Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Ng291zXmJQNj-FqrkzZrMZE45k.roa
File: 6Ng291zXmJQNj-FqrkzZrMZE45k.roa (raw, json)
Hash identifier: FvQgcRxZuyOKXeSIG1ogcIpPscy07iM4Jg+5Pa07wQw=
Subject key identifier: E8:D8:36:F7:5C:D7:98:94:0D:8F:E1:6A:AE:4C:D9:AC:C6:44:E3:99
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0EB2C162
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Ng291zXmJQNj-FqrkzZrMZE45k.roa
Signing time: Fri 11 Feb 2022 13:55:16 +0000
ROA not before: Fri 11 Feb 2022 13:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48658
IP address blocks: 194.87.212.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246595938 (0xeb2c162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 11 13:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8d836f75cd798940d8fe16aae4cd9acc644e399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:a9:1f:5c:1f:55:6a:8d:0f:90:25:17:eb:
56:f4:3b:f6:9b:76:61:76:2b:75:80:51:8c:1e:36:
1b:e5:08:0b:2a:36:ca:b8:61:a0:ae:00:3b:a3:83:
6c:05:11:e0:e5:9c:b7:91:f9:1a:02:fd:5d:13:79:
94:74:3c:f1:23:a3:e9:07:7d:75:a4:71:aa:35:f3:
80:1b:87:4d:02:3d:22:b7:0b:63:02:1a:1d:1b:e6:
85:88:c9:42:51:d1:9e:2d:fa:54:c6:8b:8c:01:63:
95:e8:e3:68:63:03:f7:ab:d9:c2:cb:09:d1:c1:f8:
c8:69:38:15:cb:a2:7d:9f:ed:69:8b:0d:10:88:bf:
3c:34:a9:64:01:10:f9:fd:f3:7e:a3:9d:5e:99:88:
9d:05:ad:f4:08:0d:4d:b8:35:2c:31:83:df:10:d0:
39:3f:1a:b0:6b:fc:71:e5:87:1b:d6:92:a6:b4:94:
2e:ad:79:6c:a7:c8:ea:13:7c:3c:a3:96:ab:8d:ba:
f7:3a:65:df:18:b9:1a:39:7c:b9:8a:32:c2:9a:78:
b9:cc:1a:62:a4:4e:fb:57:10:c3:78:0a:9c:9c:24:
81:e9:96:3c:fd:1c:66:5d:97:4f:b2:60:09:97:af:
5b:d5:e3:22:2a:81:89:d1:8e:20:c8:8e:2e:26:5d:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:36:F7:5C:D7:98:94:0D:8F:E1:6A:AE:4C:D9:AC:C6:44:E3:99
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Ng291zXmJQNj-FqrkzZrMZE45k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.178.0/24
194.87.212.0/24
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ef:53:4f:d3:90:3f:d9:9e:d6:81:80:10:af:9e:bc:13:a7:
23:05:38:7c:e7:0e:e1:65:bf:b8:36:97:84:5b:e8:c8:c9:02:
af:8a:fb:ab:65:f2:4c:a3:e7:a1:05:6c:17:9e:b8:fe:05:1c:
e2:13:8a:0e:9c:1d:f6:fe:2d:9e:09:92:c4:3c:70:9f:81:98:
d4:3d:b8:65:ed:2d:8a:1f:02:f0:7d:5e:0a:79:23:6e:a5:d7:
a3:0e:31:dc:4f:29:6b:75:11:4e:ed:bf:27:42:2e:0e:7f:d9:
ac:c1:51:b6:f8:21:53:ed:34:fc:4f:4f:51:2b:9f:07:dd:6a:
ac:20:e1:24:33:fc:56:1c:fe:0a:1b:9c:8f:59:c8:27:f6:f4:
b7:2f:6e:bc:bf:80:ba:2a:11:f2:1e:6c:27:85:af:23:00:e3:
eb:fb:b2:b7:d8:66:93:63:87:8e:a3:b5:90:d3:61:04:31:24:
8a:7e:f0:97:2a:f1:e6:39:8d:c5:f3:86:51:ed:79:34:96:77:
2e:7a:80:86:a8:ed:b7:05:d6:1d:d9:ad:d4:0a:01:b9:e5:ae:
66:9c:25:06:ab:3d:ee:da:16:6b:b2:70:a9:50:ba:52:20:b0:
6f:57:78:48:fe:da:12:95:4e:57:89:6b:51:7f:b3:ce:11:56:
da:47:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org