Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/1ixI-P1aLot21Ecq-j_bFbkA_mo.roa
File: 1ixI-P1aLot21Ecq-j_bFbkA_mo.roa (raw, json)
Hash identifier: XGkQ8b5ZW7Mh4Oc6iUZJrlmPNLQj7wYTnQ5SzRUgDjo=
Subject key identifier: D6:2C:48:F8:FD:5A:2E:8B:76:D4:47:2A:FA:3F:DB:15:B9:00:FE:6A
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 25BB76
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/1ixI-P1aLot21Ecq-j_bFbkA_mo.roa
Signing time: Sat 01 Jan 2022 01:53:16 +0000
ROA not before: Sat 01 Jan 2022 01:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 194.147.69.0/24 maxlen: 24
194.147.68.0/24 maxlen: 24
194.124.191.0/24 maxlen: 24
2a0a:aec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472822 (0x25bb76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: Jan 1 01:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d62c48f8fd5a2e8b76d4472afa3fdb15b900fe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:93:6f:5c:d7:79:e8:d2:f3:12:32:70:02:
37:82:63:89:d8:3f:39:f8:cd:5e:f8:10:f8:88:49:
08:d1:c6:34:19:40:2b:a6:33:da:06:8a:58:6f:72:
3d:4d:e9:d9:ee:62:cf:34:ca:9b:94:a1:54:b5:87:
f9:ca:19:fe:1c:56:4f:18:a9:89:23:f5:72:41:33:
d0:9c:7c:7c:a8:b7:e7:c4:12:3a:4a:f4:0e:46:22:
fd:36:42:46:f9:b7:ae:fa:83:05:2b:0d:81:bf:f9:
8d:37:c9:74:e7:5a:c8:e3:cd:4c:53:4e:bc:d2:db:
12:39:e8:b1:7c:87:18:40:f5:3c:be:0d:10:ee:92:
7c:3b:0e:a0:88:87:5c:5e:14:ef:d4:f7:41:1d:42:
26:b3:fc:32:dd:12:89:59:cb:6a:07:ab:94:88:de:
18:8d:70:04:e5:be:f6:12:fd:6d:a1:e5:89:68:f5:
4b:e7:ed:55:01:2c:94:7f:d3:68:55:e7:29:ac:df:
eb:85:66:00:ad:4f:39:d0:a6:1e:da:6a:3e:31:3d:
ed:33:e0:2f:6c:16:be:e1:5d:a8:5a:b0:6d:62:0f:
15:a8:97:86:f5:86:c4:42:7c:6e:9f:c2:e8:85:65:
f7:85:bd:fc:2c:a2:9c:38:5f:fd:63:33:32:1c:93:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:48:F8:FD:5A:2E:8B:76:D4:47:2A:FA:3F:DB:15:B9:00:FE:6A
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/1ixI-P1aLot21Ecq-j_bFbkA_mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.191.0/24
194.147.68.0/23
IPv6:
2a0a:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:ac:56:c8:a5:9c:8e:db:a2:cc:75:66:89:3d:6e:80:d7:f4:
e8:13:50:82:e1:fd:ab:64:d1:b3:de:ed:63:6b:25:19:50:bf:
32:6c:57:36:cd:6e:2e:1c:a2:e7:68:4e:13:72:a5:51:26:33:
43:ff:fa:cc:92:11:48:df:5d:da:ec:03:d1:db:ae:db:00:0a:
95:0e:c5:ee:f8:4f:7c:2d:28:24:f4:a8:1e:71:12:87:37:eb:
48:d9:54:ff:01:fe:0b:49:fe:24:93:bc:35:4e:3a:fa:27:ef:
d9:6b:1e:cc:dd:54:69:2c:f7:bf:97:8b:7d:f8:7e:3a:bb:bf:
a5:58:75:5d:65:98:e9:30:71:4e:86:bf:cc:62:7a:75:b2:57:
8f:27:37:3d:41:cc:3b:49:dc:fb:46:ed:ec:df:54:02:2c:00:
31:87:23:4b:97:6b:73:11:e2:d2:f5:f4:60:a9:e4:f1:61:9a:
d9:d4:63:88:97:ff:dc:7a:e4:fc:4e:f2:a0:3b:9d:f0:48:c5:
6e:ec:71:79:6d:e4:f6:18:92:37:52:b9:34:2d:a7:97:09:c1:
27:60:95:55:05:17:41:05:7e:ac:9f:3a:13:30:3f:c5:52:5a:
43:46:9a:84:50:5c:a7:ee:cb:da:08:24:01:f4:af:ae:53:14:
d9:c0:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:30 2024 by rpki-client on console-ams.rpki-client.org