Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/a6myFVXnYZYc_sMHiuiVMt6McNY.roa
File: a6myFVXnYZYc_sMHiuiVMt6McNY.roa (raw, json)
Hash identifier: UdYWyLSCfcx8GKYzKCNgn5BtLok+mA7OeQJKNv/nGWw=
Subject key identifier: 6B:A9:B2:15:55:E7:61:96:1C:FE:C3:07:8A:E8:95:32:DE:8C:70:D6
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 1C6FA07F
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/a6myFVXnYZYc_sMHiuiVMt6McNY.roa
Signing time: Sat 01 Jan 2022 06:53:19 +0000
ROA not before: Sat 01 Jan 2022 06:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34573
IP address blocks: 78.140.35.0/24 maxlen: 24
78.140.34.0/24 maxlen: 24
78.140.33.0/24 maxlen: 24
78.140.32.0/20 maxlen: 20
78.140.32.0/24 maxlen: 24
78.140.38.0/24 maxlen: 24
78.140.37.0/24 maxlen: 24
78.140.36.0/24 maxlen: 24
78.140.42.0/24 maxlen: 24
78.140.41.0/24 maxlen: 24
78.140.40.0/24 maxlen: 24
78.140.39.0/24 maxlen: 24
78.140.44.0/24 maxlen: 24
78.140.43.0/24 maxlen: 24
78.140.47.0/24 maxlen: 24
78.140.46.0/24 maxlen: 24
78.140.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477077631 (0x1c6fa07f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 1 06:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ba9b21555e761961cfec3078ae89532de8c70d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:2d:f3:b3:c6:c4:df:1f:04:52:2d:ae:37:
db:04:00:63:5b:ff:5d:1d:f9:bd:83:f7:6c:d0:f2:
1e:6d:eb:e8:fd:96:a5:3e:01:5f:a7:ee:19:e0:20:
d6:bc:66:2d:5e:ec:d0:3b:e5:51:f6:7e:a8:03:dc:
a6:45:cd:1d:c3:e3:f1:16:48:4e:91:12:01:71:ec:
08:47:58:e5:3a:0f:0d:6a:32:24:82:c4:f1:d4:3b:
53:38:bc:24:a7:17:a3:e7:73:3b:9b:07:e3:36:fa:
5f:16:23:a7:9e:75:93:c8:33:f2:a3:65:d9:8a:a6:
55:42:90:d7:2e:8c:8d:a2:90:2e:1b:74:5f:41:16:
72:d1:02:e3:e3:28:97:eb:a2:91:8e:e3:33:c9:0f:
e2:14:fe:b2:7d:5e:14:a9:09:b9:80:16:ef:cf:52:
25:ff:b8:2e:b1:4b:c3:e0:8b:2c:b0:cb:ae:9b:3e:
fb:c0:9b:bf:65:f8:ea:ab:ea:37:34:e4:dc:30:93:
64:f3:12:71:cd:08:53:50:b7:53:27:cf:17:b4:b4:
01:4d:8f:42:ed:3b:38:55:dc:09:17:d4:48:2b:d4:
b9:11:c3:1a:18:93:46:fb:f9:f1:18:32:3e:28:31:
56:da:86:ce:3e:a7:c1:22:11:66:97:a5:48:5f:82:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A9:B2:15:55:E7:61:96:1C:FE:C3:07:8A:E8:95:32:DE:8C:70:D6
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/a6myFVXnYZYc_sMHiuiVMt6McNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.140.32.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:80:a2:f4:f8:12:48:71:3c:98:30:bc:37:76:b2:ca:b5:1e:
ff:92:68:57:eb:9a:52:a0:23:fd:bb:33:08:0b:ca:a2:53:ec:
50:1c:f1:04:e6:26:f6:40:0e:77:7b:52:b4:73:11:70:3f:2c:
5a:e4:8d:54:f9:0e:7b:2a:66:70:3b:09:60:34:b2:72:a8:4b:
af:3d:5a:13:60:12:68:fe:c8:a5:66:ed:cf:9a:ce:38:b0:65:
b8:3b:b7:75:f9:a4:7d:66:30:b1:f6:7a:a8:48:b2:a9:9e:b9:
c3:f8:e6:61:ec:9b:95:d0:a0:65:fc:02:93:58:ff:ae:c6:65:
1c:6f:48:4e:73:4a:a2:20:5c:16:e9:d4:fd:72:f3:77:19:e4:
e5:5c:67:2e:3d:c8:04:ef:4e:8c:74:5f:83:9e:1d:4d:7b:6f:
81:78:79:80:89:66:43:bb:eb:7b:44:97:04:b0:5e:e5:2c:5a:
38:bb:79:2c:a0:69:38:77:73:56:db:b0:95:1e:4e:3e:8f:0d:
42:01:fd:c2:ed:94:d7:90:1f:e4:11:f0:1c:20:7e:32:66:b4:
7d:4f:e1:f2:fe:ee:c0:96:cb:f6:b7:eb:14:76:1a:7e:bb:dd:
b4:d3:21:26:27:3c:ac:01:9f:10:d6:e3:68:b4:8a:07:2b:ca:
3d:6d:89:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:27 2024 by rpki-client on console-ams.rpki-client.org