Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6ut6y70upZsLySM1caUDNdVTLwM.roa
File: 6ut6y70upZsLySM1caUDNdVTLwM.roa (raw, json)
Hash identifier: HHIVMPyjE4ABI8h92h2jR/WaDo+88SsVv17U2NfuIYg=
Subject key identifier: EA:EB:7A:CB:BD:2E:A5:9B:0B:C9:23:35:71:A5:03:35:D5:53:2F:03
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09321E20
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6ut6y70upZsLySM1caUDNdVTLwM.roa
Signing time: Wed 11 May 2022 07:58:11 +0000
ROA not before: Wed 11 May 2022 07:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 212.69.1.0/24 maxlen: 24
109.233.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154279456 (0x9321e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 11 07:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaeb7acbbd2ea59b0bc9233571a50335d5532f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:12:00:63:f5:f1:cb:39:99:63:19:93:9a:
70:98:f9:f6:eb:dd:6f:e0:a7:f6:e4:fc:2f:7c:c3:
8c:95:69:f3:72:55:ff:32:3b:7c:02:ef:8e:be:1d:
09:10:3f:c5:66:82:ab:0e:c5:b9:f0:b9:c7:15:9d:
a6:2d:fb:23:20:db:33:a8:23:29:ad:62:40:b9:2a:
60:fd:94:3a:dc:e1:c9:91:6e:ad:e3:6d:63:24:3d:
5f:25:23:1f:65:39:94:4f:5b:54:5b:3e:da:c2:04:
8d:87:06:cd:68:c8:d6:ca:bc:42:e3:cd:9d:e7:0c:
ab:ed:61:2f:c9:fe:c7:09:f8:6f:69:f8:4a:19:d7:
5b:ac:ad:5e:8c:c3:18:a3:16:97:d1:ea:ac:db:36:
3b:70:54:82:a3:8a:6e:19:45:a2:bd:43:1e:d7:4f:
91:39:0e:a8:b5:47:56:9b:7b:06:ca:5e:41:f1:51:
22:73:e5:23:3b:0e:72:d3:eb:bd:c9:06:d5:8b:c9:
db:ce:bb:b4:5b:4d:20:d4:45:f8:df:e2:ff:fa:a7:
ca:a0:ce:3b:f3:03:16:49:54:e0:4a:22:ab:92:14:
05:15:19:9f:4f:1b:f4:1a:55:57:1b:e8:36:2e:27:
8d:cf:b9:75:57:e7:63:95:70:fb:be:30:b0:c5:f2:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:7A:CB:BD:2E:A5:9B:0B:C9:23:35:71:A5:03:35:D5:53:2F:03
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6ut6y70upZsLySM1caUDNdVTLwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.189.0/24
212.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d8:56:cd:e6:df:34:23:1a:aa:25:16:4a:da:5a:a9:d2:51:
e6:9a:b0:b3:a1:ee:08:09:19:d0:0d:6b:24:f5:2f:02:9d:02:
b6:0e:59:d4:f2:d6:64:23:84:a9:80:79:69:2d:14:69:18:6c:
15:3d:3a:61:3c:df:8a:84:eb:9b:6a:55:00:cb:12:e2:27:c4:
b6:16:5e:a1:a1:40:6f:d5:09:a7:58:10:9d:ba:f5:91:7b:c1:
b0:a6:b6:bb:7e:9a:56:4c:00:f4:40:c4:0d:a0:53:7c:03:0a:
b4:ea:c9:ce:5c:3c:1b:a2:6f:b0:f3:75:e7:44:42:4e:35:66:
ae:53:d6:3b:73:41:0a:6f:34:5a:3d:62:63:e9:61:1c:52:28:
c3:03:2d:26:4c:22:b6:74:76:de:1e:82:4f:91:fa:22:76:a5:
be:f2:62:d1:f5:4a:c8:f5:41:26:76:4f:15:90:9f:18:08:1e:
9f:c8:03:ff:fc:50:ee:94:fb:06:48:e0:c0:3e:a3:ca:fc:33:
d1:0a:ae:d9:f1:52:bf:c1:4f:23:af:ed:12:55:29:0e:de:57:
a2:d6:b3:78:ff:f1:04:d2:cb:83:92:9d:25:f3:1d:c8:7c:05:
fd:77:51:75:1f:d0:7d:75:30:5d:47:7f:97:d9:4b:73:79:be:
cd:fe:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org