Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/6ACHmq0PGNEKYT3_jUPDxn0LvZI.roa
File: 6ACHmq0PGNEKYT3_jUPDxn0LvZI.roa (raw, json)
Hash identifier: W7lY3djam+Wm7Rr1jPHj5vPOK6M5U4/LmQuBZN2VnSE=
Subject key identifier: E8:00:87:9A:AD:0F:18:D1:0A:61:3D:FF:8D:43:C3:C6:7D:0B:BD:92
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 018248D03E5B844069D8002643DEAD8D8BEF
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/6ACHmq0PGNEKYT3_jUPDxn0LvZI.roa
Signing time: Fri 29 Jul 2022 07:16:23 +0000
ROA not before: Fri 29 Jul 2022 07:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60700
IP address blocks: 194.44.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:d0:3e:5b:84:40:69:d8:00:26:43:de:ad:8d:8b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jul 29 07:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e800879aad0f18d10a613dff8d43c3c67d0bbd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:23:7f:5d:3f:cf:a6:ab:41:d5:10:38:94:
74:8a:a0:9e:4e:1b:9f:06:93:e3:86:25:de:3b:dd:
5c:da:d5:e7:ce:26:2f:00:ae:91:4d:97:b3:15:fd:
c7:ba:72:e3:13:49:38:5b:8d:53:f5:0b:6e:cb:8c:
f6:91:f9:a8:76:d1:ab:d3:69:9d:fa:9b:ac:a7:fb:
2d:55:21:79:b3:c4:80:27:0b:13:11:ba:b5:d0:37:
5e:ac:45:24:c0:4a:8f:1a:b5:b4:c6:ce:95:50:c6:
29:20:db:96:57:ef:97:e5:fc:95:d4:96:87:93:bc:
ff:22:54:14:47:f5:ec:9c:99:7b:a1:4e:c7:f5:06:
bf:e1:91:9a:4f:48:e4:d9:44:07:7f:bf:0f:32:ad:
a5:41:75:71:24:6f:00:57:df:ee:a1:d7:09:84:49:
37:2f:40:e3:3a:04:65:e2:37:c2:22:11:ff:03:59:
ea:0e:2f:9c:03:ab:db:d0:aa:ba:ee:5c:c2:05:72:
90:f6:0e:68:1b:ab:c2:5c:3d:db:b9:c5:b2:18:9e:
ff:88:66:64:6e:e6:40:74:b8:40:85:41:a9:64:b1:
27:03:a0:b7:24:cf:ef:21:35:f1:63:0a:ec:6b:70:
19:04:b0:3e:4a:76:b9:03:c8:47:f4:d0:b1:ea:2e:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:00:87:9A:AD:0F:18:D1:0A:61:3D:FF:8D:43:C3:C6:7D:0B:BD:92
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/6ACHmq0PGNEKYT3_jUPDxn0LvZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.30.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e6:22:6c:3a:a9:0a:b1:69:69:1c:47:73:fe:f1:1c:c9:40:
09:3f:1c:61:d8:87:c3:cb:7a:aa:91:fa:2b:4b:3d:22:e4:eb:
17:aa:20:96:a9:67:07:f1:2a:65:55:85:86:56:21:a8:bd:32:
5d:58:92:ed:2e:dc:3a:4d:f9:92:5b:8d:b0:ee:41:9b:06:5a:
5f:4e:6b:0e:68:88:59:06:b3:3d:c8:01:86:b1:d5:ea:bb:a8:
3a:39:ee:f3:f8:63:f0:69:cf:e2:13:7f:e3:c5:63:1a:ee:59:
25:72:fb:72:49:dc:00:d8:4d:fd:d4:a1:0f:b1:3e:e7:22:95:
f2:69:2a:82:41:5e:0c:12:a3:a5:0e:bc:70:c5:1c:c6:a2:1d:
ab:27:50:a8:ea:e0:65:c8:5b:20:b1:28:83:97:df:a7:e0:5e:
09:6f:76:51:25:49:c2:84:1a:24:25:96:40:6a:06:98:2b:9d:
3c:44:1b:59:9a:f4:38:a3:2c:66:73:5f:77:95:f6:3d:77:88:
40:bc:0d:3a:64:30:13:4e:37:57:33:5c:a5:25:d0:cc:e1:f7:
6f:f3:9b:dc:0a:3a:c9:34:07:b4:d7:dd:f3:95:ac:44:82:43:
29:96:1c:33:6d:db:e1:02:2e:ec:80:aa:be:eb:dc:da:85:84:
50:b7:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org