Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6eA3KBwreutEuoK8SQfOPtExhKk.roa
File: 6eA3KBwreutEuoK8SQfOPtExhKk.roa (raw, json)
Hash identifier: nQifZS0Yj23oQZ9Cst4EhzG36KIo1fEBXR+iOlDutcw=
Subject key identifier: E9:E0:37:28:1C:2B:7A:EB:44:BA:82:BC:49:07:CE:3E:D1:31:84:A9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0184FBB31A0BE6FDA8E11CA6AE7A65281155
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6eA3KBwreutEuoK8SQfOPtExhKk.roa
Signing time: Sat 10 Dec 2022 11:02:09 +0000
ROA not before: Sat 10 Dec 2022 11:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 62.60.220.0/22 maxlen: 24
213.176.68.0/22 maxlen: 24
62.60.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fb:b3:1a:0b:e6:fd:a8:e1:1c:a6:ae:7a:65:28:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Dec 10 11:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9e037281c2b7aeb44ba82bc4907ce3ed13184a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:a7:04:a8:6e:0c:e8:b3:c5:c6:31:56:4b:
60:11:37:fd:0c:8c:61:1e:12:19:2d:60:22:6e:22:
99:3b:79:91:fb:a2:05:de:91:43:e0:3b:5e:ed:7e:
e9:fd:cb:7b:eb:31:e9:07:20:18:d8:0f:2d:a9:28:
d4:b9:d2:14:aa:da:ff:1c:e0:98:00:17:ff:03:70:
ae:03:74:f0:e2:af:45:09:d5:a0:82:2f:b3:65:00:
f0:96:04:4f:18:80:68:a6:bc:e2:50:73:2c:4b:ab:
ad:dc:0d:de:64:0c:5d:bd:0f:18:63:83:6a:34:7c:
d1:0f:5a:3c:63:8a:fd:68:88:6a:c9:8d:8b:ea:f3:
b1:40:45:33:bc:08:48:aa:99:8e:55:3f:13:52:45:
5d:ac:71:87:3f:bd:22:73:ce:ec:0c:fb:a5:81:80:
ad:b0:01:6c:7e:93:54:6c:8a:e8:23:a3:8b:7e:a2:
94:9e:ed:de:28:a1:f3:a1:70:0a:f5:b6:34:d1:9f:
68:07:7d:48:43:93:1b:14:88:06:81:54:7d:b6:06:
ee:c7:be:72:ad:28:13:48:e2:03:4f:cb:45:3d:18:
86:4f:b4:85:ab:eb:b2:3e:2a:23:36:fd:ed:e0:b8:
66:e9:66:4d:a3:0e:7a:51:3a:1e:83:49:1a:d8:2c:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:37:28:1C:2B:7A:EB:44:BA:82:BC:49:07:CE:3E:D1:31:84:A9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/6eA3KBwreutEuoK8SQfOPtExhKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.212.0/22
62.60.220.0/22
213.176.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:99:9f:3b:2c:5e:28:30:a0:f3:ec:14:5f:c2:c2:a5:11:ff:
18:d0:73:e0:f6:bd:b4:d4:c6:5d:94:ec:32:f3:74:d7:95:3c:
1f:0c:7d:5d:f3:2f:3f:29:2a:82:98:9e:84:a9:83:89:6a:dd:
82:7f:e2:ac:31:a2:bf:b8:50:57:14:8b:5e:c4:ac:83:f1:40:
4c:db:9f:12:69:75:18:f3:d6:4c:0d:bb:78:b4:0f:41:94:d0:
04:ab:9d:4c:4f:2c:d5:0b:61:2a:30:80:f4:b5:81:9e:8e:2d:
87:06:cb:c6:80:c6:4e:de:f9:21:65:3e:3f:c3:e8:27:65:e8:
19:93:3b:47:1f:a9:55:35:8c:14:83:f9:e1:c3:92:38:8b:d0:
a1:10:a6:d0:e3:29:ec:63:f2:4d:c1:bf:d3:b9:60:e1:0f:c8:
a7:5b:28:d8:0d:99:4a:87:64:e5:10:6b:93:bc:76:05:d7:1e:
74:4b:7b:54:11:b0:36:cb:83:68:f7:00:b0:a8:56:31:4d:28:
ec:77:b0:67:8a:5b:70:7c:a0:14:77:98:08:7f:69:d9:3f:52:
b6:24:3d:a3:41:6b:21:58:9e:b3:4e:d6:80:60:a6:a3:4a:f5:
d3:0f:42:1e:01:3f:94:43:4d:c0:bd:ef:61:34:b7:87:1b:17:
07:39:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org