF13
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/a_S6-I3zOt-nIVykhv3CkFZrH9g.roa
Signing time: Sat 01 Jan 2022 15:02:33 +0000
ROA not before: Sat 01 Jan 2022 15:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 82.115.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131923731 (0x7dcff13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 1 15:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bf4baf88df33adfa7215ca486fdc290566b1fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:97:48:a5:fb:77:fa:c3:d9:20:fc:1e:3a:
40:a3:4a:49:07:55:d6:8b:53:e8:46:88:1b:f3:62:
be:48:ea:79:4e:59:ff:ee:91:8f:c7:1d:56:ce:68:
9f:1a:04:2e:81:d8:33:85:60:c4:d1:66:84:f7:3a:
e2:3a:dc:00:01:b7:a2:ac:fe:c2:44:10:36:f8:a0:
6d:d9:99:d6:39:9f:5b:c1:57:cc:65:59:9d:f5:50:
01:c9:de:29:50:b9:6d:3b:35:45:9b:33:cf:7a:1d:
42:0e:b4:cc:f7:31:51:99:29:6c:31:31:07:52:70:
68:b3:3c:fe:37:1d:d6:44:5e:5e:61:63:23:2b:32:
b0:73:eb:b3:ee:5c:f8:4e:6b:5d:41:66:60:ec:f4:
cc:93:c4:86:7e:a4:f7:dd:1e:32:9c:23:0f:81:16:
5c:50:5f:cd:c3:72:9e:a6:c6:51:4e:8e:43:5a:8d:
cf:99:c0:7e:34:03:49:64:b4:56:d5:6f:5a:14:6e:
dc:64:d1:fa:40:8e:74:2e:86:10:88:e7:f4:a6:b0:
c5:b3:65:b9:77:10:db:dd:4d:ad:02:02:4f:3f:3d:
bb:91:30:30:e1:df:2b:e2:f9:50:5a:09:47:a4:a0:
db:7b:53:e6:31:5a:da:70:1b:9a:cc:d3:de:2c:a7:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:BA:F8:8D:F3:3A:DF:A7:21:5C:A4:86:FD:C2:90:56:6B:1F:D8
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/a_S6-I3zOt-nIVykhv3CkFZrH9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fb:74:b6:72:61:7f:9e:da:b7:c3:23:02:84:68:72:5f:41:
37:41:14:73:b6:0e:d4:ee:e9:06:33:2a:50:e5:7f:ee:07:03:
ef:4a:ba:47:b3:2b:db:9d:68:a4:44:0b:c9:6b:06:3c:6f:89:
35:03:dc:32:9a:83:d0:c4:49:24:81:8c:42:d8:39:5c:d1:6b:
57:18:c2:6a:c2:23:38:7b:60:e7:be:58:c9:4c:ca:ca:dd:ba:
6f:88:4d:4a:a3:41:2b:ed:f3:21:a6:c8:7c:69:6c:50:d0:81:
b2:51:a1:8e:bc:e2:85:d4:1d:e8:1e:bf:31:59:15:24:85:4e:
63:86:5b:70:1f:5b:f3:8f:f8:a7:93:7d:a1:a1:ad:78:72:15:
0a:5e:03:0b:28:22:c4:a0:90:27:f2:fb:dd:7e:1d:1d:e9:1f:
72:02:34:0b:4e:38:6f:f6:bf:f8:02:75:20:69:25:7a:f3:8c:
73:86:76:48:b2:1d:d4:43:d8:64:46:d6:08:02:1c:51:8f:6b:
87:91:95:39:67:ff:77:51:bf:c3:8e:a0:60:4e:91:77:29:9e:
db:76:2d:08:65:24:ac:21:eb:fb:0e:bd:b4:65:cd:67:7e:07:
76:68:15:06:15:2f:a3:17:ce:fb:10:6f:5a:05:7d:e1:a1:77:
57:cb:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:57 2024 by rpki-client on console-ams.rpki-client.org