Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_6Kg6qcNl37PYbaQbltUZxcZgng.roa
File: _6Kg6qcNl37PYbaQbltUZxcZgng.roa (raw, json)
Hash identifier: P3R+GwGIpgVjAUF60t9D8khp9QngL5Ruu7Q3+bS0cNg=
Subject key identifier: FF:A2:A0:EA:A7:0D:97:7E:CF:61:B6:90:6E:5B:54:67:17:19:82:78
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01836D059FEEC6B74420B17D6C5B6873B581
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_6Kg6qcNl37PYbaQbltUZxcZgng.roa
Signing time: Sat 24 Sep 2022 01:03:48 +0000
ROA not before: Sat 24 Sep 2022 01:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149457
IP address blocks: 185.233.17.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6d:05:9f:ee:c6:b7:44:20:b1:7d:6c:5b:68:73:b5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 24 01:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffa2a0eaa70d977ecf61b6906e5b546717198278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:43:24:2c:6f:2e:31:58:73:0f:11:0b:52:
3b:3e:b9:db:b2:b1:e2:8d:71:70:e0:97:22:f7:b4:
5d:ad:73:ed:86:1e:cf:5a:25:00:98:fa:e7:f8:57:
3c:c6:07:25:18:20:c2:5f:fe:63:22:fc:59:f9:85:
ed:6a:98:3f:08:40:bf:05:dd:97:ab:19:99:7c:e3:
5b:01:9e:d7:d5:cd:48:9a:8e:1c:28:be:b5:65:08:
29:64:d7:db:f8:2d:79:c7:ef:c8:e2:c1:18:97:74:
57:d9:5e:36:97:0c:63:65:85:87:4e:da:af:03:48:
8a:b5:d6:86:7b:8f:46:40:4c:b8:a5:14:b5:34:97:
38:6e:f9:07:62:c2:4f:74:56:8e:59:e8:88:52:46:
0d:99:eb:6a:3f:a6:7c:52:10:86:32:eb:ef:3f:1e:
94:7e:c4:9d:a5:bc:b0:cb:49:a9:34:2f:d1:8d:77:
6a:a5:07:fd:9f:7d:04:00:62:f2:3c:91:40:45:0b:
14:ed:30:c2:77:9d:32:cf:16:ec:35:80:be:a4:22:
1d:d6:de:07:60:27:20:bb:c8:22:a2:91:c7:21:33:
cf:d6:bc:33:24:b6:e3:8d:74:53:c4:00:c6:68:78:
13:ef:0c:88:63:40:fc:d6:cb:4d:66:8e:ba:38:a2:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:A0:EA:A7:0D:97:7E:CF:61:B6:90:6E:5B:54:67:17:19:82:78
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_6Kg6qcNl37PYbaQbltUZxcZgng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.17.0/24
193.107.218.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cd:b2:1e:86:f7:27:0c:2e:d6:e2:0d:91:bb:35:45:7e:58:
c5:d3:61:b0:b1:a5:3f:56:7b:cb:8b:df:2e:cd:73:3f:bf:b5:
6c:87:97:49:91:0c:99:9c:63:da:99:53:a4:54:ef:23:12:01:
e0:06:4b:86:55:dc:47:88:f4:28:5f:e0:f7:9d:ee:18:94:e1:
94:72:0f:d7:f6:11:f7:2d:c4:58:44:c2:97:5c:c9:ff:f1:db:
ac:68:49:5f:e4:7c:f6:23:22:57:e4:20:5e:18:d1:f0:ad:45:
31:02:3e:6c:14:31:c2:c6:cb:d8:66:00:61:97:c4:ef:ca:8e:
19:cb:11:28:9f:73:83:71:1f:91:23:8c:06:7b:b1:68:f6:b8:
8c:54:0c:db:6a:db:84:8a:d4:d1:3c:39:c8:f8:f0:01:6b:2b:
c5:e2:b2:d0:6c:aa:14:f1:a5:e8:3a:03:b8:e8:c7:8d:6c:ff:
cd:b5:1b:56:0e:85:66:5d:0c:49:ac:37:79:d9:2c:36:ac:bd:
4e:18:56:8b:3c:29:3b:31:af:c5:a9:f3:27:50:35:82:d5:bb:
08:10:6a:30:6a:68:9d:73:8b:da:5d:6b:f9:08:ce:6b:14:42:
20:db:dd:45:60:35:c3:d8:64:86:17:80:03:7b:34:29:b2:a3:
ea:f7:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org