Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/6fg5EiCqoR4ZZb0MAs8XuAzxE9g.roa
File: 6fg5EiCqoR4ZZb0MAs8XuAzxE9g.roa (raw, json)
Hash identifier: jTVWcFLWrtFoCYHupRD56GbWQc1BUx/OMrba3DVvzsw=
Subject key identifier: E9:F8:39:12:20:AA:A1:1E:19:65:BD:0C:02:CF:17:B8:0C:F1:13:D8
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 06B2C0
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/6fg5EiCqoR4ZZb0MAs8XuAzxE9g.roa
Signing time: Wed 08 Jun 2022 12:28:02 +0000
ROA not before: Wed 08 Jun 2022 12:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51412
IP address blocks: 193.150.152.0/21 maxlen: 21
193.150.156.0/22 maxlen: 22
193.150.160.0/22 maxlen: 22
193.150.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438976 (0x6b2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jun 8 12:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9f8391220aaa11e1965bd0c02cf17b80cf113d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:01:81:a1:ec:7e:10:6d:91:05:d4:89:64:
0c:2e:2f:de:84:25:a4:47:c5:3c:b5:5c:d3:31:df:
bf:2a:41:cc:51:cc:f2:57:1c:97:4a:9e:f6:6e:ac:
18:70:c0:84:a7:0f:12:99:a0:89:e4:98:6c:15:0f:
72:0d:b7:da:7f:3e:0b:71:68:1f:ba:e8:04:0e:da:
75:40:99:1f:5f:0b:88:50:8a:c8:85:e8:a9:7b:20:
0c:e7:cf:1f:b3:0a:aa:7a:04:6a:d9:c7:2f:68:f3:
5b:1c:04:bb:b0:19:79:4f:27:fa:48:38:8f:34:d8:
09:8a:bc:4f:42:9e:21:f5:27:5b:7d:ab:ff:e2:b8:
06:53:8a:3b:0e:77:cf:b2:f1:5d:5e:c8:21:e8:de:
89:87:58:fa:83:7c:92:5c:42:1b:fc:1e:7d:70:fa:
7a:66:76:5d:6e:f9:37:21:67:70:09:61:43:6a:18:
fe:b9:40:83:cd:61:30:9a:f6:99:9c:5d:e9:f4:a2:
b0:9c:3f:3e:94:95:cd:d6:8e:7d:eb:3f:91:22:91:
0e:cf:35:b1:2e:3a:2e:76:30:91:a2:12:9d:34:4b:
f4:93:87:23:0b:89:c5:3c:38:4f:88:8d:47:36:b6:
09:2d:9c:7f:94:ef:53:dc:f4:3f:0e:66:f7:6d:b7:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F8:39:12:20:AA:A1:1E:19:65:BD:0C:02:CF:17:B8:0C:F1:13:D8
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/6fg5EiCqoR4ZZb0MAs8XuAzxE9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.152.0-193.150.164.255
Signature Algorithm: sha256WithRSAEncryption
71:30:67:7f:a0:f9:52:94:1b:87:38:d2:63:71:35:df:6f:1c:
82:04:33:af:9d:dd:58:47:86:59:66:e0:54:cc:a5:1e:7a:79:
d3:65:df:1f:1f:7c:ac:1e:5f:31:5f:6d:55:cd:14:07:be:8e:
25:ee:2f:53:d0:e1:a9:49:f1:0b:67:87:fd:e0:39:1f:c4:0c:
05:af:81:b2:02:33:ee:e2:c3:e1:39:d3:ef:a2:84:bf:67:08:
d2:b7:02:3f:65:2b:0a:c0:45:6d:1c:99:86:fd:c0:f3:8f:76:
9b:47:39:d9:9b:cf:b4:7b:e5:a5:fe:e7:02:18:84:3c:ef:67:
24:6d:31:b7:c7:ba:1c:3b:d4:1a:a4:b6:ee:e8:fb:91:58:cb:
14:b9:f2:61:41:da:56:3f:18:72:6a:88:5f:55:97:77:62:b5:
0f:3d:3f:e3:c9:81:57:7f:40:8c:5d:0a:6e:64:49:1f:c3:59:
2a:3a:3f:c1:e6:3d:52:58:bc:a1:40:db:78:51:3a:ef:89:dc:
01:f8:3f:1c:d4:78:53:b1:33:58:f7:b7:b6:e2:b9:db:61:ae:
ba:ee:79:2e:8b:82:79:b5:d9:34:d3:ae:99:36:b7:23:d1:dc:
f0:3d:6b:35:58:cb:58:7b:66:af:8b:1c:d6:ff:7e:34:5a:56:
1d:0a:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org