Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/q6aAq8jBvtPbbEPGNEe2cRM-k4M.roa
File: q6aAq8jBvtPbbEPGNEe2cRM-k4M.roa (raw, json)
Hash identifier: QQ3MU7fdqpXNaZNJYDiW/YkJnmsLg94CnTZm5xICUfc=
Subject key identifier: AB:A6:80:AB:C8:C1:BE:D3:DB:6C:43:C6:34:47:B6:71:13:3E:93:83
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0ABEEF8C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/q6aAq8jBvtPbbEPGNEe2cRM-k4M.roa
Signing time: Sat 01 Jan 2022 03:02:28 +0000
ROA not before: Sat 01 Jan 2022 03:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 160.20.110.0/24 maxlen: 24
160.20.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180285324 (0xabeef8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aba680abc8c1bed3db6c43c63447b671133e9383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:2c:bd:3b:4a:1b:8c:89:61:02:87:68:46:
df:29:88:90:2c:30:6d:2d:cc:b4:66:73:54:c0:24:
75:5a:4c:d2:8b:7f:c1:35:eb:7e:30:dc:2e:36:48:
cf:c4:8a:6a:b4:7e:1e:35:52:5e:07:0b:9d:91:2f:
b0:28:0f:19:be:59:fc:6e:27:de:a1:bb:61:77:52:
58:32:47:4b:94:e7:25:4d:26:14:b1:14:9c:5c:fa:
f5:41:c3:10:f1:96:d5:a6:c2:6b:45:50:3d:7f:3a:
cb:76:0f:17:26:29:7d:ac:0e:a8:c2:ad:07:ff:c7:
7e:b2:4c:ff:16:16:d9:e0:22:8f:41:c0:6b:fa:44:
0e:44:bb:79:7d:b8:f1:54:3c:b3:ab:b0:59:21:f8:
58:05:7c:81:ea:16:66:f3:24:7b:6f:a7:cf:fa:22:
b1:c5:8f:be:91:21:5b:c7:1c:35:a2:22:1b:f7:e3:
0f:2e:a2:1f:51:8f:ae:e3:11:17:ab:4e:1c:c6:59:
c5:b2:f6:8b:3f:d1:ad:0c:de:c9:41:c8:b5:b9:2d:
ef:4a:6d:75:bf:5b:91:68:27:28:e4:62:87:ee:03:
31:d0:b5:17:46:34:88:a1:b9:2d:a8:9c:15:90:f3:
af:a3:9e:f4:6e:12:29:88:ff:24:b7:2a:b4:66:04:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:80:AB:C8:C1:BE:D3:DB:6C:43:C6:34:47:B6:71:13:3E:93:83
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/q6aAq8jBvtPbbEPGNEe2cRM-k4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.110.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:29:c3:14:e3:ec:1d:1f:6b:8a:b1:aa:0a:d9:5d:06:35:77:
01:75:94:c0:9f:b7:9e:e8:4b:ce:72:8b:65:9f:fc:31:b0:f8:
83:bf:bd:1d:6b:19:f9:73:85:29:6a:f7:c2:1c:0c:b5:ce:e1:
2f:eb:5e:62:4d:b4:5e:3c:09:1a:3a:99:35:30:26:af:d6:4a:
12:ae:6b:c1:68:de:9c:76:db:e6:43:24:cb:c8:35:cb:62:98:
1c:02:18:48:6a:f2:0a:af:fa:18:cc:99:47:34:6f:a2:29:97:
2d:8f:ab:ca:a9:90:83:c5:0b:75:0e:4a:2c:68:2d:7f:cf:86:
99:a3:f2:3c:ef:52:73:f7:c8:41:a3:54:ae:af:5a:0f:f8:45:
9d:bd:bd:44:99:24:e0:1c:ea:d2:36:3d:d4:42:b2:91:4b:45:
d3:d8:cf:b7:ee:bb:6d:bb:2b:8c:d8:5c:13:c5:35:4a:7b:52:
e5:46:2e:eb:cc:b5:02:f4:41:cb:05:f2:93:b6:ac:ec:8f:96:
47:ae:e3:b6:35:47:ca:3d:48:d3:2e:52:6a:dd:b4:21:75:4d:
02:9c:cb:a7:6c:e8:fd:60:a0:24:7d:7f:3e:08:9d:9e:3e:08:
a2:17:23:f0:1d:14:84:1f:3a:dd:e4:54:11:1e:4a:ed:37:de:
a2:8e:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org