Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/6Ynz8KajIO6-U8TRv9uVgdNiLVA.roa
File: 6Ynz8KajIO6-U8TRv9uVgdNiLVA.roa (raw, json)
Hash identifier: sB/axo2UDLMxT4EWb+S/KXZPbcY4kBHyb/KjzEYwfO8=
Subject key identifier: E9:89:F3:F0:A6:A3:20:EE:BE:53:C4:D1:BF:DB:95:81:D3:62:2D:50
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 6FEC07
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/6Ynz8KajIO6-U8TRv9uVgdNiLVA.roa
Signing time: Sat 01 Jan 2022 01:54:48 +0000
ROA not before: Sat 01 Jan 2022 01:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50500
IP address blocks: 185.134.179.0/24 maxlen: 24
185.134.176.0/24 maxlen: 24
185.134.177.0/24 maxlen: 24
185.134.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7334919 (0x6fec07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jan 1 01:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e989f3f0a6a320eebe53c4d1bfdb9581d3622d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:b3:5c:94:51:64:b6:b6:b0:4e:8e:64:02:
44:c6:fd:af:3c:c1:33:bc:7a:07:ad:62:09:af:b5:
26:67:e7:80:91:ae:3a:c5:fc:6a:0b:be:ab:05:a1:
d0:14:bd:03:52:b3:ec:64:93:3d:4c:94:51:dc:14:
17:3c:15:fa:f2:0e:97:02:13:93:43:9f:0a:27:c3:
5d:c0:ac:ad:cf:7a:65:b2:97:9d:ec:7e:38:ba:44:
54:f1:63:b6:99:c6:8a:25:40:37:6c:11:7b:d0:2e:
be:72:e2:c2:39:18:11:3b:e0:58:3a:7f:e2:c3:05:
37:7c:8c:c5:c1:aa:fc:b9:0f:20:36:b1:6a:72:fa:
e6:59:2a:d7:0f:e4:b8:7b:10:19:ef:f4:c3:db:39:
99:a1:76:e4:9e:45:0f:f4:2c:fa:90:21:fb:6d:56:
63:be:d6:4e:3d:83:77:c1:a7:dd:53:8b:42:66:5f:
1d:46:43:48:2c:4d:82:a1:46:47:e6:27:78:f2:33:
2f:d7:5b:de:32:eb:34:ae:f2:5a:ec:69:01:6f:16:
12:7c:0e:e3:d5:6f:e2:41:3b:8f:8a:5a:e2:63:fc:
45:52:9e:db:cc:55:5c:17:a2:79:d1:b9:94:6d:b7:
9f:44:0f:db:04:50:46:d7:2f:07:1c:76:43:12:60:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:F3:F0:A6:A3:20:EE:BE:53:C4:D1:BF:DB:95:81:D3:62:2D:50
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/6Ynz8KajIO6-U8TRv9uVgdNiLVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.176.0/22
Signature Algorithm: sha256WithRSAEncryption
35:a9:f0:53:2b:e0:4a:7f:4b:c9:01:49:be:c6:e5:61:8e:f9:
4d:b8:1f:69:44:f1:d9:1d:74:b5:a4:10:2e:50:3b:dd:68:96:
6a:99:d3:e4:d6:67:45:03:7f:bd:54:2b:2d:5e:66:52:a2:92:
22:3b:5b:9f:35:ab:4e:ae:af:2a:d7:4b:ea:b7:ce:92:56:d9:
99:1f:9c:ca:df:07:d9:be:3f:0d:10:42:b3:76:b1:7f:63:21:
e0:90:09:00:24:7d:eb:fc:fe:d0:e5:51:2b:7c:73:71:bb:3d:
a3:55:eb:f6:23:e7:a9:d7:44:8f:4c:00:41:8e:6a:cc:b5:d1:
d0:2e:ec:17:e4:2e:bb:a5:db:2d:ad:e2:e2:a0:e4:d9:4e:17:
f1:5a:c6:3f:b9:88:6a:21:56:43:32:42:e2:97:f3:25:38:e4:
a2:90:26:cd:04:7c:43:7a:a4:1d:cd:78:8e:54:6d:7d:0a:ea:
71:c2:cb:e9:33:dd:43:48:f2:10:ab:36:6c:8c:db:1c:47:32:
e7:b5:64:19:15:fd:95:65:ca:53:3c:1d:ed:6c:98:ea:2c:35:
c0:bd:cd:5b:5a:c0:78:6a:3e:3c:d4:bb:01:c6:f1:df:0a:ce:
57:61:a4:47:8d:e0:c2:11:76:1e:ca:fd:3c:67:85:56:f0:88:
4b:25:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-fra.rpki-client.org