Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/6vHp-HZ7CAVfrtZARtTxg-XyFHA.roa
File: 6vHp-HZ7CAVfrtZARtTxg-XyFHA.roa (raw, json)
Hash identifier: Quxjre9WDYnePD/PvCIi/uE9jLdJuJsnpVpoWY9dVb4=
Subject key identifier: EA:F1:E9:F8:76:7B:08:05:5F:AE:D6:40:46:D4:F1:83:E5:F2:14:70
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018258F892996B7803CF87B45A641AF85B46
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/6vHp-HZ7CAVfrtZARtTxg-XyFHA.roa
Signing time: Mon 01 Aug 2022 10:34:21 +0000
ROA not before: Mon 01 Aug 2022 10:34:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.219.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:f8:92:99:6b:78:03:cf:87:b4:5a:64:1a:f8:5b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 1 10:34:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaf1e9f8767b08055faed64046d4f183e5f21470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:9b:35:26:37:fe:f1:96:28:b6:0d:b3:7e:
ba:2f:34:1c:02:9f:93:6d:3b:e0:1f:7b:b1:ba:b3:
de:fc:07:72:e8:22:6c:ca:5d:e0:f6:4b:3e:7f:b7:
95:6e:40:1e:42:00:0f:ce:00:35:c3:26:48:7b:5d:
d3:3b:3e:d2:5c:94:be:ad:e5:28:75:a6:ac:c9:24:
40:3b:10:d1:ba:ac:a6:2b:67:4c:5b:6f:11:12:ca:
4e:9d:cd:1e:8c:97:b1:a5:59:3d:0b:c6:ba:61:d7:
79:e5:5e:50:8f:e3:8f:d8:b0:ef:b9:d0:10:56:0d:
ea:ff:fd:fd:7b:31:a5:05:e1:9b:67:34:0c:bb:62:
c8:62:db:d3:91:2c:f0:a0:05:b5:7b:4a:e1:d6:98:
65:ae:a5:bc:5a:58:ba:6f:84:ef:5a:68:24:49:11:
4e:0f:bc:5d:99:43:9e:68:2b:7e:8f:02:78:ae:6e:
d3:75:0f:07:ff:2b:e3:5f:8f:eb:04:3f:b6:6e:b2:
e7:cb:dd:d9:36:42:d9:72:d0:a4:e5:f4:59:2d:70:
7a:3e:f0:4f:ea:bf:e7:50:1e:94:25:3f:e7:70:42:
68:05:5f:21:e9:41:4c:0d:aa:58:ad:65:56:21:09:
32:4d:80:fc:58:c4:29:04:f8:12:6a:b6:29:18:95:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:E9:F8:76:7B:08:05:5F:AE:D6:40:46:D4:F1:83:E5:F2:14:70
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/6vHp-HZ7CAVfrtZARtTxg-XyFHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
34:60:32:cc:ce:f6:74:e8:26:93:87:45:c1:ea:bf:a9:15:06:
0a:46:19:39:16:bb:7a:25:1c:71:73:bc:33:bf:55:47:4c:17:
6c:9a:fe:bd:bb:f7:9e:14:94:b4:dc:22:83:b3:e9:49:79:ff:
a5:70:b6:e6:ad:ea:5c:58:b7:26:21:56:a2:33:5d:dd:15:b7:
3b:f7:69:dd:5f:48:ae:73:2d:a6:a0:b4:f3:e4:8d:38:0b:1a:
3a:f6:d2:2c:ec:83:93:6f:22:10:ec:b6:a2:52:2e:28:33:81:
c5:00:7e:e6:ce:27:7f:5b:fa:16:84:2b:65:7c:c0:c9:9e:8c:
ba:d5:91:56:31:e1:b2:71:05:bc:72:b0:89:4c:20:ca:6f:85:
c5:c3:43:4c:7a:28:fd:cc:b8:df:c0:d7:df:b1:37:b6:1d:42:
33:dd:ea:7f:2f:3d:cf:6b:0b:5d:c9:85:59:80:8e:32:38:fa:
5d:e2:67:34:3b:98:57:36:b1:b7:eb:58:f3:f5:e3:8f:97:41:
90:f1:f3:18:cd:26:8d:77:87:ea:a2:fb:3c:2b:bc:12:3e:8c:
60:05:4d:2b:93:0f:9c:73:41:66:2d:bf:6d:17:1e:64:2e:d0:
99:f1:10:f3:a5:10:82:75:d0:4c:2e:60:cf:04:32:be:8d:4e:
cf:f1:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org