Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/c6_FXgkNyMwHHSWVdJ_MQNcPRF8.roa
File: c6_FXgkNyMwHHSWVdJ_MQNcPRF8.roa (raw, json)
Hash identifier: DeSa+tvwO9PkH5/3RVVu3iFPPOjTAPXzlPrd8dBAK9A=
Subject key identifier: 73:AF:C5:5E:09:0D:C8:CC:07:1D:25:95:74:9F:CC:40:D7:0F:44:5F
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 0183657C9AA11FDF5B9E6C5A8E1F0941603B
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/c6_FXgkNyMwHHSWVdJ_MQNcPRF8.roa
Signing time: Thu 22 Sep 2022 13:56:48 +0000
ROA not before: Thu 22 Sep 2022 13:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31726
IP address blocks: 185.102.28.0/22 maxlen: 22
2a06:2240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:7c:9a:a1:1f:df:5b:9e:6c:5a:8e:1f:09:41:60:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Sep 22 13:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73afc55e090dc8cc071d2595749fcc40d70f445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:e3:1e:01:71:d9:92:33:2f:3a:42:74:26:
83:db:93:dc:b3:a5:31:ee:31:b8:a6:81:29:8a:35:
b8:61:01:2c:08:f9:67:dc:04:c3:8e:04:e7:2b:79:
49:0d:a2:e4:4c:95:98:bf:f4:b1:3c:04:98:e8:08:
ce:17:9f:4a:bc:11:86:6e:be:49:fd:95:57:14:5f:
9e:6e:d8:12:c7:0b:cc:8b:5d:7e:a1:97:e3:d8:a9:
c3:26:78:cd:90:89:59:33:bf:19:5a:f2:61:63:1a:
57:fe:a0:2b:50:38:21:c9:3c:ce:03:11:8b:0f:80:
87:a1:0a:d8:76:63:ee:dd:b0:c8:25:34:40:9a:bc:
c4:39:4e:ab:2a:37:1e:2a:65:f4:6f:d5:d6:8f:49:
6c:9f:6d:50:69:60:d5:ca:05:0b:a9:9d:25:0f:ce:
65:eb:88:8b:97:49:e1:fc:b3:75:c3:ff:59:f8:fd:
e9:8a:fe:db:d8:e8:f8:de:0c:94:5c:74:92:5b:d7:
0c:be:27:e8:df:c6:e8:ea:ff:87:62:22:0e:97:71:
30:19:47:12:76:b6:a3:3f:c2:b3:f7:85:63:7b:b5:
b7:2c:04:c4:a8:b7:72:92:0d:42:24:0e:be:7e:2d:
af:40:66:de:f4:6a:0e:5e:5c:23:bb:28:33:75:0e:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:C5:5E:09:0D:C8:CC:07:1D:25:95:74:9F:CC:40:D7:0F:44:5F
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/c6_FXgkNyMwHHSWVdJ_MQNcPRF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.28.0/22
IPv6:
2a06:2240::/29
Signature Algorithm: sha256WithRSAEncryption
51:41:4c:fc:88:51:50:a7:aa:4b:1e:9f:a5:e9:02:4f:68:f1:
b0:29:96:28:3d:46:a7:f1:85:85:66:dd:03:37:8a:83:26:87:
7f:b2:82:3f:a9:dc:0d:c4:fd:34:ad:28:1f:49:57:e6:fd:fb:
18:80:31:15:2d:35:8e:26:0b:a3:9c:5a:d2:ee:9c:ab:e8:2c:
53:98:0a:2b:20:63:56:bf:e1:53:c8:71:16:9e:a6:20:b9:45:
ba:59:0f:7c:88:70:97:99:7d:5f:94:3a:5f:f7:bd:d7:a1:ef:
2a:be:39:43:f3:5d:11:3a:89:90:09:9b:90:42:43:fa:eb:1d:
03:c5:5a:c7:ba:9c:d2:12:27:5e:a8:5d:eb:55:77:4f:fc:af:
6d:9d:98:fc:f1:1d:b1:c2:d4:38:0e:2e:cc:6e:5a:20:1a:eb:
bb:f5:6f:1c:b5:97:3c:4a:3f:01:09:1f:d3:f7:c3:d1:42:fc:
f3:17:20:80:26:fc:76:6f:04:d3:63:2b:92:4d:2d:cd:fa:ec:
72:71:17:7a:bc:36:2a:bd:f7:ce:0a:d6:77:b7:0f:92:1c:cd:
e5:89:87:18:d5:c7:de:84:9d:f7:64:d4:7c:6d:1a:cb:b7:f2:
6e:66:e6:79:dc:17:60:0c:70:e6:cf:70:a0:4c:ca:b4:e0:32:
cb:e2:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:18 2024 by rpki-client on console-ams.rpki-client.org