Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/c6YcHK_y1RmsmZxIU5EUjjZEI3E.roa
File: c6YcHK_y1RmsmZxIU5EUjjZEI3E.roa (raw, json)
Hash identifier: o5P1OXjaIcg3/DRJL9rv4jnPtGfaAeC+RDAf6neL+lo=
Subject key identifier: 73:A6:1C:1C:AF:F2:D5:19:AC:99:9C:48:53:91:14:8E:36:44:23:71
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 07C2A651
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/c6YcHK_y1RmsmZxIU5EUjjZEI3E.roa
Signing time: Sat 01 Jan 2022 12:57:25 +0000
ROA not before: Sat 01 Jan 2022 12:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198060
IP address blocks: 193.56.211.0/24 maxlen: 24
193.56.209.0/24 maxlen: 24
193.56.231.0/24 maxlen: 24
2001:67c:1108::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130197073 (0x7c2a651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Jan 1 12:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73a61c1caff2d519ac999c485391148e36442371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:86:9c:1b:ff:74:c9:23:75:25:43:90:8b:
17:11:b6:e5:b1:34:9d:73:2d:27:d8:10:f8:88:e7:
52:05:1e:83:b8:da:18:8e:8d:42:24:4d:4d:ee:53:
0c:10:87:4a:e1:4d:f9:46:08:b0:5d:be:8d:48:a0:
7f:cd:8d:9d:28:0a:f3:8d:fa:71:34:f9:57:52:29:
34:79:53:88:ef:bc:3e:d9:65:7e:0d:fd:ef:6c:fe:
06:56:68:38:ab:76:9d:b6:7e:9b:75:dc:4b:f1:44:
dc:22:ac:52:c6:d6:5c:2b:06:1d:3f:5a:01:75:a4:
4a:11:0a:b2:cd:9d:dd:72:2e:9c:d5:27:b0:83:ec:
88:cd:48:b0:45:5f:91:75:31:1b:70:ec:96:b6:e2:
82:d4:f4:0e:a8:5f:ad:71:f6:87:7d:4a:76:a5:bd:
fc:78:51:e5:5e:04:6e:33:f4:4f:a5:81:6d:6c:2b:
08:b9:5d:bc:f8:1c:98:ba:60:15:44:5a:12:c2:51:
59:0d:d0:c1:86:25:9f:df:f9:4e:fe:7a:56:85:42:
70:1a:ab:22:7b:f1:48:57:ec:03:ca:ab:c7:37:f0:
6f:58:c4:9c:98:d3:00:6b:de:76:83:e7:56:a7:7e:
f6:28:f4:fa:74:63:48:c3:98:bb:50:f8:b7:e8:45:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:1C:1C:AF:F2:D5:19:AC:99:9C:48:53:91:14:8E:36:44:23:71
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/c6YcHK_y1RmsmZxIU5EUjjZEI3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.209.0/24
193.56.211.0/24
193.56.231.0/24
IPv6:
2001:67c:1108::/47
Signature Algorithm: sha256WithRSAEncryption
71:97:4e:c4:29:f3:c3:3f:33:c0:88:9a:e4:23:a6:4f:fa:41:
77:62:28:db:db:a7:a2:ba:ee:f0:5a:3b:bb:41:a2:4f:e6:46:
aa:4d:81:b5:3a:cf:fa:2b:68:93:8b:a6:1d:2e:c9:6f:98:fa:
c7:9c:db:df:ea:7c:c8:1b:29:6c:39:a9:67:66:be:1c:b5:5a:
90:24:4d:9b:b5:1d:f6:38:51:bd:26:12:97:24:86:05:32:46:
fe:eb:8d:c7:41:2e:6d:45:b1:00:ae:dd:27:48:e1:6d:74:b2:
ed:59:51:73:61:cc:4f:cc:bb:e8:11:fd:2b:8d:90:53:27:cc:
6e:73:0c:32:5f:fd:46:97:60:72:d6:04:7e:d6:3a:ac:37:79:
ee:5c:5e:53:ce:27:66:55:21:3c:ba:c0:62:9a:c1:e2:33:c7:
d9:fc:03:73:4e:80:26:4a:45:89:26:b9:83:f6:61:cb:e7:20:
4f:ac:1e:55:2e:d3:de:e8:fa:1d:d6:5f:65:43:ef:e7:62:cc:
5f:4a:9b:3b:b5:13:0c:94:53:f2:e3:8d:7c:72:e2:d0:1d:99:
cd:d0:7b:60:89:eb:83:e8:4d:29:51:51:17:bc:6b:65:1a:30:
e6:11:49:87:4a:78:88:30:0a:17:10:48:1a:99:d7:20:33:46:
22:5b:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:29 2024 by rpki-client on console-fra.rpki-client.org