Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6NB7beptCmxHoRy-IiRqGtx_2aY.roa
File: 6NB7beptCmxHoRy-IiRqGtx_2aY.roa (raw, json)
Hash identifier: 5yZ1uSSLmu26XCHD37ROIo0PBoeZkYRfffLhbmjRb8s=
Subject key identifier: E8:D0:7B:6D:EA:6D:0A:6C:47:A1:1C:BE:22:24:6A:1A:DC:7F:D9:A6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0AC9629BC8107976A160E9E7F1A94
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6NB7beptCmxHoRy-IiRqGtx_2aY.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57101
IP address blocks: 195.136.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ac:96:29:bc:81:07:97:6a:16:0e:9e:7f:1a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8d07b6dea6d0a6c47a11cbe22246a1adc7fd9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:41:e4:76:81:eb:27:a3:07:b3:71:24:97:
31:a9:08:ea:5b:fa:4c:74:5a:2a:0d:89:38:80:89:
91:b0:89:36:76:94:fa:b1:e8:fc:66:a2:31:74:5a:
7a:5f:e2:8a:35:28:e5:6f:53:0b:29:ee:48:cb:0a:
df:61:65:6a:cd:15:89:71:7b:b8:14:62:8c:d5:69:
f5:b3:03:59:34:2d:67:77:98:e1:0b:a9:be:16:08:
b7:20:f8:da:b1:19:54:f2:67:a1:0b:37:56:eb:79:
55:f5:31:46:31:fa:30:09:4d:dd:6c:f9:48:b5:bd:
32:21:db:ee:78:31:01:df:2e:aa:aa:e4:53:ce:1f:
85:c7:17:61:fe:b3:37:d3:dd:80:47:a0:92:87:90:
89:d5:a1:54:f5:e9:3f:a0:a6:41:65:ea:8b:84:b2:
88:f7:c8:30:d4:3c:94:26:8d:ad:fc:58:d2:24:ba:
da:4e:65:21:e4:b6:f1:2f:1a:70:46:7c:9b:b9:25:
4e:49:c6:66:ba:0e:89:3b:f5:ac:e8:dc:cf:1a:58:
b3:ae:9a:94:a4:96:e7:86:64:96:4a:e2:13:99:fc:
42:95:71:07:da:2c:e9:ef:95:7e:73:1c:ef:f6:81:
58:0c:d3:b5:44:a1:3f:3b:a2:5a:8b:1b:8f:a6:fc:
a0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:7B:6D:EA:6D:0A:6C:47:A1:1C:BE:22:24:6A:1A:DC:7F:D9:A6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/6NB7beptCmxHoRy-IiRqGtx_2aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.136.0/22
Signature Algorithm: sha256WithRSAEncryption
91:5b:08:fd:12:3c:4e:9d:e6:d1:9d:35:97:e5:3d:9e:7d:b4:
e7:94:53:a4:a9:5a:a3:8d:9a:d7:e8:53:15:f2:01:ea:43:a4:
03:ad:33:e7:eb:7d:8d:db:17:06:10:6f:b7:a4:f5:17:5a:c2:
fb:96:58:4a:1a:0a:4d:dc:84:66:18:be:61:e6:74:06:84:79:
4a:d1:0e:67:9a:ab:7f:35:e7:b0:32:6a:12:cd:72:d9:b8:f5:
3b:7e:1e:3a:46:7f:8c:a3:e8:87:0e:40:5f:7e:43:f6:03:f5:
96:b9:51:8e:fc:13:49:dd:23:cb:63:73:1e:7a:00:d4:15:28:
af:e0:31:29:f7:58:9a:d4:7c:17:5b:f5:b0:b1:f3:0f:13:1d:
c0:53:6b:ab:34:0a:8d:ab:e3:0f:bd:8f:6f:a9:b3:28:bf:e3:
f3:fb:e2:8e:a5:b9:01:0a:7f:6f:ae:5b:ad:d4:90:e2:9f:d1:
6b:3c:ed:97:41:1a:df:1c:6b:34:86:2d:1f:b9:f4:54:fa:7e:
e5:31:15:1c:70:19:db:25:ed:ca:10:16:c6:af:b4:21:da:2e:
14:ae:88:c2:5f:32:00:02:0a:ec:49:c2:4f:0b:1a:78:9f:05:
b6:af:dc:9f:64:1b:fe:88:d5:8c:3c:11:fc:bf:91:8b:5c:60:
90:77:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:02 2025 by rpki-client