Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/AfVxqGhlk7RG-tVGKXwfIs23bJg.roa
File: AfVxqGhlk7RG-tVGKXwfIs23bJg.roa (raw, json)
Hash identifier: Tj/w/yqbGbJCleSyNho+fpYWsm488pqR+jBCVRKszaM=
Subject key identifier: 01:F5:71:A8:68:65:93:B4:46:FA:D5:46:29:7C:1F:22:CD:B7:6C:98
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 878394
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/AfVxqGhlk7RG-tVGKXwfIs23bJg.roa
Signing time: Tue 28 Jun 2022 09:42:02 +0000
ROA not before: Tue 28 Jun 2022 09:42:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8697
IP address blocks: 212.34.0.0/19 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8:2::/48 maxlen: 48
2a00:18d8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8881044 (0x878394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jun 28 09:42:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01f571a8686593b446fad546297c1f22cdb76c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:cc:09:de:8a:5c:b5:e0:59:94:99:11:c1:
00:e8:bc:e1:02:de:b7:8e:b7:53:17:bc:a2:df:c6:
1e:f6:28:40:8c:f7:07:8a:cb:01:ff:79:05:8f:0f:
16:d0:79:1b:f8:6f:62:59:5b:2f:44:03:f2:de:1b:
61:9b:cb:74:f8:3b:7e:f5:a1:9e:49:f0:47:c6:72:
50:3d:52:87:5f:69:b2:a4:77:35:ec:f6:ee:fe:d3:
26:82:a0:3b:7e:3b:dc:e2:59:ff:0a:a2:8c:23:1c:
fe:f4:9f:ca:c1:83:20:f0:b5:53:c1:80:65:f8:3e:
57:4c:10:32:0d:ab:7b:f6:d7:99:84:aa:da:a5:54:
fb:dd:5e:7c:91:aa:1b:08:a8:52:e5:da:95:ee:12:
49:4c:97:c8:c7:51:09:9f:16:9d:f6:94:83:f1:74:
86:4e:10:8c:8a:ec:1c:b1:49:0a:93:af:86:ab:0f:
c0:10:76:da:08:42:5e:da:3b:18:60:63:f0:5d:f0:
3c:c7:20:20:9f:ad:c9:23:73:16:75:99:9d:1a:f5:
c7:b0:1f:b6:10:6f:a6:d3:c4:b5:14:d8:c1:61:f0:
29:ab:23:eb:6d:5b:f0:40:4b:b9:8d:3a:09:69:bf:
5d:e0:3c:69:15:ad:2c:a7:48:f8:9e:40:98:b2:d3:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F5:71:A8:68:65:93:B4:46:FA:D5:46:29:7C:1F:22:CD:B7:6C:98
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/AfVxqGhlk7RG-tVGKXwfIs23bJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/32
Signature Algorithm: sha256WithRSAEncryption
ac:df:85:46:92:ca:a9:40:12:4a:65:7b:19:41:dd:bd:3d:66:
a3:3b:f6:8d:7b:2d:d5:c9:9f:fe:e6:f0:9b:d0:1e:6f:d3:a6:
35:e6:22:06:b6:a6:b2:58:d8:33:dc:87:8d:82:c9:0c:87:56:
cd:c6:47:5b:65:d7:74:a8:9b:c8:11:f6:d4:41:a3:58:0d:69:
7e:91:9b:52:b2:f6:8b:97:3d:2a:1e:cd:af:9c:aa:b2:1f:14:
ba:46:55:ea:21:7d:f0:fb:16:d0:bd:b9:12:ca:fc:69:f9:81:
b4:d4:8e:7a:26:96:cb:65:72:f7:65:10:9a:c0:40:2e:15:6e:
1c:23:a7:75:2d:c7:52:c1:f7:ef:94:81:7c:2e:07:bf:c3:25:
c7:75:49:18:69:89:1a:df:75:9f:bd:78:c2:24:3f:c8:67:ed:
c4:c9:05:2c:22:4b:af:2f:5c:43:8d:e5:60:aa:35:98:9e:0f:
c5:ce:7c:8b:cf:e7:6c:bb:4a:60:d8:9b:39:b9:7a:7f:dd:67:
89:8c:a2:53:b9:7f:41:b4:e3:0c:1a:89:38:df:fb:33:a9:5c:
09:8c:fd:50:99:d7:e9:ca:71:f4:20:73:a5:9e:b0:b3:26:66:
8e:e9:44:d4:56:32:63:c9:13:00:42:36:66:93:39:b8:b6:f3:
25:57:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:49 2024 by rpki-client on console-fra.rpki-client.org