Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/6WJT80i1jsjIpOYQJvXHkbcc_A8.roa
File: 6WJT80i1jsjIpOYQJvXHkbcc_A8.roa (raw, json)
Hash identifier: 2r6fQEQg91GA0QxIxDkAnZxCd8wqCSHc2YnK1Jbvr5A=
Subject key identifier: E9:62:53:F3:48:B5:8E:C8:C8:A4:E6:10:26:F5:C7:91:B7:1C:FC:0F
Certificate issuer: /CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Certificate serial: 01828E0D231BCB0F9FC3C7D602B726DCCEA7
Authority key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/6WJT80i1jsjIpOYQJvXHkbcc_A8.roa
Signing time: Thu 11 Aug 2022 17:56:41 +0000
ROA not before: Thu 11 Aug 2022 17:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 188.64.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:0d:23:1b:cb:0f:9f:c3:c7:d6:02:b7:26:dc:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Validity
Not Before: Aug 11 17:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e96253f348b58ec8c8a4e61026f5c791b71cfc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:ed:b8:78:f2:99:9a:ee:6a:dd:e3:f2:71:
f6:40:aa:97:59:92:65:96:ff:f0:77:10:9b:e7:2d:
55:ec:42:04:ec:f9:a1:7d:21:a0:0b:f5:58:77:a4:
c0:f3:67:56:29:76:2b:b3:d3:66:8a:cc:d3:66:bb:
6c:1f:02:2a:f9:07:d7:a8:15:1a:31:98:ca:49:c0:
1a:b7:bc:6d:76:22:71:0d:51:4f:bf:a9:84:2f:24:
df:89:0e:2a:8c:0e:7e:60:71:77:f7:83:fe:36:0a:
be:29:4f:a9:bb:ed:03:a4:2b:e6:56:f3:01:6a:c6:
1f:1b:df:8a:44:35:4f:fc:f4:12:9f:6b:20:a6:9a:
50:22:41:e9:cf:24:c0:c7:e9:72:7d:24:a0:d5:65:
69:43:c6:61:25:d9:de:60:df:3d:66:9d:b6:18:6d:
b0:eb:d1:90:95:6e:16:b4:f5:01:9d:74:31:9e:55:
e0:a1:13:7c:73:6f:55:a3:67:73:d0:c2:74:06:53:
41:83:ef:5b:6b:2c:13:f9:ed:a0:71:a6:78:a0:c9:
a6:41:a1:83:97:58:6b:90:9d:cf:fd:50:55:b7:09:
51:11:e8:ec:b9:c3:4f:5c:f6:29:d9:a8:e6:86:a9:
47:1b:df:a3:0c:83:8b:7a:97:9b:b9:f4:05:2d:90:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:53:F3:48:B5:8E:C8:C8:A4:E6:10:26:F5:C7:91:B7:1C:FC:0F
X509v3 Authority Key Identifier:
keyid:02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/6WJT80i1jsjIpOYQJvXHkbcc_A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
27:aa:85:40:84:30:6d:41:b1:ad:7e:b7:59:2c:28:ff:f8:db:
01:6d:9d:c7:3c:be:c8:1d:e1:3b:51:22:0c:6a:e7:64:0a:94:
e0:b0:d3:1a:e8:c6:f5:53:87:5a:21:41:6a:f4:b5:f0:64:98:
c1:1b:61:54:c6:7b:38:ff:35:1f:24:5b:0e:52:ed:c3:2c:8f:
15:7f:2f:cf:a3:ba:f6:06:20:e6:1f:20:95:67:ef:cd:de:8e:
91:62:d4:d1:a4:03:00:b4:58:64:82:1f:bc:2d:9b:c1:ad:cc:
44:ce:b3:4d:74:a7:4c:27:26:b1:91:99:d7:14:60:b5:6a:da:
08:1e:4c:88:71:6a:36:b9:3e:3e:42:d3:72:39:c8:5c:4b:23:
38:33:4d:06:f2:53:08:25:69:7d:02:58:ad:09:c4:1c:b8:1b:
84:18:7f:81:cf:ee:66:ac:d9:85:ee:1c:87:96:d4:55:91:01:
1a:56:48:5d:01:ad:86:e9:8c:c7:dd:de:22:92:ef:6b:4d:01:
c6:11:45:45:a8:75:88:ab:68:62:b6:de:3c:19:9c:dd:ea:aa:
3b:65:c2:9e:2c:b5:56:b1:e8:f5:6b:a4:da:6f:e7:80:5f:c4:
dc:11:d5:f8:15:d4:08:8d:d5:43:30:e7:d6:68:77:1b:2f:6e:
5c:42:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:04 2023 by rpki-client on console-ams.rpki-client.org