Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/6CjPKNoqXw_69vTHcMOD1YrH2yQ.roa
File: 6CjPKNoqXw_69vTHcMOD1YrH2yQ.roa (raw, json)
Hash identifier: WxutCrrJ6hy1nNmHQ9A6RP4Obj+yxChEyYkBuAgmdQg=
Subject key identifier: E8:28:CF:28:DA:2A:5F:0F:FA:F6:F4:C7:70:C3:83:D5:8A:C7:DB:24
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 093AB4D3
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/6CjPKNoqXw_69vTHcMOD1YrH2yQ.roa
Signing time: Sat 01 Jan 2022 12:58:54 +0000
ROA not before: Sat 01 Jan 2022 12:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49874
IP address blocks: 188.234.120.0/21 maxlen: 21
2a02:2698:a004::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154842323 (0x93ab4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e828cf28da2a5f0ffaf6f4c770c383d58ac7db24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:27:ea:cc:bb:d4:29:cc:e7:6f:cd:c2:0a:
8e:e6:31:70:74:71:54:05:91:0d:32:37:c6:55:c7:
64:0e:9a:c9:ef:fb:f8:56:f9:6d:a7:5d:1e:b6:da:
c2:0c:43:2c:23:d0:9f:f0:95:dc:c8:c3:7e:9d:d3:
79:74:8a:bf:b7:09:1f:86:e1:a2:8b:68:5d:5e:88:
92:63:ec:f6:ce:64:99:76:54:a6:4c:53:20:0b:c2:
7e:9f:40:4e:11:69:1c:2e:1f:ee:09:c5:8e:d4:a1:
36:58:45:b7:ed:e0:05:3a:d8:ca:2a:04:72:81:ff:
ea:9c:65:1f:59:e4:c5:fd:b1:cc:64:69:42:0e:d0:
3c:0d:5c:56:06:85:4e:99:99:72:1a:60:a4:0f:c7:
5c:99:1a:61:ba:d8:75:13:f5:39:a1:e1:62:a2:a7:
d6:3c:3f:69:cd:4b:7f:7d:54:da:26:1f:32:7e:1f:
b1:27:71:84:a2:a9:29:88:a3:5c:61:68:fd:76:7c:
46:06:13:c7:31:2c:d6:15:f0:a8:96:f2:b5:3f:5f:
96:8c:95:00:b5:b0:62:7a:7f:f5:d8:f4:80:38:7e:
39:bb:fc:ca:3f:98:48:f7:4f:29:81:d4:07:d4:c6:
da:b3:47:ac:ef:1b:92:04:2a:69:88:69:de:1f:7a:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:CF:28:DA:2A:5F:0F:FA:F6:F4:C7:70:C3:83:D5:8A:C7:DB:24
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/6CjPKNoqXw_69vTHcMOD1YrH2yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.234.120.0/21
IPv6:
2a02:2698:a004::/46
Signature Algorithm: sha256WithRSAEncryption
2c:8c:f8:06:06:bd:c0:c7:30:44:57:10:c8:43:58:84:32:12:
c8:c4:1b:f0:a4:5d:38:02:37:e5:67:f4:22:de:f7:07:cd:bb:
e6:6b:9b:10:4c:00:05:8a:a1:4e:1a:6d:72:aa:56:89:a8:ff:
b5:16:4a:4b:4b:a1:fe:1a:fe:93:ed:dc:60:04:b0:d3:4b:a0:
24:b9:f3:50:14:85:9f:dd:5f:c3:e3:08:e4:1a:1c:e0:13:19:
7c:e4:df:11:2a:63:37:50:c2:32:8e:f0:af:e4:47:26:55:09:
33:85:27:f2:00:09:e7:c4:e7:9b:fa:36:7d:41:d9:88:5d:16:
c1:f0:73:75:1c:3c:a0:75:d7:a8:07:ac:bd:49:43:0d:d3:2a:
e6:53:dc:22:7b:aa:e1:12:a8:54:70:1b:68:a2:f4:b5:13:bf:
f7:c5:e3:6a:ed:ac:a7:0a:a6:9b:4c:ce:cd:10:05:78:39:96:
b7:34:76:1e:3a:65:d2:6d:71:41:92:d7:e7:46:cd:39:1a:e8:
1d:db:23:50:62:d7:e7:d3:ed:bd:59:d2:4c:bb:66:7b:17:0a:
76:8f:f1:b8:0b:43:93:91:1f:71:ea:af:6b:16:61:f3:e4:10:
70:ee:7e:1e:20:c2:cc:48:0c:ee:9a:b6:ad:7b:a9:f8:9c:a3:
97:77:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:13 2025 by rpki-client