Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/6AV5RNcUZnOBGebSoB1YBhKDW4k.roa
File: 6AV5RNcUZnOBGebSoB1YBhKDW4k.roa (raw, json)
Hash identifier: rNTA2qZ2V/O82Bhg74z6CHPje7vBvpF/fVoffP9gcfw=
Subject key identifier: E8:05:79:44:D7:14:66:73:81:19:E6:D2:A0:1D:58:06:12:83:5B:89
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 0181FBD8FA0F4613F6AF844ADABE45EAF257
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/6AV5RNcUZnOBGebSoB1YBhKDW4k.roa
Signing time: Thu 14 Jul 2022 08:35:09 +0000
ROA not before: Thu 14 Jul 2022 08:35:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8758
IP address blocks: 193.73.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:d8:fa:0f:46:13:f6:af:84:4a:da:be:45:ea:f2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Jul 14 08:35:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8057944d71466738119e6d2a01d580612835b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:7d:05:6d:f6:63:1a:08:2a:f0:01:dd:87:
85:f0:1b:c4:f8:d1:8e:17:20:cc:e8:91:a5:20:49:
49:7d:24:29:e6:af:ea:37:3a:3e:40:db:98:70:5e:
1e:64:36:39:47:83:70:ff:ed:5a:f5:5d:76:66:b2:
ce:55:de:54:fd:40:57:bd:79:ee:73:fa:ad:31:d8:
3a:3a:ca:b8:42:37:e7:e8:e7:45:8b:3a:5c:09:85:
4d:51:ae:00:2e:c9:08:02:e6:c3:cb:b4:a7:97:46:
4c:cc:ac:7f:0f:56:09:0a:60:b6:d2:d3:83:97:a6:
75:13:f3:d8:09:1b:2c:91:77:ce:d9:0d:f4:fa:aa:
81:2d:fb:e5:44:86:d4:79:6d:1d:cc:4e:08:ff:35:
9e:71:16:9e:41:2e:bd:d2:f9:7d:b6:3e:b3:87:ee:
a7:c4:bb:e3:91:04:57:0b:cd:a7:8b:7b:54:69:c2:
0d:ae:db:64:17:8f:24:97:ae:e1:e0:58:6c:59:e7:
84:5a:d6:f0:65:99:90:c1:0e:bd:55:cd:12:a0:54:
c8:ce:d7:e0:f8:42:30:99:fa:35:7a:30:e1:c3:03:
bd:61:df:b7:04:9c:d6:2d:a8:28:a6:1c:7d:a0:89:
ed:1a:8c:bd:bc:dc:1d:74:b4:d8:87:d2:4b:28:96:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:79:44:D7:14:66:73:81:19:E6:D2:A0:1D:58:06:12:83:5B:89
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/6AV5RNcUZnOBGebSoB1YBhKDW4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c6:81:3c:2f:74:64:57:68:5e:5f:b7:d8:ab:fb:28:95:e8:
d0:bd:fa:22:5a:e5:ea:02:c9:4b:60:3b:93:00:ff:99:59:17:
a5:cf:4c:a9:9b:39:88:44:cd:0e:57:0f:c8:1d:c6:18:dc:e1:
bf:d3:f6:f2:68:63:13:6a:77:64:ce:5d:99:c9:05:bc:06:a4:
b1:67:c8:1d:66:8b:05:db:ec:4d:af:f0:ba:3a:8d:c2:8c:bd:
66:85:af:14:8e:36:81:1a:c4:f2:67:f5:52:aa:3c:7d:18:f9:
c3:1b:be:18:e1:c0:e9:dc:f9:a1:2d:91:7e:36:db:0e:6a:de:
e4:b6:9b:95:2b:bd:f1:db:76:0e:20:75:e1:07:b0:50:46:95:
f7:5b:de:d8:55:73:d6:f9:1f:a9:61:06:29:73:90:cb:84:88:
ac:f6:fb:16:76:7a:7e:e5:7d:4e:4e:42:0c:21:72:ee:94:a2:
43:06:49:26:3e:76:97:b6:08:b8:ce:8e:9f:b9:62:be:93:50:
9d:0f:25:c8:69:4d:e7:3b:e6:79:d0:cd:3c:ec:32:97:97:f1:
1d:69:8e:fa:6f:d9:f2:61:cd:e6:b3:ee:ff:04:59:3f:b4:1d:
34:8e:87:eb:43:4a:f2:6b:49:ee:20:3f:c3:16:5b:79:c2:e4:
2e:b6:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:36 2024 by rpki-client on console-ams.rpki-client.org