Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/6d1XmchcgxZq5fSGVFdib3UMK3k.roa
File: 6d1XmchcgxZq5fSGVFdib3UMK3k.roa (raw, json)
Hash identifier: KXYBDvc0GON4tZBsAlmSFq8sXXRFug3KfDcEzzXNLEk=
Subject key identifier: E9:DD:57:99:C8:5C:83:16:6A:E5:F4:86:54:57:62:6F:75:0C:2B:79
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 0183F0A866D56AFD4B4881A11831E6B3089D
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/6d1XmchcgxZq5fSGVFdib3UMK3k.roa
Signing time: Wed 19 Oct 2022 14:31:51 +0000
ROA not before: Wed 19 Oct 2022 14:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21355
IP address blocks: 194.31.14.0/23 maxlen: 24
194.99.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:a8:66:d5:6a:fd:4b:48:81:a1:18:31:e6:b3:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Oct 19 14:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9dd5799c85c83166ae5f4865457626f750c2b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:fe:dd:37:4e:ef:2a:24:fa:a3:73:24:c8:
42:c5:1b:b7:c7:05:73:84:28:e1:b6:43:a4:80:9a:
4a:ed:3f:f3:49:af:4c:6a:88:86:d4:a4:df:20:97:
bb:76:44:15:3b:44:fe:3a:b5:02:55:52:0a:87:e1:
6d:2d:8c:b6:c6:ec:e4:62:ac:ed:87:cb:f5:32:af:
ed:4e:ee:1a:90:11:f9:30:cd:9b:1a:d7:6b:de:e1:
0b:a4:1a:f5:f3:ec:24:46:b4:26:50:b0:d1:b7:30:
59:eb:61:31:aa:c8:fe:4b:ad:3d:f4:f8:e9:fc:f6:
92:7d:bc:ea:42:d0:a5:cd:66:f2:37:5d:6c:4c:22:
70:37:8a:22:f3:6b:a7:86:1b:00:74:d2:a9:04:4a:
50:11:eb:23:c5:2d:2d:33:21:83:70:4b:33:42:fd:
6b:2c:82:06:2c:71:f7:15:6e:13:69:01:88:c9:8f:
00:7b:ee:d6:12:20:ff:47:43:b8:bb:88:7a:8a:5d:
29:c5:8d:fe:cd:e4:03:79:42:0e:c1:67:90:f1:4f:
06:73:e0:cb:d9:9a:d8:89:cd:a7:8a:38:d6:59:b2:
a4:b6:63:3a:d7:70:3e:be:50:93:e6:bb:29:40:e7:
44:10:bb:f9:dd:09:1d:8a:d6:d1:5d:18:3f:90:ab:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:57:99:C8:5C:83:16:6A:E5:F4:86:54:57:62:6F:75:0C:2B:79
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/6d1XmchcgxZq5fSGVFdib3UMK3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.14.0/23
194.99.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:8b:79:5a:7d:54:16:3c:6d:54:57:57:83:bc:1a:b4:d2:16:
6a:cb:97:26:27:a6:a2:89:0f:6d:fd:54:26:60:29:13:77:d1:
f4:bf:19:5f:3a:e8:a2:03:d2:7d:e6:5f:2d:55:37:cb:cb:04:
2c:ea:52:67:0e:c4:c7:aa:a1:6d:3d:f4:29:99:34:75:ae:c4:
58:a9:72:11:1f:64:02:f3:b2:86:f4:53:6e:1d:45:81:8b:8d:
f5:e6:72:a8:8c:52:2c:f3:09:07:ad:2c:90:d7:3d:c0:fb:90:
d0:43:32:74:1d:ac:c0:57:5c:7a:c8:9b:01:ea:9d:b6:5e:7a:
2e:a4:14:91:97:34:48:b4:d6:ed:87:83:ab:1a:a9:d1:34:6e:
44:41:8d:2f:03:75:74:a4:09:0c:04:8f:35:e2:a5:bb:a5:af:
19:3e:16:93:96:91:1e:3f:ab:45:aa:3a:b4:44:ac:59:d6:9d:
08:2c:3a:25:89:6d:ef:fc:b6:d4:9d:c9:bb:d9:18:c2:2d:85:
00:0a:cd:16:b5:87:22:95:ea:16:c4:0a:ee:b2:09:39:0c:b2:
d8:5d:60:c5:59:f8:05:01:51:23:10:85:8c:30:0e:f9:5f:08:
ce:41:28:41:37:61:93:62:3a:c2:80:72:ec:57:14:54:f0:92:
b9:09:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:15 2024 by rpki-client on console-ams.rpki-client.org