Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/6Dqn7xu6GNhNRkkv1hXBgIyHHpM.roa
File: 6Dqn7xu6GNhNRkkv1hXBgIyHHpM.roa (raw, json)
Hash identifier: dY4hXs90/gJ3Nt+jzuJJUJJVs+Y4wWNev0wffKRBngo=
Subject key identifier: E8:3A:A7:EF:1B:BA:18:D8:4D:46:49:2F:D6:15:C1:80:8C:87:1E:93
Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial: 0B5C4CCF
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/6Dqn7xu6GNhNRkkv1hXBgIyHHpM.roa
Signing time: Sat 01 Jan 2022 10:57:46 +0000
ROA not before: Sat 01 Jan 2022 10:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 156.28.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190598351 (0xb5c4ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Validity
Not Before: Jan 1 10:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83aa7ef1bba18d84d46492fd615c1808c871e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:d1:9f:f8:e9:4d:e0:4c:42:5e:60:73:79:
dc:e6:1a:78:7b:36:12:f9:14:1f:8d:76:d2:cd:13:
36:c9:cd:1d:2a:5d:16:5c:dd:aa:0a:6b:b6:88:e6:
5b:35:64:8c:e2:a8:54:bb:7d:7e:6e:2c:bf:1c:93:
12:94:2e:0f:04:3c:0f:7e:a6:c1:23:dc:4c:bf:99:
30:88:1b:ad:6c:d8:ff:0f:a0:71:bb:32:23:86:ad:
66:62:6a:65:7e:d0:cd:55:1e:57:11:cb:33:c4:01:
b2:8c:af:5b:5f:c5:54:36:78:3b:87:ec:95:3c:39:
60:03:39:05:40:a5:13:65:4f:00:5d:93:fd:60:50:
be:c8:41:f2:3a:0d:e0:6d:65:ca:b6:99:31:77:1a:
d7:19:f4:d9:a9:f0:0b:e1:a2:81:6a:27:73:2f:02:
16:54:45:e3:bb:0e:e6:82:b1:21:58:2a:ab:e4:89:
d0:e1:47:9f:42:e8:48:3e:a5:87:62:df:fa:7b:ed:
11:ce:15:19:eb:93:55:ae:60:6b:c9:d6:f5:43:60:
f6:30:0b:79:b9:47:cb:fb:5b:52:72:56:f4:ab:1f:
72:86:59:5f:53:8e:13:ce:87:a5:c4:b0:fa:83:1f:
0f:76:3c:d3:5d:6b:a5:0f:40:d3:69:30:49:06:d5:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:A7:EF:1B:BA:18:D8:4D:46:49:2F:D6:15:C1:80:8C:87:1E:93
X509v3 Authority Key Identifier:
keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/6Dqn7xu6GNhNRkkv1hXBgIyHHpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ee:99:1f:2f:88:80:ef:dc:12:96:d7:71:e3:e6:7c:1b:5e:4e:
3d:da:d7:3c:0a:40:65:17:72:5e:0f:8c:7d:1a:b7:ef:d7:29:
7d:81:17:dd:ad:6b:bb:52:0b:aa:37:ef:e3:71:b0:73:ca:bb:
fd:4b:2b:3e:fe:43:f0:b6:57:7a:df:f5:7e:1f:ef:2c:31:7f:
58:98:ac:f3:81:2b:db:bd:ed:68:bc:8b:a8:05:e1:7b:55:ac:
eb:32:c7:90:21:90:c6:ab:a4:bc:99:04:96:0a:78:dc:85:e0:
92:15:16:c0:48:82:4b:b2:ea:13:53:9f:4b:79:46:ee:ce:55:
71:32:25:65:f8:71:39:27:c6:08:49:dc:3b:f7:4b:31:9e:0e:
b5:88:0c:f8:fc:97:7d:3c:e2:18:13:3b:44:08:01:bb:ef:d6:
d1:14:b7:33:3a:f2:6e:f7:3a:2c:7f:44:53:1f:ce:d2:0a:2f:
5c:4d:0d:2c:0f:db:d2:59:b0:ad:4a:74:e4:11:e6:1a:f9:1d:
89:16:ee:e9:84:b2:b7:28:8f:f1:d2:bf:f0:17:a2:22:f2:b8:
b1:82:26:f7:16:6c:f8:f1:99:a2:36:20:7f:31:f6:72:87:99:
2a:05:bb:61:4d:a7:15:7b:18:01:f4:a7:f6:45:5a:4c:65:33:
5a:08:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org