Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uWdDb8IXYQqce2igE6XRcYxnRqs.roa
File: uWdDb8IXYQqce2igE6XRcYxnRqs.roa (raw, json)
Hash identifier: fWUJU8d2wOAHLeTOhPyVnCAU6vMYYqK7PyAEa1s/bhU=
Subject key identifier: B9:67:43:6F:C2:17:61:0A:9C:7B:68:A0:13:A5:D1:71:8C:67:46:AB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018243C64513F6FDB8FE044446B55305F88E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uWdDb8IXYQqce2igE6XRcYxnRqs.roa
Signing time: Thu 28 Jul 2022 07:47:23 +0000
ROA not before: Thu 28 Jul 2022 07:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 212.69.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:c6:45:13:f6:fd:b8:fe:04:44:46:b5:53:05:f8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 28 07:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b967436fc217610a9c7b68a013a5d1718c6746ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:83:64:95:fd:1f:8f:df:3f:fe:e8:6f:f2:
13:13:8c:41:99:9a:e4:70:09:80:bc:a7:14:c9:88:
6f:7f:35:5a:21:9f:99:19:f0:e3:77:92:b2:52:9c:
a6:9d:4b:36:2f:ca:db:d3:63:41:14:02:5f:e2:50:
d2:e7:ff:c8:b7:59:1d:90:8d:18:80:17:eb:9c:a0:
02:40:36:8b:68:a2:c8:32:ee:be:56:c1:c5:23:f0:
ff:93:cc:2a:0c:4e:15:45:cd:9f:eb:43:dd:61:b1:
a9:ba:bf:c5:c2:51:9b:e9:68:86:0e:b7:ce:6a:f5:
13:71:1b:31:3b:4c:5a:e2:3a:71:bc:e6:4c:63:58:
59:03:bd:d2:2a:75:a1:e1:9e:9f:ad:2b:92:be:d9:
af:10:ee:1d:ea:b0:bc:b0:73:92:e4:dd:fe:4b:d2:
6f:07:62:30:c2:6d:59:a2:d8:35:58:77:e8:f7:a4:
2a:cd:48:71:53:88:03:a8:57:7a:54:da:2e:f1:61:
79:a4:99:7b:9e:f5:1e:99:ee:6d:06:c7:dd:45:47:
30:b3:17:1b:27:96:e9:2f:2c:0f:59:f1:e7:4e:a0:
f9:3e:62:d5:f1:77:b8:c4:0e:0f:f1:4a:f6:96:af:
57:3a:2a:8d:e8:90:39:13:b5:66:d1:e8:cf:aa:02:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:43:6F:C2:17:61:0A:9C:7B:68:A0:13:A5:D1:71:8C:67:46:AB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uWdDb8IXYQqce2igE6XRcYxnRqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6b:54:54:ed:7d:46:88:cc:33:7b:af:69:0f:fb:be:7e:4f:
3e:a8:2b:29:93:3d:97:cd:9f:c6:b3:35:01:46:3e:36:32:ac:
b7:69:45:96:70:a6:9e:7d:d5:03:c2:53:9b:4f:d0:aa:2a:e8:
0b:fd:6a:7a:08:0d:5c:c5:be:08:44:6c:41:54:de:a8:8d:7d:
05:7c:e3:7d:c5:9f:a3:2a:f6:8e:cb:18:20:8a:30:60:44:56:
c2:30:36:21:49:b1:48:55:a5:96:98:45:d3:47:de:61:9d:71:
9a:0d:e6:d9:df:62:ee:c1:a5:83:b8:0f:58:00:7f:7e:03:8e:
f3:e3:a3:be:99:59:b7:ff:90:c0:75:1f:ee:64:ba:26:11:55:
5a:e6:99:1e:09:4a:ff:70:20:b7:49:2c:33:f0:f1:c6:c6:52:
60:3f:b8:7b:22:c7:f7:4d:db:67:c4:cf:d1:ba:30:6d:19:7b:
71:68:20:cb:b9:bc:c0:f7:14:ac:74:6a:ec:bf:7d:6a:1a:5c:
62:35:6f:6e:76:e7:02:b4:b5:f5:70:22:e0:24:c1:af:ee:ff:
04:b2:83:fc:a9:27:4c:97:24:af:da:e1:f7:62:50:3d:f2:49:
c9:fc:be:c5:23:4e:64:27:e9:8e:3e:1a:9b:87:4a:20:e2:74:
64:02:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org