Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/rlkXh7H7BLB4J5RAsVA8-i_WVMM.roa
File: rlkXh7H7BLB4J5RAsVA8-i_WVMM.roa (raw, json)
Hash identifier: Ue6SBb4qP4O+gpsPKh9PlCs9fmoQk7U8iKbRP4VgRrw=
Subject key identifier: AE:59:17:87:B1:FB:04:B0:78:27:94:40:B1:50:3C:FA:2F:D6:54:C3
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 0184CE90B525719651DA8439A3CE155BC44D
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/rlkXh7H7BLB4J5RAsVA8-i_WVMM.roa
Signing time: Thu 01 Dec 2022 16:41:40 +0000
ROA not before: Thu 01 Dec 2022 16:41:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24637
IP address blocks: 193.110.139.0/24 maxlen: 24
212.3.64.0/19 maxlen: 24
193.19.183.0/24 maxlen: 24
193.19.180.0/22 maxlen: 24
80.244.208.0/20 maxlen: 24
2a02:1798::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:90:b5:25:71:96:51:da:84:39:a3:ce:15:5b:c4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Dec 1 16:41:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae591787b1fb04b078279440b1503cfa2fd654c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:d5:0d:11:1e:af:d9:cc:c1:89:c8:39:b8:
28:a4:95:3e:7c:bb:8d:94:09:d2:f6:12:c0:0e:a3:
0f:5b:48:b0:a6:14:95:c1:80:cb:55:c4:84:04:9b:
14:88:44:de:24:03:a3:16:4d:14:3b:db:7c:2d:df:
e1:6b:c8:15:79:dc:29:cb:df:2d:60:84:1e:97:7b:
98:de:f8:d8:6a:8c:16:c7:18:7f:ef:c2:80:e2:b9:
d3:a4:e6:37:01:b8:84:81:c4:d7:4a:26:d7:c1:32:
fc:97:18:69:cb:d0:3d:ec:69:f5:52:2a:b7:6e:5a:
28:f1:c4:ec:95:fd:e4:79:a5:2e:4b:44:8a:08:ef:
6e:e6:51:5e:f7:ca:7d:2c:e4:25:3c:58:67:3e:f7:
fc:d5:ae:67:85:b6:4a:08:cb:08:7c:af:25:ea:23:
9b:a4:02:4d:26:05:e0:5a:f3:80:02:c1:23:bc:9d:
4c:a3:3f:16:92:95:0b:2f:4a:79:07:3e:11:4a:82:
26:18:a8:88:f8:32:a8:82:cd:56:f9:e5:6d:51:e4:
48:f7:35:f8:b7:42:0c:d1:cb:0a:5e:95:63:ec:56:
26:1e:1f:a1:d8:95:a9:40:99:41:db:cd:3e:eb:5e:
e6:42:a1:7a:aa:37:f4:b4:53:cb:57:ff:b5:70:4c:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:17:87:B1:FB:04:B0:78:27:94:40:B1:50:3C:FA:2F:D6:54:C3
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/rlkXh7H7BLB4J5RAsVA8-i_WVMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.208.0/20
193.19.180.0/22
193.110.139.0/24
212.3.64.0/19
IPv6:
2a02:1798::/29
Signature Algorithm: sha256WithRSAEncryption
67:1e:12:77:80:a1:fd:29:c5:83:4d:07:0f:19:57:01:97:d2:
2a:ca:b0:43:8d:ea:5e:8d:42:f4:1f:76:dc:17:bd:57:67:a3:
ee:36:6f:49:e8:5e:a1:be:37:ab:d3:57:15:65:76:72:00:73:
13:65:de:9c:2b:f4:1d:68:52:45:a4:3e:19:c1:c2:a7:3e:1a:
f4:69:3b:40:34:f8:d3:0b:5d:22:e9:41:55:6b:e7:f2:20:31:
0f:e5:ae:5f:f2:30:98:4f:44:03:a5:c1:a2:30:5c:e6:71:b7:
7b:cc:26:e0:b3:08:fe:04:17:40:7d:ca:f3:89:8d:7d:eb:04:
a8:4f:97:36:46:8c:c3:f2:0f:93:60:a6:31:d3:02:c6:13:8c:
3c:8e:16:89:3e:2c:a6:17:82:28:c1:16:6f:d5:1f:3b:72:01:
fb:95:8d:e5:a1:81:ce:54:8d:b0:df:fd:11:ee:9f:08:f2:0b:
4a:51:77:59:06:93:dd:f5:59:15:99:c6:97:50:e1:c2:4d:9a:
a7:01:f6:34:2c:70:e8:1b:ac:65:af:b4:8d:04:bc:15:16:1e:
e2:4b:c0:1f:84:e4:20:c0:43:85:d9:01:fb:eb:8e:7b:b1:2c:
b5:90:48:8a:fe:4c:82:67:56:2d:31:70:64:f0:7d:9d:df:d5:
40:ec:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:11 2024 by rpki-client on console-ams.rpki-client.org