Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/6VHC69gYxST8iHYRnfs4wPIhMp4.roa
File: 6VHC69gYxST8iHYRnfs4wPIhMp4.roa (raw, json)
Hash identifier: 5PP0Nzz/iKejfkTHIrNDc3T0sQvuYazDamADdjcnbIA=
Subject key identifier: E9:51:C2:EB:D8:18:C5:24:FC:88:76:11:9D:FB:38:C0:F2:21:32:9E
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06AC6F0F
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/6VHC69gYxST8iHYRnfs4wPIhMp4.roa
Signing time: Tue 22 Mar 2022 13:24:41 +0000
ROA not before: Tue 22 Mar 2022 13:24:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111963919 (0x6ac6f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Mar 22 13:24:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e951c2ebd818c524fc8876119dfb38c0f221329e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:7e:1f:a8:2a:d7:e3:c2:a2:55:9c:4a:cc:
e5:71:97:5e:46:e6:94:4c:54:98:41:6e:21:61:13:
36:3a:92:2b:72:a8:80:28:8c:f2:92:dc:68:78:fa:
98:83:6f:22:09:ee:50:0e:95:09:f6:dd:4c:e5:d5:
94:2e:12:63:8d:25:1a:cc:79:8b:68:28:aa:07:be:
2a:ff:20:e6:85:2e:9a:51:71:4e:24:97:bb:2b:99:
04:56:ff:a1:64:c7:cd:da:18:62:99:1f:94:fe:b0:
c4:1f:96:3d:6f:5b:88:6f:09:78:7d:f9:1d:5a:bc:
38:13:47:81:f8:a4:31:82:4c:db:5a:ff:a4:f2:1d:
c4:5a:80:14:1b:c2:eb:8a:d0:a2:16:ef:90:72:3a:
cd:e0:6f:b8:bf:fe:cc:eb:66:b8:e3:48:32:e0:08:
0a:40:9a:b4:dc:de:50:90:e9:8b:96:f5:fb:0e:7d:
c9:86:b0:ff:fa:bd:9f:d0:58:81:69:4b:54:e9:a1:
9c:54:2a:7e:11:66:48:1b:5d:a6:45:8c:99:e0:56:
8a:3a:e9:05:88:2b:be:6e:e0:06:48:51:ea:5b:f7:
60:ed:e6:84:07:79:39:e7:78:c2:37:7e:6d:0b:3a:
f6:01:62:85:68:41:53:60:e9:da:7f:fe:0a:70:70:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:C2:EB:D8:18:C5:24:FC:88:76:11:9D:FB:38:C0:F2:21:32:9E
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/6VHC69gYxST8iHYRnfs4wPIhMp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.99.255
94.137.75.0/24
94.137.78.0/23
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
86:73:4a:56:be:81:ed:d4:86:40:b9:01:e2:ec:cb:a4:32:8f:
23:cc:ac:30:99:31:14:0c:cd:39:9c:20:65:b1:11:6f:41:5d:
e3:36:33:20:81:07:c9:cb:f0:70:54:b6:32:2f:06:91:bc:74:
5f:d8:93:71:53:60:34:78:ed:a8:a9:6f:1c:55:bd:66:6d:7a:
de:62:14:e1:68:db:48:59:79:ad:90:74:c3:b6:ed:56:76:d9:
29:52:53:6d:2c:b5:cf:de:90:5c:f9:d5:99:df:05:78:54:d9:
0c:2c:c6:96:94:5c:21:dc:66:50:ef:48:8c:84:51:8f:1f:62:
ec:a8:22:1a:e4:77:53:70:25:f8:6b:51:bf:6f:38:fd:1f:c9:
1a:73:fc:10:4a:3e:05:d5:6e:a4:03:8c:75:09:61:d8:e4:7e:
ec:87:c5:4a:52:34:38:de:9b:76:0d:75:e2:e7:57:66:ab:14:
a9:4d:b5:26:50:99:a1:ea:91:09:ce:08:62:7b:cb:ec:59:32:
4f:f7:42:2e:70:5a:27:bf:de:23:c5:7b:2b:05:b2:97:4a:8b:
67:d3:d6:9f:3d:ac:53:22:6b:df:7f:55:66:d8:f9:f1:0f:80:
6e:63:ff:d4:1c:0a:a1:36:94:cc:58:86:bb:ea:b6:c8:bb:dc:
38:4f:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org