Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/6qcyxEKJ0QvGZBilcv1C2PZGA0s.roa
File: 6qcyxEKJ0QvGZBilcv1C2PZGA0s.roa (raw, json)
Hash identifier: vYBvmV8wVxhA8sAWPY/jq2zHDn3FNF4YRto4WZhpGsY=
Subject key identifier: EA:A7:32:C4:42:89:D1:0B:C6:64:18:A5:72:FD:42:D8:F6:46:03:4B
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 239CC310
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/6qcyxEKJ0QvGZBilcv1C2PZGA0s.roa
Signing time: Sat 01 Jan 2022 09:54:54 +0000
ROA not before: Sat 01 Jan 2022 09:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39583
IP address blocks: 185.7.4.0/22 maxlen: 22
195.244.20.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597476112 (0x239cc310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jan 1 09:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaa732c44289d10bc66418a572fd42d8f646034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:8d:3b:8e:98:bb:7d:72:e0:a0:9d:fd:7e:
92:4e:db:d1:ec:d6:8c:a2:ed:8f:d3:d1:da:57:bc:
6d:f7:b4:9b:79:e9:e8:5a:0e:93:b9:2c:da:b7:6f:
b3:20:31:0b:d8:46:7e:0d:eb:4f:92:46:e6:27:c7:
61:b4:18:de:46:39:ee:81:db:72:fb:1f:21:35:cb:
23:a1:60:0b:29:e4:f1:f4:74:b4:a6:3d:cc:da:e0:
51:f7:7b:b9:a1:8f:dd:8f:30:d4:e3:b6:7c:9e:93:
bb:b8:42:c8:8e:6e:79:61:6f:4e:ee:72:2b:a3:9f:
57:9d:72:58:bc:68:07:68:08:d6:9a:c8:e6:02:01:
ce:27:14:8b:dc:2f:c9:ec:69:01:5e:f3:30:59:e8:
44:36:54:f1:e8:da:6f:73:01:6f:f7:bb:e5:1b:3b:
78:0a:a6:43:c8:b2:8c:a3:92:6e:f7:e0:b0:3d:2e:
63:95:a1:28:a0:b5:0f:55:8c:d3:51:02:99:bd:10:
64:ad:62:45:fb:8f:ac:a3:d6:3e:01:0e:08:51:95:
ea:94:91:6b:ec:f8:e1:fe:c4:28:dc:4c:c7:62:7b:
56:47:31:44:04:c7:7c:f4:a6:37:68:a9:ab:c9:dd:
81:c5:7d:ef:d1:26:8c:9d:c5:d6:23:2d:dc:57:a7:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:32:C4:42:89:D1:0B:C6:64:18:A5:72:FD:42:D8:F6:46:03:4B
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/6qcyxEKJ0QvGZBilcv1C2PZGA0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.4.0/22
195.244.20.0/23
Signature Algorithm: sha256WithRSAEncryption
96:ce:ec:12:32:7a:ed:c6:f0:fe:4b:37:84:00:4a:fa:81:c7:
82:24:05:00:44:57:cd:40:f6:76:c2:84:36:4e:52:57:39:78:
13:5c:28:b8:d7:fa:3b:64:d2:76:e4:64:d0:ca:50:98:8d:cc:
68:3b:df:f3:dd:2a:62:fa:c8:39:b1:e6:73:71:97:76:bb:80:
b3:3d:c7:6d:2a:ab:c9:56:30:64:7b:c8:cd:11:e8:c0:98:5e:
43:a7:24:89:64:ad:59:6b:82:53:f8:18:06:00:bb:08:0a:50:
5a:98:3b:43:89:30:08:60:87:a6:62:df:ab:3e:a1:4f:a0:4b:
9f:8a:bd:9b:25:7e:65:b5:07:89:d2:6c:2f:d4:82:ba:07:e6:
28:de:a1:ca:e1:76:03:94:98:8f:78:6a:5d:fe:c5:d0:30:bb:
16:8c:bd:e9:ce:70:99:d2:22:8e:e3:bd:0f:fc:7c:9f:19:f4:
3d:54:ab:72:62:8b:92:b8:8f:1f:30:eb:f6:09:9b:9f:79:8c:
f7:67:80:c5:08:f0:6a:45:9e:34:f9:79:40:39:c1:31:11:71:
6d:60:59:1e:ab:86:01:35:28:19:cd:8f:e4:4a:f8:10:bd:aa:
2c:a1:35:04:22:15:e8:2d:ae:1f:ad:2d:0a:89:db:1b:23:ea:
be:fc:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:58 2023 by rpki-client on console-ams.rpki-client.org