Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/6MNf4pybbJ-2v97E9jJPDqqk4YY.roa
File: 6MNf4pybbJ-2v97E9jJPDqqk4YY.roa (raw, json)
Hash identifier: GHRwqdh7HkciXDNpBNwIkEYT2DgReUQwdV+4Ej8/7uk=
Subject key identifier: E8:C3:5F:E2:9C:9B:6C:9F:B6:BF:DE:C4:F6:32:4F:0E:AA:A4:E1:86
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 90F885
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/6MNf4pybbJ-2v97E9jJPDqqk4YY.roa
Signing time: Sat 01 Jan 2022 03:58:09 +0000
ROA not before: Sat 01 Jan 2022 03:58:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62020
IP address blocks: 91.246.55.0/24 maxlen: 24
45.159.12.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
45.159.13.0/24 maxlen: 24
185.9.0.0/22 maxlen: 22
2a03:4440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9500805 (0x90f885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 03:58:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8c35fe29c9b6c9fb6bfdec4f6324f0eaaa4e186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:35:21:38:5d:85:a0:8f:f6:ed:87:a6:df:
d7:cf:46:13:8c:d8:32:dd:46:dc:a3:0b:ea:56:b5:
db:7c:fc:8c:65:b7:d5:fc:66:50:1c:6c:ed:3b:9c:
18:ad:36:85:94:b8:70:b4:2a:ee:21:03:ba:31:7d:
aa:8a:32:3e:de:ac:b2:d5:8c:7f:2e:f3:ad:71:3c:
78:ae:56:3f:0d:f5:a3:97:00:ea:23:48:fe:df:e3:
31:b7:fb:73:06:c4:c6:3d:ff:5a:27:cf:5d:37:b6:
ca:dc:14:93:88:da:a8:2a:79:d5:31:f2:1c:f2:50:
f1:62:19:cd:5f:9d:fe:9b:94:41:45:d0:9b:13:1e:
10:dc:be:4b:78:bc:0a:2a:c6:72:75:4c:32:dc:4d:
ce:b4:bd:69:b5:6b:0e:67:a2:0b:81:6b:ef:cd:87:
bd:b7:27:f1:6e:dd:70:cd:43:12:48:2b:e3:86:36:
ac:b2:89:c7:86:f5:ba:36:c9:18:2b:2d:88:31:7b:
0e:99:ea:bd:a2:51:0d:20:79:6a:88:4e:49:9d:b8:
48:2e:89:d8:53:1a:6e:e2:38:42:62:c9:ba:ac:83:
21:ff:79:26:b9:ef:d1:40:01:13:50:c9:ef:d2:d7:
46:2c:59:f6:64:08:92:f3:f0:36:b9:5b:6e:31:d0:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:5F:E2:9C:9B:6C:9F:B6:BF:DE:C4:F6:32:4F:0E:AA:A4:E1:86
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/6MNf4pybbJ-2v97E9jJPDqqk4YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.12.0/23
45.159.15.0/24
91.246.55.0/24
185.9.0.0/22
IPv6:
2a03:4440::/32
Signature Algorithm: sha256WithRSAEncryption
2f:26:7e:a3:b3:96:c1:e4:89:1a:96:ef:2c:75:ba:04:c4:f6:
bf:bf:c6:6f:09:93:0b:72:9c:b8:e2:4d:46:b0:2c:77:ae:19:
11:37:09:63:e4:0e:a6:d4:0c:1a:fd:5d:c4:9e:1f:17:69:32:
8a:54:e5:07:25:7e:a2:ca:3d:43:76:36:7d:09:fc:02:c7:de:
ab:a7:b3:c6:33:8b:76:e3:94:70:a6:4a:ce:1f:a1:9b:b6:9e:
f4:dd:73:f4:99:83:60:38:b5:66:ba:c8:bc:1a:69:26:c5:b1:
be:d0:06:77:3f:ce:1e:ad:c7:dd:10:ec:7f:2e:0e:09:39:6f:
59:26:6b:2a:5e:a2:f2:b6:ce:4a:0c:fe:b7:d4:57:53:5c:d9:
42:39:67:64:9d:85:ca:1a:0c:92:84:b7:84:3f:c7:3a:4b:6c:
e9:f5:57:23:06:f4:da:69:fb:6d:f5:ae:ae:d2:06:7a:3c:92:
25:01:8e:7c:ff:f8:d2:18:f2:95:45:a0:08:d7:60:d5:61:15:
1a:94:59:b8:77:c7:ef:63:38:7e:1e:f0:45:7f:fb:f5:07:7e:
ba:2d:7e:64:8a:56:ad:69:11:17:9f:63:de:f4:f4:b0:05:4f:
e3:80:1a:35:ea:58:9b:26:da:2d:60:42:8c:48:a5:b4:6d:57:
5c:f8:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:01 2024 by rpki-client on console-ams.rpki-client.org