Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Cu13gOM53qx1rCsoxpcYmUkhF8.roa
File: 6Cu13gOM53qx1rCsoxpcYmUkhF8.roa (raw, json)
Hash identifier: iIx5UgNkJ+tncCLZZOu4QQep0UB3V5J2oGBcgQ3CuYQ=
Subject key identifier: E8:2B:B5:DE:03:8C:E7:7A:B1:D6:B0:AC:A3:1A:5C:62:65:24:84:5F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183E61AB071F92C2D85676B4AEDEA870F83
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Cu13gOM53qx1rCsoxpcYmUkhF8.roa
Signing time: Mon 17 Oct 2022 13:20:52 +0000
ROA not before: Mon 17 Oct 2022 13:20:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 193.124.45.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:1a:b0:71:f9:2c:2d:85:67:6b:4a:ed:ea:87:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 17 13:20:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e82bb5de038ce77ab1d6b0aca31a5c626524845f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:80:f0:0b:62:09:58:64:d2:ff:28:fa:d7:
cc:ad:c8:b9:77:2e:88:9c:30:fd:7a:09:f7:68:1f:
04:f6:19:d6:2b:41:db:1b:9a:86:bd:97:d4:bb:3f:
e8:59:2a:d5:bc:f1:2c:a4:fa:f8:47:6d:0f:df:7c:
a5:79:34:aa:e4:ba:d7:c6:b2:ee:33:d9:e7:d6:f5:
bc:07:d8:73:57:21:55:fb:97:96:42:0e:4d:39:65:
49:b1:ac:38:26:87:f3:62:90:40:90:0a:0e:63:aa:
b5:de:29:f1:f3:e0:af:ca:9a:eb:7f:7e:83:1d:10:
16:4c:63:df:ab:88:d2:9e:d2:ec:fd:c6:18:be:d9:
a6:fa:de:03:e6:f6:9b:3e:4f:56:11:d4:4d:91:f1:
65:01:fa:d1:e7:2a:a0:d9:f6:6d:8f:b2:e3:fd:89:
07:fe:19:c4:7a:9d:2e:fe:74:c7:7f:b8:c6:5c:d6:
b6:ef:d3:75:6b:84:a9:a3:af:5b:17:47:d3:4b:6c:
3e:25:95:c7:ba:3e:c9:2d:fe:63:a7:8d:9f:79:f8:
69:2e:af:63:f9:e4:60:1c:0f:b2:1c:1f:3f:51:aa:
f2:19:3c:2f:11:9d:7c:5c:88:cb:a2:75:7b:7c:52:
0b:50:af:57:3f:91:8b:cc:66:ed:18:dc:b9:35:f4:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:B5:DE:03:8C:E7:7A:B1:D6:B0:AC:A3:1A:5C:62:65:24:84:5F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Cu13gOM53qx1rCsoxpcYmUkhF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0-193.124.46.255
194.87.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ef:b2:b0:24:02:e7:f4:69:5a:b0:64:da:b6:aa:59:46:f1:
d8:5a:31:af:6b:31:3a:6d:6b:7e:42:87:ee:27:ad:08:44:17:
2a:1c:a2:cb:65:c0:f8:c8:28:5e:47:70:b0:12:b0:33:fd:72:
36:86:70:30:02:cd:e5:72:4f:19:b9:14:0d:b5:f4:f6:82:24:
b9:6a:11:86:da:c1:78:4a:69:92:14:a5:06:66:ac:a0:22:e4:
6f:9a:42:42:48:c4:a8:57:55:fa:09:95:a5:75:8d:9e:e1:74:
94:70:fa:20:e8:c6:bf:38:67:b3:7c:03:46:20:64:a1:3b:9d:
08:59:7a:c8:32:53:0a:57:31:ed:f0:8e:92:b8:60:f0:c4:7e:
bd:ff:89:7f:52:1b:3b:1d:eb:5c:69:53:cb:66:f0:bc:9a:b9:
13:32:4f:42:36:29:cd:b8:e4:9d:df:4d:f8:31:eb:fa:a0:44:
78:93:eb:6e:06:c5:b1:1b:d9:3b:fe:9b:38:e6:a3:76:de:0f:
ad:64:61:46:a5:9b:88:18:31:87:2c:88:c3:ad:dd:0a:e8:25:
d6:7b:e6:c2:90:f5:2c:79:eb:25:fb:3d:36:4e:78:93:1a:40:
ee:8d:a0:42:79:a2:90:fb:32:fb:ef:fa:01:6c:a9:c4:f8:cc:
2c:59:9a:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org