Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bIK_GyvTFm4rm6DMLpJ6VZ63PWw.roa
File: bIK_GyvTFm4rm6DMLpJ6VZ63PWw.roa (raw, json)
Hash identifier: oLCpsgTWFSru8e4eAHeyV2LcTy2tZOsTwPKy2+LU9hA=
Subject key identifier: 6C:82:BF:1B:2B:D3:16:6E:2B:9B:A0:CC:2E:92:7A:55:9E:B7:3D:6C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0182B5B8AF1F2E7D5BFEAD7D6C0B180A3F84
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bIK_GyvTFm4rm6DMLpJ6VZ63PWw.roa
Signing time: Fri 19 Aug 2022 10:49:15 +0000
ROA not before: Fri 19 Aug 2022 10:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 212.69.18.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:b8:af:1f:2e:7d:5b:fe:ad:7d:6c:0b:18:0a:3f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 19 10:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c82bf1b2bd3166e2b9ba0cc2e927a559eb73d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:59:9a:aa:a4:96:54:80:7f:ff:2e:d4:41:
83:9d:ee:6c:98:6d:d7:be:53:19:97:18:b7:04:1e:
1c:1f:53:9e:3e:b3:1d:c5:98:d6:74:46:30:cd:b7:
ff:c3:2c:43:68:66:0c:d0:23:cb:90:2d:b7:eb:5c:
be:85:0e:d7:c7:8d:bb:11:7e:97:4d:8b:1a:36:6f:
d4:3f:35:ab:63:5d:e1:47:fc:2d:19:2a:7d:b1:2b:
6b:e4:bc:54:09:45:aa:7b:3f:3c:da:bd:6f:15:b3:
da:5f:d8:b8:01:68:4d:b7:a3:32:79:56:81:6c:14:
4f:c5:ca:32:3f:db:a8:f1:a3:d3:34:45:15:1d:6e:
0b:31:77:00:b0:13:37:da:53:58:35:21:8c:f8:46:
0e:35:c3:f1:4b:af:fe:30:c9:a3:d4:a2:66:1a:3e:
9b:b6:35:13:78:6e:5a:a1:43:ec:f3:dc:ae:66:68:
1f:37:80:50:81:b1:73:d7:d1:c3:9f:47:70:4b:f6:
21:8c:fa:f3:fe:7e:ae:21:45:01:57:a9:e5:e9:e4:
5f:4b:8c:73:28:48:f1:e1:5f:04:02:9c:b0:be:e9:
93:83:a5:28:8b:14:3a:ab:4d:30:3f:53:15:9f:56:
82:5e:68:b1:03:93:c1:0e:63:c5:f8:d3:07:67:8e:
88:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:BF:1B:2B:D3:16:6E:2B:9B:A0:CC:2E:92:7A:55:9E:B7:3D:6C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/bIK_GyvTFm4rm6DMLpJ6VZ63PWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
212.69.18.0/24
Signature Algorithm: sha256WithRSAEncryption
30:44:4f:a5:84:93:d4:2c:8f:58:f7:17:5a:b6:e4:ca:81:16:
b4:b8:b0:47:51:5e:a1:d9:1f:ae:9f:1c:8a:e6:cb:a0:21:30:
d7:5e:5c:f2:68:a1:89:2e:b8:3f:19:b6:87:06:53:da:e5:f4:
69:08:b2:8e:93:8d:fd:3b:8b:2a:c5:7c:9b:8a:28:de:40:fe:
1d:79:43:af:e6:53:55:be:73:e2:34:3d:00:c1:d9:e3:f7:bb:
cc:3b:d3:f6:f0:b5:ce:e9:b8:3f:9a:97:81:3f:3b:e5:f1:78:
c8:0b:d0:03:d3:fe:26:69:97:99:3b:b8:8a:81:f7:90:f8:77:
0a:7d:0d:d1:94:84:37:4e:60:2f:ae:93:81:6c:78:77:0b:a6:
db:25:c3:2d:12:3f:e0:7a:b6:be:56:98:a9:d2:cb:54:0a:0f:
7f:e5:01:e1:1e:f0:10:c6:ae:a3:a1:3c:c0:1a:7e:34:d6:84:
04:87:64:7a:59:a6:a7:6a:1f:bb:36:dd:10:5a:65:e6:55:8e:
c4:33:4d:5a:1d:b9:37:e5:d0:f6:04:16:b6:48:78:4b:13:41:
9c:56:95:3c:62:cd:34:56:92:53:c1:fd:c3:32:b7:a7:c3:be:
69:49:81:54:91:7a:f7:e1:c8:50:6e:c6:e0:38:cb:19:c5:b3:
a3:26:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org