Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6LZlZRY1fo__haznHPAGxqUur-w.roa
File: 6LZlZRY1fo__haznHPAGxqUur-w.roa (raw, json)
Hash identifier: NmcGSt4w79UZjBfx94g+TUQfGVm6G8J1Y6uWjyTKC5Y=
Subject key identifier: E8:B6:65:65:16:35:7E:8F:FF:85:AC:E7:1C:F0:06:C6:A5:2E:AF:EC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0B523FC2
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6LZlZRY1fo__haznHPAGxqUur-w.roa
Signing time: Fri 18 Feb 2022 16:02:11 +0000
ROA not before: Fri 18 Feb 2022 16:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 193.160.143.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189939650 (0xb523fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 18 16:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8b6656516357e8fff85ace71cf006c6a52eafec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:1a:5f:76:fb:73:94:b9:a4:16:a0:03:3e:
c8:5a:15:a7:69:b7:b0:29:b9:98:5d:f4:5c:45:ba:
26:d3:1e:19:e1:80:96:58:79:f6:39:4c:90:5d:25:
ce:6a:00:10:8c:44:a8:ee:93:25:95:44:6c:28:20:
eb:c2:56:fb:28:6f:ce:37:ab:9b:9f:78:69:fb:46:
94:2b:8d:b4:09:7f:23:8c:c3:73:e1:a9:57:1d:74:
8a:9e:df:b6:04:c6:a1:97:c5:88:d3:c1:60:0d:08:
cc:0e:43:db:45:0f:98:c0:c0:a3:79:77:08:75:3a:
f6:c7:70:a5:6b:3d:78:7e:04:df:93:be:85:3d:79:
cd:c1:ce:7e:e2:4e:6f:d4:68:99:4c:01:f8:53:b8:
4f:ad:c5:cf:34:28:32:6e:6a:f1:16:40:67:36:b4:
42:2e:a4:6a:b6:5a:2a:b2:c7:51:7a:13:9c:5d:02:
cf:29:1f:59:54:eb:a6:a8:ac:d7:12:f8:ac:90:41:
c3:00:6c:48:c3:e6:d1:c1:74:99:32:44:76:75:79:
95:c5:19:62:f7:5b:20:97:db:60:fe:54:f0:66:0a:
83:60:73:c7:3b:5c:af:9c:cf:08:07:07:30:6c:76:
95:48:a3:ab:bc:cd:56:8f:fc:d4:67:b8:ca:70:b8:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:65:65:16:35:7E:8F:FF:85:AC:E7:1C:F0:06:C6:A5:2E:AF:EC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6LZlZRY1fo__haznHPAGxqUur-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.141.0/24
193.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2d:47:f8:68:dc:5b:92:4c:83:6b:28:0c:1b:b3:a7:6f:0a:
fe:f6:5c:1b:82:34:2b:52:03:5f:e2:bb:57:2b:ef:b6:68:17:
0a:88:ce:e3:02:b2:f8:e0:fa:f9:22:e4:4b:89:3b:ce:38:50:
97:dc:a6:e5:15:64:1e:e3:b8:51:f4:ea:5d:42:12:f8:a4:c4:
c8:ab:37:0f:e7:3f:1e:62:94:79:28:0a:09:87:17:85:d2:42:
84:97:6f:ed:09:5f:c9:23:f2:8a:f4:1f:20:bb:19:cc:08:28:
92:a4:ea:95:ab:2f:ec:16:8a:3e:29:91:ad:17:86:1b:a5:7c:
25:0c:2d:0c:39:61:f6:9a:7c:7e:d3:9c:7e:ec:29:3a:fa:da:
fe:f7:bb:2d:46:21:04:c3:bc:7f:ee:ac:15:33:73:a2:19:f0:
2e:87:55:62:9f:d3:30:7c:68:c2:fd:0f:48:04:39:82:3e:45:
48:1d:56:ca:ba:8a:e8:41:4f:f8:10:0a:d5:ca:55:72:c1:42:
0c:24:ce:aa:d1:5c:32:2b:36:90:9e:99:aa:c4:36:a9:9b:41:
db:60:a2:30:84:37:48:f6:22:3c:20:8b:99:0e:7f:52:07:96:
12:26:48:96:7f:db:4d:05:ae:e8:1d:57:d9:c1:11:2d:58:bc:
73:1b:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org