Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/6kD6Fc-HnCq_VbNMhL07vp8D7c8.roa
File: 6kD6Fc-HnCq_VbNMhL07vp8D7c8.roa (raw, json)
Hash identifier: raRgrzsRPKen6HM1qmF+mQkXYjgK6bJfDq3PqSQSGLs=
Subject key identifier: EA:40:FA:15:CF:87:9C:2A:BF:55:B3:4C:84:BD:3B:BE:9F:03:ED:CF
Certificate issuer: /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial: 0182111820084C7D0CF9A624894F3BC4835B
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/6kD6Fc-HnCq_VbNMhL07vp8D7c8.roa
Signing time: Mon 18 Jul 2022 11:36:09 +0000
ROA not before: Mon 18 Jul 2022 11:36:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204453
IP address blocks: 193.104.170.0/24 maxlen: 24
194.145.202.0/24 maxlen: 24
91.214.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:18:20:08:4c:7d:0c:f9:a6:24:89:4f:3b:c4:83:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Validity
Not Before: Jul 18 11:36:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea40fa15cf879c2abf55b34c84bd3bbe9f03edcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:26:a4:10:68:73:9a:17:d3:7b:ab:6f:9f:
94:3b:00:59:b9:9e:1d:f5:fc:b6:e7:d6:97:fa:8e:
a0:6a:f7:55:a8:bf:ba:a4:41:ab:ce:7f:64:7a:c0:
6f:5c:c0:84:1e:3e:c7:93:68:85:2d:18:00:c6:e9:
c7:b4:bf:f7:21:79:c0:0c:5a:bb:6f:c9:5d:74:fb:
0f:66:12:50:82:94:c1:92:5c:59:20:cc:cf:b2:25:
7a:a7:1c:4f:04:07:db:1f:0d:52:85:e2:7b:53:28:
bd:6e:2b:00:2c:ae:21:0f:5a:44:71:b6:89:13:b7:
73:0e:d6:d1:af:5b:b0:80:8a:09:5b:b2:f2:9a:e5:
02:82:0e:f5:93:d5:f3:da:a0:bb:b5:50:f4:0e:a1:
b3:b4:7f:a9:3d:93:5e:f4:8a:5a:90:70:98:b6:c8:
ed:f7:ae:4e:00:84:f2:53:ca:8e:9a:8a:00:82:76:
cf:3b:9d:d9:c3:c9:70:8a:91:dc:ba:85:b7:86:97:
16:ed:90:51:2f:5b:76:45:86:3a:9a:52:df:fc:65:
a2:3f:e0:b2:a9:16:c1:13:69:af:ed:5d:93:31:0b:
b8:48:3a:73:69:76:4e:66:95:34:a6:39:61:26:3a:
d7:8f:ec:0d:0f:c1:d8:a4:7b:ae:86:d8:c0:c7:f2:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:40:FA:15:CF:87:9C:2A:BF:55:B3:4C:84:BD:3B:BE:9F:03:ED:CF
X509v3 Authority Key Identifier:
keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/6kD6Fc-HnCq_VbNMhL07vp8D7c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.126.0/24
193.104.170.0/24
194.145.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:03:67:b0:00:87:6e:c1:11:cb:ba:9a:06:09:a4:64:a6:ec:
a3:28:11:24:d7:f9:31:6b:b1:98:d1:1e:9f:58:c9:33:58:93:
7d:ee:ed:72:8f:01:6b:e5:6d:7e:11:16:89:90:81:4f:c8:bb:
c4:ee:2b:b7:cb:68:39:a9:19:17:1d:d8:ab:0e:61:14:b9:b4:
2b:29:e9:a2:86:70:31:fc:ef:d5:ae:3f:33:48:6d:fe:7f:3f:
be:2b:0d:ff:e5:b4:03:a6:a5:bf:9e:64:2a:9e:2b:8c:30:f7:
d0:4a:56:39:95:6c:1f:d2:55:c2:18:ca:b3:b4:9e:0d:41:4c:
6e:45:d2:d3:26:0a:54:72:bc:cf:28:e5:54:8e:72:f9:07:34:
24:49:99:67:b9:81:02:6a:e6:b4:77:11:04:05:13:5f:fb:a7:
7e:c0:1e:8b:04:f1:f0:91:77:e2:20:d6:13:d5:dd:f5:ed:a4:
94:21:fd:34:08:2c:67:1f:bb:ed:c3:35:6b:8b:79:d2:37:b5:
45:c4:90:09:5f:b2:e5:b3:3a:9e:08:00:86:68:fd:35:80:1f:
9c:97:8a:80:2f:ec:c7:11:be:47:58:84:4a:2c:dc:d6:ed:d9:
e3:07:8d:c6:b0:07:b6:ba:38:cf:15:07:d0:3d:60:30:43:64:
79:22:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:02 2023 by rpki-client on console-fra.rpki-client.org