Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/V8tt-yt_6Aef5bzKywan6ZBeA40.roa
File: V8tt-yt_6Aef5bzKywan6ZBeA40.roa (raw, json)
Hash identifier: BXo3dYwr3fA2ChgCIkspkKZcdVWpg+w54GcyFCpPBw0=
Subject key identifier: 57:CB:6D:FB:2B:7F:E8:07:9F:E5:BC:CA:CB:06:A7:E9:90:5E:03:8D
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0184C09406A1E114DAA209E3E1E4C3E86999
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/V8tt-yt_6Aef5bzKywan6ZBeA40.roa
Signing time: Mon 28 Nov 2022 23:30:37 +0000
ROA not before: Mon 28 Nov 2022 23:30:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395092
IP address blocks: 217.195.152.0/22 maxlen: 22
213.108.246.0/23 maxlen: 23
45.155.36.0/22 maxlen: 22
2a0d:9ec0::/48 maxlen: 48
2a0d:d8c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c0:94:06:a1:e1:14:da:a2:09:e3:e1:e4:c3:e8:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Nov 28 23:30:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57cb6dfb2b7fe8079fe5bccacb06a7e9905e038d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:f9:f1:90:41:f1:13:5b:34:ff:ad:ab:0e:
50:67:b8:55:fe:e3:66:74:79:4d:46:a6:30:43:2d:
d4:c8:a5:c1:7f:72:ff:3f:49:82:13:8d:a8:0d:85:
e7:eb:16:53:a1:82:38:94:d6:92:b7:55:a7:20:6f:
f3:7d:0b:a8:f5:f4:0d:b8:1a:5e:7a:4b:22:66:12:
51:fa:f0:ff:51:37:37:6e:5f:38:79:9a:31:ce:05:
a6:71:97:8d:58:02:73:bb:4e:3e:1c:b1:e9:cf:d6:
23:04:68:d9:b2:32:cd:69:67:fc:e4:e5:32:23:f4:
1f:89:9b:d2:cb:dc:a8:67:d4:a5:54:4e:04:1a:07:
ce:55:54:11:07:6d:a9:72:17:05:57:61:0d:61:b1:
f3:a5:14:97:ed:cb:25:2a:a6:4a:9f:ec:3f:7d:50:
d1:43:49:98:3b:dc:5f:bf:32:1c:5c:75:60:f8:2f:
49:16:36:43:d8:d5:81:77:3e:4f:27:45:f7:6c:ac:
1b:50:ca:e7:14:03:ca:5b:71:92:e8:8d:e1:08:b1:
73:b8:7a:11:23:c6:13:0d:6f:60:57:52:db:3c:52:
eb:b0:b4:97:5c:70:b2:14:37:ca:ce:41:05:6d:be:
93:0f:c5:03:4f:2a:5d:e9:16:f3:51:0e:83:a6:e6:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:6D:FB:2B:7F:E8:07:9F:E5:BC:CA:CB:06:A7:E9:90:5E:03:8D
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/V8tt-yt_6Aef5bzKywan6ZBeA40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.36.0/22
213.108.246.0/23
217.195.152.0/22
IPv6:
2a0d:9ec0::/48
2a0d:d8c0::/48
Signature Algorithm: sha256WithRSAEncryption
45:bf:5c:8c:25:29:63:d0:98:ff:a0:a1:8e:e5:c3:44:77:bb:
28:2d:35:69:15:5a:b5:29:c8:06:07:d9:f1:03:af:64:ee:d6:
48:63:44:23:8a:f0:95:e6:fb:3d:93:3c:f4:36:84:ff:ae:7c:
a2:70:62:0b:40:1a:be:d1:f4:84:da:81:ac:86:e3:cb:c1:2f:
77:e2:6e:38:7b:67:e8:70:12:6a:f6:1e:06:4c:4e:bf:72:d5:
dc:ba:51:b2:ec:24:91:39:85:3b:4c:92:09:d2:d0:17:5b:9d:
de:c7:cc:7f:f4:95:7a:49:5a:5f:5f:95:fc:2a:c2:2c:ea:cb:
8d:e8:4e:2b:ce:c6:ec:91:59:32:ce:83:41:75:53:fb:f9:3d:
3e:25:52:9d:da:d2:e5:87:96:24:d4:7a:66:f4:9f:67:94:84:
26:96:26:42:03:32:66:c2:68:9f:59:09:3d:02:42:8b:14:a3:
04:10:0b:d8:b7:6e:ab:7d:d0:72:f9:41:92:0f:9f:67:a5:8f:
b8:15:0c:14:cf:00:5d:cd:be:07:1c:67:c1:d1:85:96:3a:43:
6a:81:88:4f:10:06:99:cd:82:1e:d9:51:76:c8:2b:6d:32:e9:
5f:40:6f:18:00:c4:49:59:10:c7:93:31:66:58:5b:6a:06:f9:
99:1f:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org