Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6Bl_so1-chL2DIhokifJ5IxNQK0.roa
File: 6Bl_so1-chL2DIhokifJ5IxNQK0.roa (raw, json)
Hash identifier: uB7VDks1tNe8MBjNnfCniXEjGOiNPG8wTEty/dk4BxU=
Subject key identifier: E8:19:7F:B2:8D:7E:72:12:F6:0C:88:68:92:27:C9:E4:8C:4D:40:AD
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17F402BB
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6Bl_so1-chL2DIhokifJ5IxNQK0.roa
Signing time: Sat 01 Jan 2022 04:00:00 +0000
ROA not before: Sat 01 Jan 2022 04:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44586
IP address blocks: 213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
83.228.89.0/24 maxlen: 24
2a01:5a8:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401867451 (0x17f402bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8197fb28d7e7212f60c88689227c9e48c4d40ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:61:b8:ed:15:d8:00:61:20:5b:ff:ef:7b:
0b:60:15:d5:29:7b:d7:5e:cd:96:15:84:52:99:cc:
64:e4:75:24:49:49:07:8d:64:6a:51:96:71:ea:a9:
1a:a6:98:5b:e0:a9:8a:52:9c:bb:19:41:49:82:26:
24:b8:f3:f6:fa:a9:65:4a:c5:58:0d:80:28:b8:45:
eb:b3:bf:37:11:51:e7:4c:04:fa:d5:58:33:30:fb:
fe:92:c9:f2:dd:2a:ec:f4:8c:bc:c3:13:de:60:1b:
a3:97:5e:42:1b:4a:ee:84:43:64:ab:19:73:25:68:
7a:e1:8e:f4:d7:c5:9b:cf:e2:a2:f1:89:fd:77:b3:
1c:13:d2:96:48:ba:62:2f:e1:5a:6e:27:9e:7a:34:
c6:c1:c6:90:fe:4b:fd:bb:5e:68:3d:cb:26:97:2f:
5d:11:99:56:b2:f3:ea:a3:1d:13:8d:04:db:18:f4:
81:c5:3a:4b:b4:be:9f:43:ef:19:78:68:fc:cb:1e:
a0:f4:67:d7:f1:2d:59:54:83:97:b7:bf:d2:28:f3:
54:ef:10:e3:5b:7a:c7:40:20:c4:4c:6b:cf:81:3c:
d3:d4:a0:b4:11:b7:c1:14:a5:98:0e:e0:79:ad:fa:
3f:81:23:6e:b3:28:6c:87:54:6d:a6:80:5a:80:3f:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:7F:B2:8D:7E:72:12:F6:0C:88:68:92:27:C9:E4:8C:4D:40:AD
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/6Bl_so1-chL2DIhokifJ5IxNQK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.228.89.0/24
213.91.173.0/24
213.91.191.0/24
IPv6:
2a01:5a8:8::/48
Signature Algorithm: sha256WithRSAEncryption
43:bf:77:b9:d9:06:be:88:98:7c:fd:5b:52:51:0e:a5:72:80:
55:e3:5f:64:57:05:6e:46:ad:52:61:92:3d:dc:e7:2e:3a:0b:
e7:e5:fb:d0:18:66:e0:01:f4:a0:97:34:85:04:97:3a:77:61:
4e:a4:b6:24:31:5a:23:4f:1c:29:8e:fd:29:d8:0c:1d:32:b2:
5e:36:38:0e:f4:9c:d4:cf:64:e2:29:95:30:92:b4:08:2e:2b:
d5:8f:13:a1:07:d1:d6:66:4f:64:cd:ab:4d:b0:4f:8b:24:ff:
3e:d2:a5:05:87:84:48:ef:f7:87:43:6c:91:7c:17:3d:e5:93:
d8:08:72:cd:9e:99:44:31:94:76:ed:3f:8d:7d:6f:80:bc:c4:
f5:f4:c5:be:dd:9b:f6:ce:e4:c3:d7:db:cb:57:45:f5:70:e6:
98:0f:b4:3a:a9:da:79:40:ab:0b:cd:81:62:a2:9a:b8:89:e0:
b4:ad:a7:9a:98:b2:0f:4e:7a:48:72:70:de:1b:8a:8e:fc:46:
bf:be:a8:04:15:d8:0d:56:61:59:d3:72:12:82:7a:51:d3:fb:
0c:f4:5e:c8:02:b2:8c:bf:d4:ec:8e:94:ed:39:fa:70:5a:23:
92:90:f1:09:55:fd:a5:2e:19:03:21:07:01:12:da:a0:82:32:
dd:4e:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org