Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/6mQyMcsuA-Jts0EgMS-KwQc5SkI.roa
File: 6mQyMcsuA-Jts0EgMS-KwQc5SkI.roa (raw, json)
Hash identifier: LSn9i9740O9btk3WG5oGinYXdVf3Pglq8CeqNfFN590=
Subject key identifier: EA:64:32:31:CB:2E:03:E2:6D:B3:41:20:31:2F:8A:C1:07:39:4A:42
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01845782D931AF26856A238EDA0E9A5D7EF2
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/6mQyMcsuA-Jts0EgMS-KwQc5SkI.roa
Signing time: Tue 08 Nov 2022 13:51:43 +0000
ROA not before: Tue 08 Nov 2022 13:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 213.139.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:82:d9:31:af:26:85:6a:23:8e:da:0e:9a:5d:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Nov 8 13:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea643231cb2e03e26db34120312f8ac107394a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:b4:9b:0e:3d:a6:b8:f9:b9:78:ae:17:ae:
b2:0c:92:89:b0:42:9a:27:c4:5a:35:dd:aa:96:4e:
d6:a9:8b:63:d7:18:23:af:a8:83:41:c6:55:3e:02:
e3:ff:f2:de:6e:7f:bd:1a:57:92:58:02:30:af:62:
af:04:ef:44:9d:aa:ed:6f:ff:19:55:d6:53:5b:b7:
11:8b:14:78:4b:c8:3a:59:ea:7b:26:db:01:d1:91:
45:1b:52:31:17:7f:90:17:72:c9:c6:4b:93:e0:04:
8f:f6:37:30:34:3d:82:91:8c:70:1c:fd:77:78:03:
95:d8:79:fc:94:aa:cc:be:ef:40:cd:c3:79:c1:ce:
77:f8:1c:5f:39:68:79:a0:45:a9:73:e9:b2:1c:44:
05:09:82:ec:8f:5d:52:d5:1c:a3:89:ba:52:33:9b:
23:8d:2b:78:e7:79:e4:92:76:79:09:82:4c:b7:64:
6b:1e:77:54:58:2a:ce:b1:4a:01:2d:20:c1:f2:5d:
3f:df:30:17:88:e3:5b:bd:15:c8:f5:40:d0:89:85:
62:62:b0:3f:9b:60:ad:6f:11:30:07:84:3a:e3:67:
d3:5f:bb:41:4b:ba:2c:7c:dd:75:4d:d5:80:25:b3:
b8:6d:fe:9b:0d:d2:2d:37:0a:f2:c3:1e:9e:4d:80:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:32:31:CB:2E:03:E2:6D:B3:41:20:31:2F:8A:C1:07:39:4A:42
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/6mQyMcsuA-Jts0EgMS-KwQc5SkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.204.0/22
Signature Algorithm: sha256WithRSAEncryption
02:90:ef:7b:dd:53:b4:d2:2f:f5:72:ab:8e:ad:59:ef:48:f9:
ba:77:e7:c4:21:65:aa:e3:2b:98:fa:d1:0f:1c:21:2c:87:a9:
1f:80:53:fb:61:f5:fa:00:5c:c4:e3:c4:61:66:5d:cc:b0:3a:
89:25:17:c9:31:71:77:22:f7:4e:30:50:db:a8:38:82:e3:13:
4b:dd:d3:5c:80:91:8b:14:c2:ee:7c:e7:48:b7:2f:64:18:88:
06:68:5d:10:e7:b1:af:51:2e:7a:39:a3:a3:64:a6:a4:69:2d:
bb:ba:85:c5:c3:e3:4b:76:a9:cd:72:9d:9a:ab:25:0f:4a:a9:
3b:d7:f6:3d:af:c9:71:e3:23:b0:7a:4e:47:6b:ba:3d:f6:6d:
4b:7a:68:19:ec:95:37:d5:26:a6:3a:00:3d:f1:02:42:03:e7:
75:8c:b3:bd:8d:31:03:7a:e2:ed:ef:cc:27:f1:63:4f:65:23:
e2:b0:3c:64:56:c3:70:b4:e6:cf:c1:04:0e:e0:45:47:b3:08:
42:ff:ea:9f:e6:a6:59:6b:ba:2e:4a:e1:96:20:7b:39:27:24:
e6:45:52:ef:41:d2:30:76:c9:df:9b:30:14:96:f8:82:aa:0e:
ee:a3:2a:6a:b0:9b:36:0b:34:3f:a3:50:30:ce:25:e0:59:39:
5d:d1:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:16 2024 by rpki-client on console-ams.rpki-client.org