Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6kMQJbZp9_gp27WpCJTWU-KNpe4.roa
File: 6kMQJbZp9_gp27WpCJTWU-KNpe4.roa (raw, json)
Hash identifier: cbWDxm1aDrdZBUq+Z2G46yt/rbts1galbTQXijtTbDs=
Subject key identifier: EA:43:10:25:B6:69:F7:F8:29:DB:B5:A9:08:94:D6:53:E2:8D:A5:EE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0184EC81CE392D633F147436A01E5FD7BFAF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6kMQJbZp9_gp27WpCJTWU-KNpe4.roa
Signing time: Wed 07 Dec 2022 12:14:00 +0000
ROA not before: Wed 07 Dec 2022 12:14:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20616
IP address blocks: 85.120.17.0/24 maxlen: 24
85.120.16.0/24 maxlen: 24
193.226.68.0/22 maxlen: 24
81.180.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:81:ce:39:2d:63:3f:14:74:36:a0:1e:5f:d7:bf:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 7 12:14:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea431025b669f7f829dbb5a90894d653e28da5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:3d:82:bd:5e:1b:fb:8e:d0:37:3a:b9:5e:
4f:8a:77:58:ae:61:45:56:c0:fe:50:22:35:6f:56:
48:5f:20:24:5d:c2:66:14:25:44:c4:91:a9:86:cb:
d6:47:0d:59:fb:e7:d1:ec:63:b2:bd:6b:6c:c4:8d:
38:77:ff:67:f6:d0:7d:4c:c9:b3:b7:2e:77:83:84:
34:d4:b8:aa:fd:de:a8:ea:a7:23:31:ba:98:3e:c7:
e7:0f:34:bf:1d:82:2e:c5:ee:85:8f:89:28:d3:5a:
32:c0:fd:ca:39:47:fb:37:b2:9b:55:cb:7c:c8:c9:
d9:d0:f0:ce:f0:bb:37:be:2c:5e:c8:13:21:99:25:
12:fe:d2:52:8a:73:9a:08:55:84:c9:8d:8c:90:0f:
f8:bf:96:2b:82:84:4c:f7:c0:1d:70:41:d8:df:d1:
1c:dc:e0:04:c4:a6:84:2e:b5:c1:58:c5:04:fd:b0:
20:19:c2:fe:61:be:40:65:5b:18:f9:78:d3:3e:bc:
6a:1b:5f:cb:f7:c3:f4:a0:a1:3f:d9:6e:09:00:36:
00:bc:b7:a0:50:df:ac:60:5c:98:2e:b5:e1:2d:36:
31:68:a8:df:89:73:15:db:f8:66:9f:83:94:c0:8e:
ab:5e:57:2f:f1:e7:ce:fb:4c:37:23:56:86:7b:b3:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:43:10:25:B6:69:F7:F8:29:DB:B5:A9:08:94:D6:53:E2:8D:A5:EE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6kMQJbZp9_gp27WpCJTWU-KNpe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.200.0/24
85.120.16.0/23
193.226.68.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:05:2d:23:db:3c:c9:59:f3:2d:01:f0:a7:d8:de:41:ba:51:
32:4a:93:ec:cd:71:79:6d:7c:09:a7:3a:85:7e:4b:5e:e2:5a:
63:b2:55:46:8f:de:7f:83:18:97:37:2f:74:f1:f0:20:07:74:
67:0a:e6:e2:d9:c5:41:97:ba:6f:f7:93:4a:0d:c3:c5:e2:f9:
1d:41:b0:36:e9:61:49:5a:cd:df:e4:a7:54:98:79:f5:14:5a:
be:4f:a8:10:e8:e7:0d:27:e0:21:8e:85:f6:8c:09:c1:21:8f:
60:5a:73:22:0f:0b:22:40:d4:9e:c6:40:95:bb:43:23:37:9c:
0e:0a:b3:04:fc:cf:e9:cf:c9:00:99:a6:e5:f7:42:ac:6e:4a:
1c:35:5d:7c:18:75:a5:49:d0:a2:25:13:eb:25:b5:02:87:84:
e6:cb:02:3c:70:f6:2b:c6:fa:bd:91:3f:d7:25:bb:8f:9b:49:
0e:02:49:0a:64:a0:5c:11:38:56:58:6e:d9:a2:28:07:03:3a:
89:10:22:4d:20:53:bb:f4:51:00:51:42:3f:5d:e8:69:0a:ab:
fa:94:7c:f6:f7:bc:ca:89:0f:7a:01:88:26:cb:b6:90:96:a9:
70:d0:b0:c7:72:ce:9f:dd:b6:34:10:ed:a9:d3:08:8c:41:bd:
59:fc:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org