Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/6TJvj5QG6THipgPSe_wkTe1NDbM.roa
File: 6TJvj5QG6THipgPSe_wkTe1NDbM.roa (raw, json)
Hash identifier: LQ1qDF15yCHEhlZ0rKpG7Jn1qLAalSFrB0wf5Rwl2sA=
Subject key identifier: E9:32:6F:8F:94:06:E9:31:E2:A6:03:D2:7B:FC:24:4D:ED:4D:0D:B3
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0183A21E8324A511E46B38962C68F1DAA6C2
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/6TJvj5QG6THipgPSe_wkTe1NDbM.roa
Signing time: Tue 04 Oct 2022 08:30:51 +0000
ROA not before: Tue 04 Oct 2022 08:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35608
IP address blocks: 81.19.131.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:1e:83:24:a5:11:e4:6b:38:96:2c:68:f1:da:a6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Oct 4 08:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9326f8f9406e931e2a603d27bfc244ded4d0db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:4d:f7:61:8d:f2:6e:8a:cf:5f:79:67:da:
79:be:13:fa:ac:0c:9e:c9:6b:6e:ba:a5:7b:35:be:
ee:cd:bc:7a:76:5f:76:89:5b:b5:e6:77:2c:b9:2d:
43:a7:74:70:76:b5:d5:55:e3:53:33:78:a3:9f:b1:
16:0c:9d:79:96:8c:46:bb:a0:84:4b:9d:c6:73:5e:
2a:64:3f:da:bb:e1:01:45:96:36:9c:cc:9d:7d:0f:
95:8c:16:df:71:2c:b6:25:a2:2b:75:d2:27:f5:de:
66:e0:7c:d9:3f:b4:f8:8d:1b:a1:de:c6:dd:e8:3c:
1a:73:9e:c1:26:2e:77:6a:0b:c0:3b:43:cb:35:f0:
60:d0:2c:97:33:57:f6:d4:22:25:96:df:41:a4:25:
02:a2:2d:5d:ed:79:9c:80:c0:ed:88:3b:90:d5:ce:
c9:38:88:7e:77:55:a1:43:d5:a2:64:25:4c:e7:83:
31:2a:50:cf:c9:6f:1e:d0:84:7e:3d:43:f2:c6:e2:
88:73:7e:8c:f1:4b:32:7f:58:88:cd:bc:41:52:51:
6c:c8:75:c6:b6:bf:75:a6:57:18:a7:01:9c:a2:d7:
18:ec:f3:61:79:f6:55:fa:66:23:6d:0e:f5:be:62:
1e:83:c2:9f:17:51:14:dd:38:aa:6e:22:bd:91:17:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:6F:8F:94:06:E9:31:E2:A6:03:D2:7B:FC:24:4D:ED:4D:0D:B3
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/6TJvj5QG6THipgPSe_wkTe1NDbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
Signature Algorithm: sha256WithRSAEncryption
83:97:6d:89:28:21:93:7a:0c:83:c4:f5:01:96:10:83:e7:8a:
39:2a:d0:96:8a:88:b7:ba:62:f0:f2:66:1f:55:25:75:4b:11:
fd:fa:8e:e0:52:6a:cd:b1:85:ea:ab:b6:02:0e:52:8c:2a:d5:
0d:e4:5c:40:43:31:8d:c1:3b:61:18:6d:78:e2:46:3f:3e:44:
25:08:72:c5:ab:34:34:bf:21:45:c5:43:41:94:6f:07:88:b9:
84:e5:85:8b:d5:34:87:96:40:2e:98:09:e4:d4:32:28:af:67:
5c:20:8d:47:ef:1b:c6:ad:ec:25:ff:3f:a7:cf:09:aa:f2:81:
75:5a:74:5e:10:39:c5:2e:70:4c:0d:d4:be:de:98:6d:b6:20:
4a:76:45:f6:93:9d:5c:37:e5:45:15:9e:e2:82:6e:f3:a5:13:
60:05:7e:18:f1:fb:db:26:b7:f5:78:33:35:45:da:b3:5b:f0:
ab:95:23:ac:1b:54:38:0f:7e:88:b8:3e:83:5c:e5:e1:89:45:
2c:5c:23:4e:a1:f0:82:76:c7:28:7c:0b:9c:d0:7a:35:a0:58:
0d:a3:cc:f3:12:22:89:84:8e:b8:f3:39:c2:a0:a7:da:ba:0f:
c4:18:96:11:1c:a4:8d:54:1b:62:b9:9e:d7:c3:fc:c6:56:d0:
29:fe:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org