Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/2M6D6qrMJoY2POGeMKcXjg3tC5E.roa
File: 2M6D6qrMJoY2POGeMKcXjg3tC5E.roa (raw, json)
Hash identifier: ieNAIFqrm4n+G36Swkh520r7DoBUE9WK6DFhKlDOz6I=
Subject key identifier: D8:CE:83:EA:AA:CC:26:86:36:3C:E1:9E:30:A7:17:8E:0D:ED:0B:91
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 0A391CCB
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/2M6D6qrMJoY2POGeMKcXjg3tC5E.roa
Signing time: Sat 01 Jan 2022 15:07:26 +0000
ROA not before: Sat 01 Jan 2022 15:07:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29229
IP address blocks: 193.93.164.0/22 maxlen: 22
2001:67c:2cd4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171515083 (0xa391ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Jan 1 15:07:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8ce83eaaacc2686363ce19e30a7178e0ded0b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:cb:26:48:a7:57:33:11:c8:31:20:dc:e9:
e2:1c:34:66:80:4a:f9:ed:30:ea:07:47:fe:5e:55:
3c:3a:e2:d9:7f:cd:3d:cc:a4:9e:70:3a:5b:33:58:
ee:04:71:4f:18:db:f5:e0:5c:12:75:ab:13:c1:02:
48:d3:35:ec:ac:a0:5c:5e:c1:d1:13:a4:6d:79:01:
c6:a7:f3:86:ff:33:3f:aa:b0:5e:d4:15:4a:3a:56:
64:4e:90:40:96:d0:81:b0:0c:bb:5a:1c:fe:a8:8d:
6c:53:fe:f2:ce:b1:36:dc:9d:0c:6d:71:47:01:2d:
b4:c1:51:dd:1b:95:49:f4:32:d3:90:fa:45:19:9d:
18:f0:dc:cb:84:c2:7d:ad:44:83:68:e7:1e:17:63:
fc:ad:98:f2:22:28:8f:b2:eb:b2:23:67:e9:82:1b:
ee:a5:bb:e5:2f:94:82:9a:99:b6:7f:66:48:fc:cf:
65:67:eb:eb:50:e6:61:d1:e3:32:5e:dc:4b:43:57:
43:f7:84:f7:5a:d2:c4:02:9a:ba:85:ba:b6:47:d3:
28:6d:b2:02:e6:63:3d:1f:25:a3:b0:44:42:de:0a:
9a:a2:b5:b1:a1:f4:fb:c3:d9:f4:57:36:3e:d3:92:
2c:66:4a:b5:52:b6:e5:8c:1c:43:06:7f:e3:1f:14:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:83:EA:AA:CC:26:86:36:3C:E1:9E:30:A7:17:8E:0D:ED:0B:91
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/2M6D6qrMJoY2POGeMKcXjg3tC5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.164.0/22
IPv6:
2001:67c:2cd4::/48
Signature Algorithm: sha256WithRSAEncryption
6b:1f:8d:e5:0a:91:73:05:8e:47:78:e0:70:33:f4:35:ee:b8:
47:a9:24:16:49:3f:2c:e2:4a:14:82:da:db:6f:d8:d9:57:65:
12:66:f7:3a:ed:01:81:c6:28:08:2e:e8:cc:4b:d6:3f:92:20:
c2:24:f2:eb:5c:46:fc:d6:d6:85:51:35:7e:32:77:dd:e8:5a:
c7:68:80:8e:10:5c:8a:6e:75:a2:d2:91:f6:d2:81:1c:d8:4e:
1b:30:29:72:c6:04:f1:ee:4d:8d:f2:82:c9:47:9d:e9:13:39:
31:af:5e:67:ed:cb:43:18:4e:a3:b0:63:62:cd:7e:47:c7:91:
92:df:cf:d5:76:13:68:0e:c9:de:5a:c2:58:69:95:0e:cf:62:
39:21:95:96:7d:df:33:74:07:fa:be:68:7b:3c:a1:2e:15:32:
ea:0d:57:ef:4b:3f:0f:85:d7:13:04:3f:1d:58:4b:31:3b:09:
5c:5e:d8:f4:4b:ec:14:1c:f9:05:c0:a1:be:8b:5b:10:81:c9:
94:82:93:bc:3f:ac:69:0b:fc:1d:0b:ee:43:d6:9f:a9:75:a0:
74:67:9e:75:87:42:e3:18:46:a4:77:b5:31:ae:52:dc:78:7d:
a4:a8:8a:97:68:e4:62:55:fc:f6:50:95:74:de:d1:3c:b6:24:
39:8e:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:55 2024 by rpki-client on console-fra.rpki-client.org