Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/6S361fHCIAqAy4qX13eFGtbWbHA.roa
File: 6S361fHCIAqAy4qX13eFGtbWbHA.roa (raw, json)
Hash identifier: A41pg7GErI5SRFj0B+w4ks0US0TVXH7fMbFcchIILc0=
Subject key identifier: E9:2D:FA:D5:F1:C2:20:0A:80:CB:8A:97:D7:77:85:1A:D6:D6:6C:70
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 102EAEA1
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/6S361fHCIAqAy4qX13eFGtbWbHA.roa
Signing time: Sat 01 Jan 2022 03:54:51 +0000
ROA not before: Sat 01 Jan 2022 03:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206828
IP address blocks: 185.175.60.0/24 maxlen: 24
185.175.61.0/24 maxlen: 24
185.175.62.0/24 maxlen: 24
2a0b:d100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271494817 (0x102eaea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Jan 1 03:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e92dfad5f1c2200a80cb8a97d777851ad6d66c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:91:63:f5:ca:c7:a2:20:99:91:b9:70:82:
1f:23:73:91:65:bc:f6:33:0b:62:b8:df:73:18:ad:
40:f5:65:1f:33:34:75:18:27:76:90:40:c5:d8:4c:
be:94:0a:de:45:62:01:0b:56:e9:f7:90:17:3b:c3:
36:c2:d8:62:df:6d:11:c0:7c:91:09:54:8d:e6:c9:
f7:d1:3d:e5:de:d6:30:74:3c:10:4e:64:b2:4b:27:
3b:fb:7a:23:b0:db:5d:11:64:d8:76:43:7e:15:81:
48:f9:db:76:e1:af:db:db:c4:68:86:bd:0b:b4:99:
7b:81:94:2e:58:1d:2b:b3:97:0e:b4:fa:30:9e:99:
c3:df:80:45:c3:ea:7f:99:09:78:d5:f9:26:42:44:
1a:29:90:59:c6:bd:fb:67:e2:4b:a8:f6:2a:be:2b:
f1:57:15:ab:2c:1a:58:08:f9:07:67:bf:84:39:34:
d1:59:5b:b5:5c:ff:83:e5:46:29:85:6f:12:97:e7:
f3:d7:b4:c7:ef:43:9a:d4:fe:e0:8a:5f:d5:c4:c1:
30:03:5f:ae:a5:bf:e4:2d:a6:e3:ea:fb:b2:1d:a7:
b2:e5:68:5a:29:26:1f:f9:90:cf:14:3e:37:d5:77:
e4:a8:6b:fb:da:19:26:d9:1c:13:4f:5b:ac:32:8a:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:FA:D5:F1:C2:20:0A:80:CB:8A:97:D7:77:85:1A:D6:D6:6C:70
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/6S361fHCIAqAy4qX13eFGtbWbHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.60.0-185.175.62.255
IPv6:
2a0b:d100::/29
Signature Algorithm: sha256WithRSAEncryption
13:fa:85:cb:07:75:a5:6b:55:1a:d2:8b:d8:91:3f:c4:97:e4:
b1:5f:a2:3b:41:fb:dc:b1:a1:08:8a:e8:67:a5:5f:15:f6:ab:
5e:60:d7:3f:b9:a8:39:07:67:c1:36:99:9e:12:ee:52:3c:a5:
62:bf:f2:67:76:e0:d9:74:96:38:e9:e4:b8:25:85:2f:0b:7f:
86:fb:87:77:25:8f:2e:7f:d6:d2:89:ac:eb:d7:de:0f:95:79:
c9:a0:83:ce:11:dc:cd:34:78:35:b7:86:a3:df:13:59:66:8b:
cb:ed:32:17:61:2d:53:9b:aa:9a:9d:6f:92:47:56:06:ae:fb:
6b:73:6f:1a:fb:e1:7a:a4:da:ce:53:37:a5:8d:3a:aa:15:6c:
51:0c:2d:3d:ce:84:96:73:7b:30:93:40:56:bd:fc:de:1d:5f:
b7:57:85:a8:f9:32:49:fe:99:e8:c9:75:eb:21:35:e3:1a:bf:
e6:6e:63:9f:f1:68:67:98:b9:49:f7:4f:0c:45:2d:cf:aa:ae:
c1:c3:58:e8:a2:74:c0:15:34:9a:5f:76:0a:95:87:56:0b:a0:
bc:f9:0f:2d:6d:2c:8d:ff:62:d8:57:23:63:fd:dd:7c:4b:45:
ed:16:a1:4a:b4:a4:96:07:98:e9:67:e6:ec:14:16:e4:26:3a:
00:43:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:45 2024 by rpki-client on console-fra.rpki-client.org