Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vE6yCMH_S8-5oBpfr70Tr6K0TpU.roa
File: vE6yCMH_S8-5oBpfr70Tr6K0TpU.roa (raw, json)
Hash identifier: DP2VEiTMD6hBqt8mRHN+KTES5QcwKsJe1GfKDbcJom4=
Subject key identifier: BC:4E:B2:08:C1:FF:4B:CF:B9:A0:1A:5F:AF:BD:13:AF:A2:B4:4E:95
Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial: 03C39AF9
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vE6yCMH_S8-5oBpfr70Tr6K0TpU.roa
Signing time: Sat 01 Jan 2022 03:53:23 +0000
ROA not before: Sat 01 Jan 2022 03:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50920
IP address blocks: 62.93.84.0/24 maxlen: 24
62.93.87.0/24 maxlen: 24
82.192.6.0/24 maxlen: 24
217.16.119.0/24 maxlen: 24
85.13.58.0/24 maxlen: 24
176.61.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63150841 (0x3c39af9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
Validity
Not Before: Jan 1 03:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc4eb208c1ff4bcfb9a01a5fafbd13afa2b44e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:d3:ba:32:73:a7:41:9f:05:a6:21:41:fc:
5f:3c:73:fd:dd:56:ab:a1:0c:3d:61:b3:31:88:75:
49:59:86:97:c4:65:d5:99:04:80:c1:01:e4:06:d2:
a4:04:b1:a3:26:16:eb:aa:26:f1:ce:42:01:67:31:
53:4c:13:26:cd:33:fc:b9:22:5f:2a:1e:34:d4:99:
74:de:71:60:3b:d2:26:a3:05:ac:83:c2:01:ed:77:
53:ea:fc:03:af:28:5c:61:68:fd:0a:27:9f:f4:cf:
7c:7c:ff:66:63:d1:0a:44:7a:48:d1:bb:09:00:54:
7b:21:7b:a6:3b:85:12:da:42:a6:56:99:e9:a7:ea:
bd:9d:be:a2:47:90:e6:ba:96:7b:6a:2a:df:e2:c3:
0c:5e:b2:91:ab:3f:44:c5:55:74:38:8c:cd:79:1e:
38:2a:d8:d1:32:eb:3f:78:23:ed:c0:15:43:73:da:
4a:81:19:ee:5a:24:6e:74:98:14:f7:fe:8a:3f:fb:
65:d6:18:30:77:56:57:c5:ad:f7:fa:68:13:0d:fa:
01:80:28:68:5b:6c:40:05:16:cb:a5:35:9b:82:e1:
ef:6c:68:5a:c2:a1:82:5b:e3:74:47:62:da:80:15:
41:21:29:fe:51:b8:c0:a5:7f:df:50:a8:a6:b8:63:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4E:B2:08:C1:FF:4B:CF:B9:A0:1A:5F:AF:BD:13:AF:A2:B4:4E:95
X509v3 Authority Key Identifier:
keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/vE6yCMH_S8-5oBpfr70Tr6K0TpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.84.0/24
62.93.87.0/24
82.192.6.0/24
85.13.58.0/24
176.61.160.0/21
217.16.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c7:b7:85:8d:bd:d7:ec:d0:09:81:77:5b:a2:bd:b7:e6:b0:
d5:c4:f8:75:1c:3d:4c:68:7a:b9:8b:eb:2f:2c:96:3a:92:27:
71:b4:4b:48:dd:f2:19:cf:43:f8:25:2b:cf:15:01:8c:4a:10:
a9:7f:31:e6:b1:9b:3e:ef:87:ab:21:b1:de:57:0c:5f:ae:1f:
74:71:53:20:8b:4f:0f:a7:b5:9c:1c:74:fa:d7:53:7c:6e:39:
6b:5d:88:0c:5d:6d:9c:0b:fc:ee:d2:ab:12:a7:a7:90:92:37:
c8:b9:8d:02:cb:68:e0:59:a5:7d:3e:c4:5c:d1:01:b4:d1:96:
fe:09:88:db:35:a0:ff:eb:1a:1e:73:10:e0:0f:fe:ec:3e:f3:
69:8d:b9:84:4e:4a:62:bc:6d:d7:6e:20:ed:77:24:7e:6c:51:
7a:a3:eb:47:d1:c8:d9:19:d9:39:b2:92:b9:1d:e5:b2:84:37:
e7:b9:99:d8:c8:11:f5:87:7e:e7:f6:53:32:c7:6a:78:8f:c5:
62:50:07:3c:db:e0:49:be:1c:56:e1:fc:4e:04:04:99:7c:b0:
dd:d2:fa:ad:67:58:f7:09:fc:8a:7b:9b:dc:b9:89:1e:7c:a9:
11:c3:9c:f8:58:4e:10:21:f4:ad:5c:e4:60:b6:6b:5f:64:7e:
65:30:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:40 2023 by rpki-client on console-ams.rpki-client.org