Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/6ScuxnszLJlZxX-Ehj9z-arkVuU.roa
File: 6ScuxnszLJlZxX-Ehj9z-arkVuU.roa (raw, json)
Hash identifier: EcHlhdGhWCYWwNmqwS1fzMza1cAByR90KRJzgpHsO8o=
Subject key identifier: E9:27:2E:C6:7B:33:2C:99:59:C5:7F:84:86:3F:73:F9:AA:E4:56:E5
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01847AF5DD7908AF699FDB0C092D74E13C69
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/6ScuxnszLJlZxX-Ehj9z-arkVuU.roa
Signing time: Tue 15 Nov 2022 11:04:04 +0000
ROA not before: Tue 15 Nov 2022 11:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 89.251.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:f5:dd:79:08:af:69:9f:db:0c:09:2d:74:e1:3c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Nov 15 11:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9272ec67b332c9959c57f84863f73f9aae456e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5d:db:f3:fd:7d:cc:82:b0:8c:b2:ea:01:55:
62:5b:37:48:17:f8:89:7b:53:87:6a:19:cc:cb:af:
49:d4:af:21:1d:71:05:92:42:29:bc:2d:77:e5:0f:
51:0b:77:23:87:e1:87:15:a4:35:3c:b8:cd:f5:a4:
a5:bc:b6:ea:46:54:9b:d8:ce:11:69:b9:40:d5:7a:
03:53:56:65:2a:d9:e8:6d:2d:b0:f6:63:07:44:36:
39:db:25:84:1c:98:ba:a7:8a:90:ad:b6:c4:15:f4:
a0:a4:ee:78:dd:59:aa:d7:8c:db:62:ef:27:13:65:
55:d3:c1:bc:30:24:81:14:4e:7d:52:ef:ae:bf:71:
15:80:bf:f2:c2:01:2d:32:d2:6d:45:73:f7:50:52:
23:30:be:d9:c8:6a:a0:5e:09:ac:3a:19:7c:53:66:
0d:22:a9:3b:13:56:30:19:d3:cd:2b:e5:5b:7a:48:
74:e4:28:52:5b:d1:f6:bb:f1:76:30:f6:26:20:c3:
90:83:4d:31:4a:4d:2f:7b:9c:ed:ed:ed:48:8d:9c:
13:5a:67:65:52:5f:a9:ab:27:0a:65:59:6b:da:12:
40:e8:fa:7b:a5:dc:c8:ad:5f:70:8f:ae:1b:42:4f:
88:4f:10:c8:c7:f7:ff:6c:bf:22:ed:a7:f9:c2:b1:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:27:2E:C6:7B:33:2C:99:59:C5:7F:84:86:3F:73:F9:AA:E4:56:E5
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/6ScuxnszLJlZxX-Ehj9z-arkVuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:21:1a:65:34:7b:0e:ac:a3:59:fc:c2:b1:2b:62:e2:2c:5d:
2d:6e:29:15:43:1c:b3:52:67:02:9e:b3:2a:9d:39:b5:c7:31:
e7:4c:0f:ac:f4:fe:1e:6a:fe:eb:16:77:33:a5:cc:f4:94:05:
a6:b5:77:50:9c:7b:6d:af:82:fe:93:2e:31:3f:80:df:71:00:
d3:f4:8c:1e:ba:7e:5c:4c:d8:ce:af:c9:c2:24:2c:45:83:b6:
7c:b4:51:54:16:05:75:5e:1c:ba:a7:6e:1a:6c:14:cd:b4:47:
e8:a1:63:7e:f1:a3:da:21:7f:b7:1a:0c:63:37:8e:94:03:93:
f6:08:d7:0e:2d:04:86:79:e0:1b:1e:23:21:7a:7b:f2:da:ac:
64:3e:40:f5:64:6f:1f:b9:03:d0:72:3f:4b:12:66:c6:54:57:
f3:ee:32:34:37:f0:59:e6:fe:28:cd:d8:ec:f8:7c:e0:54:f8:
83:28:44:64:4f:46:64:f7:bd:74:0a:9a:4b:88:80:36:32:84:
41:92:ba:50:c5:c3:e7:72:88:4f:33:6e:bc:fa:b4:ab:3b:62:
3a:f1:c6:2a:09:7f:52:19:22:ec:1a:d1:22:60:b4:9d:54:62:
63:7a:39:f6:7f:c6:04:d9:e4:10:10:ff:fe:7f:eb:6e:64:8f:
b3:0c:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:32 2025 by rpki-client