Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/R6X806OkmLeYcj5x9_TeJoNtlfA.roa
File: R6X806OkmLeYcj5x9_TeJoNtlfA.roa (raw, json)
Hash identifier: 0b7p9TYFn4D5DagTwunozATjO5FC7gkPZbJE9DB709o=
Subject key identifier: 47:A5:FC:D3:A3:A4:98:B7:98:72:3E:71:F7:F4:DE:26:83:6D:95:F0
Certificate issuer: /CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Certificate serial: 0184EFF9DDCB1556E29776B63588986FD3A9
Authority key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/R6X806OkmLeYcj5x9_TeJoNtlfA.roa
Signing time: Thu 08 Dec 2022 04:24:00 +0000
ROA not before: Thu 08 Dec 2022 04:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42865
IP address blocks: 185.10.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:f9:dd:cb:15:56:e2:97:76:b6:35:88:98:6f:d3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Validity
Not Before: Dec 8 04:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47a5fcd3a3a498b798723e71f7f4de26836d95f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:a3:9d:ba:35:88:5a:33:29:93:55:87:99:
ba:d6:5a:ca:bb:5a:19:c0:20:e6:34:ab:c5:82:ff:
72:80:a6:16:aa:9d:5c:f6:0d:ae:90:d0:6b:6a:0a:
32:f9:c1:de:87:71:2e:41:97:83:e0:64:10:f5:13:
31:d8:99:9d:54:7d:3c:26:91:70:33:ee:05:81:8e:
1b:4c:03:c4:2f:7f:1d:8d:05:6e:7b:a0:f0:c0:05:
0f:ee:a3:15:c1:d8:56:32:30:c8:2e:a1:be:0b:81:
32:a4:0a:d2:94:af:ec:f5:8d:a4:5a:58:8b:1c:6c:
2d:19:57:f9:a6:d1:e4:c6:14:b0:ad:d6:c7:12:7a:
1f:7e:5b:87:a0:89:3c:6f:97:32:fa:8a:25:95:48:
c3:f3:f0:b0:37:74:cd:68:86:5b:8e:ab:94:e1:07:
a9:b0:0a:3e:87:ae:26:67:e5:1e:b3:2f:4e:19:e2:
85:18:c7:d9:54:8d:7f:72:68:83:2b:6c:0e:93:03:
3a:a8:c2:28:38:15:8a:fe:91:af:c7:25:a3:f1:a5:
e0:44:64:31:0f:00:bf:6c:f2:1f:bd:74:4f:71:3e:
6f:50:c2:ca:f1:c3:7e:1b:74:73:f3:9d:99:a1:f2:
17:04:81:f1:51:e6:7b:30:35:b7:38:43:aa:9a:c8:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A5:FC:D3:A3:A4:98:B7:98:72:3E:71:F7:F4:DE:26:83:6D:95:F0
X509v3 Authority Key Identifier:
keyid:AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/R6X806OkmLeYcj5x9_TeJoNtlfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.209.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fd:f7:14:f6:98:50:d5:ab:8b:00:f7:af:d7:fc:75:cb:54:
c4:cc:7e:07:9a:5c:f3:8e:4d:a7:ea:09:29:64:6f:c9:3e:1c:
97:b8:e8:6e:a4:4f:63:22:e6:74:37:3e:e6:5f:bf:12:cd:6b:
42:18:56:cc:45:34:d3:1c:bb:c5:ea:27:35:a2:f7:69:f3:30:
ef:09:12:fb:95:e7:57:9f:b9:11:d9:b8:eb:17:83:b1:0f:e9:
d3:cb:42:25:13:7d:6f:53:c9:b7:7b:bf:78:47:9f:ae:11:52:
ef:2a:61:79:a0:d0:d7:05:29:dd:cb:67:44:e9:41:fb:52:47:
c7:9b:7d:c4:3f:b1:f3:e8:2e:d1:a7:9c:f2:34:e8:56:b3:86:
4e:d2:27:49:51:59:d8:40:81:88:27:71:63:27:95:43:05:48:
7d:82:80:02:ed:0d:4e:96:6c:5a:ee:24:29:6e:9b:7b:5d:89:
bb:a2:42:b5:55:d0:0d:3a:c9:e5:14:26:85:a3:a6:eb:5a:08:
bc:28:b5:3b:03:9a:85:64:4f:cc:a8:df:d5:47:a7:f5:d0:a3:
8f:4c:75:28:9c:59:0e:2a:b5:59:d7:16:c0:3d:d9:a2:6e:85:
41:fb:3b:d0:b1:66:ba:6b:12:2c:4b:74:7a:b7:77:e4:8f:73:
fe:d3:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:29 2023 by rpki-client on console-fra.rpki-client.org