Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/6-6gQawan0CniXNCVqY96AR1i_g.roa
File: 6-6gQawan0CniXNCVqY96AR1i_g.roa (raw, json)
Hash identifier: Zd3+y8TH6q5ZlaUbOEJ7MwYWf3ey0YdO1kYXsfqTWSE=
Subject key identifier: EB:EE:A0:41:AC:1A:9F:40:A7:89:73:42:56:A6:3D:E8:04:75:8B:F8
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200FA60CBCD37E272FC33C489F7737C9D
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/6-6gQawan0CniXNCVqY96AR1i_g.roa
Signing time: Fri 15 Jul 2022 08:29:44 +0000
ROA not before: Fri 15 Jul 2022 08:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41272
IP address blocks: 46.165.64.0/18 maxlen: 18
188.7.0.0/16 maxlen: 16
80.185.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:fa:60:cb:cd:37:e2:72:fc:33:c4:89:f7:73:7c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebeea041ac1a9f40a789734256a63de804758bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:14:19:05:b4:db:cd:89:22:d9:dd:23:50:
1f:7f:86:67:83:e9:7b:6b:5d:c3:6e:c7:31:7c:19:
aa:21:d2:12:8e:24:96:fa:1e:a1:52:83:1b:64:82:
3d:b8:dd:a0:a1:4e:0c:da:e5:bb:4c:4e:ca:8c:12:
05:93:06:45:12:23:5c:c7:ae:ef:7f:cd:55:2d:be:
ab:3e:ac:1c:41:a6:bc:e8:1f:fd:c5:ac:0b:79:25:
78:5b:cf:2c:78:56:ab:93:76:b2:ed:75:f2:f8:ba:
11:92:3f:1d:bf:50:7d:22:a0:05:08:63:f9:cc:de:
2d:c3:a5:bc:f9:75:21:8f:04:db:dd:cb:fd:6a:cb:
b9:cd:c9:e1:07:4f:cf:da:5d:3a:93:4e:95:25:89:
a9:6f:6d:98:74:18:6e:8e:c2:30:fd:1e:a8:a4:0f:
e8:fe:f0:dd:3e:55:9c:b6:df:98:c0:3e:fd:d8:f0:
0f:8c:c6:94:d5:17:5a:89:20:67:bf:79:fc:98:a0:
75:c0:f0:19:0c:d5:9c:71:a1:db:af:0d:02:ab:b7:
45:80:f1:f1:7c:f6:0d:47:6d:8e:98:d1:9a:9b:4c:
15:69:16:86:0f:d6:fa:15:42:c3:d2:ec:60:e9:03:
45:e8:fa:6b:bd:37:bc:3a:42:8f:8d:8a:db:63:3b:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:A0:41:AC:1A:9F:40:A7:89:73:42:56:A6:3D:E8:04:75:8B:F8
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/6-6gQawan0CniXNCVqY96AR1i_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.64.0/18
80.185.0.0/16
188.7.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:2b:16:4d:e3:05:60:c8:77:08:f5:d3:3e:a3:54:d6:ef:34:
87:cf:1b:4e:95:bc:17:56:dc:55:66:0c:68:19:55:b5:ba:cc:
1f:42:df:7d:e1:b5:89:68:ee:33:97:23:04:6b:c8:6e:2c:02:
44:18:16:e7:c3:01:25:5d:01:fd:f2:f4:20:fe:f2:35:f5:e1:
de:b9:74:5f:d6:b0:ed:f9:43:67:4c:fe:9f:e6:0c:9a:a1:f6:
4b:82:b1:be:c5:08:01:f8:4e:00:4a:78:85:91:d0:70:44:ac:
e6:25:53:58:ad:3a:3d:34:7a:18:9c:4a:81:85:a4:35:db:d2:
00:5f:e9:29:d9:eb:d4:67:68:c5:9d:e2:41:49:c6:2f:70:ba:
99:1d:ed:b3:13:10:1b:bd:55:63:a1:5c:98:d2:36:26:16:73:
9a:87:67:11:8d:bd:4f:af:6e:05:2c:8a:09:2d:20:6e:2d:c6:
70:4a:fc:9b:ce:b6:57:15:02:4b:07:0a:c8:19:45:27:74:75:
12:8d:d6:fb:17:d6:49:d7:5f:b2:e4:7a:79:25:43:4b:54:39:
89:ea:e6:64:c7:c1:cd:ea:8b:44:68:81:00:31:fd:7a:b5:32:
96:b2:2c:28:ba:b0:70:56:54:44:8c:ef:b9:b4:f6:ce:7b:b7:
e1:a7:84:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org