Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/0rU9-cvUxb0DEpahKgeOXbEWG5Q.roa
File: 0rU9-cvUxb0DEpahKgeOXbEWG5Q.roa (raw, json)
Hash identifier: c6OQc2fVhTDTcEmbNNlXLsT5t1fkhQ/fWKhXN1prDyg=
Subject key identifier: D2:B5:3D:F9:CB:D4:C5:BD:03:12:96:A1:2A:07:8E:5D:B1:16:1B:94
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 3DEE5332
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/0rU9-cvUxb0DEpahKgeOXbEWG5Q.roa
Signing time: Sat 01 Jan 2022 06:58:05 +0000
ROA not before: Sat 01 Jan 2022 06:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6837
IP address blocks: 85.0.0.0/13 maxlen: 32
178.192.0.0/13 maxlen: 32
176.127.0.0/16 maxlen: 32
188.60.0.0/14 maxlen: 32
83.76.0.0/14 maxlen: 32
62.202.0.0/15 maxlen: 32
92.104.0.0/14 maxlen: 32
2a02:1200::/27 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039029042 (0x3dee5332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 1 06:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2b53df9cbd4c5bd031296a12a078e5db1161b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:01:52:45:2b:2b:ef:77:12:81:12:ff:12:
3b:b8:44:76:3c:f6:56:17:79:59:7b:41:d4:20:ec:
65:6d:6e:b5:c9:85:4e:5f:59:cc:d1:20:99:bc:34:
cc:79:d8:57:83:0c:6c:bf:dd:f5:1d:41:b1:b7:aa:
8c:0d:f3:1c:10:f2:25:f5:f5:3d:44:8c:39:eb:a5:
78:d3:64:35:ac:ce:63:06:16:bc:cd:80:77:6a:0c:
38:46:93:87:0e:1f:35:d0:67:7c:8a:99:50:6a:57:
f6:3f:27:fd:c1:0e:ae:9e:2d:fd:99:1a:35:98:ef:
e9:19:a5:fc:ff:ba:66:e7:4c:03:20:23:17:1f:40:
cf:2f:ac:cc:82:98:96:6f:5b:cf:aa:7d:90:a5:d7:
9a:e5:b2:b8:bd:9f:60:6e:fb:ab:65:f3:5e:b1:a6:
67:ed:80:f7:44:70:0e:8d:6a:ab:62:03:34:e1:22:
55:aa:82:80:10:79:5e:98:3f:db:8e:66:d8:de:44:
a7:f9:5e:0b:fd:e3:98:4d:c6:fb:2b:cd:58:73:be:
e1:f8:0b:1e:db:d3:2f:15:10:c2:74:24:70:aa:d4:
36:98:f2:86:e6:50:12:64:9a:1a:e1:5c:f3:05:66:
5a:19:f4:21:50:1c:d7:4c:44:61:ea:6d:db:33:79:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:3D:F9:CB:D4:C5:BD:03:12:96:A1:2A:07:8E:5D:B1:16:1B:94
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/0rU9-cvUxb0DEpahKgeOXbEWG5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.202.0.0/15
83.76.0.0/14
85.0.0.0/13
92.104.0.0/14
176.127.0.0/16
178.192.0.0/13
188.60.0.0/14
IPv6:
2a02:1200::/27
Signature Algorithm: sha256WithRSAEncryption
58:ac:16:f8:6f:3e:23:3b:40:79:0a:55:16:f2:f1:a2:f1:35:
02:3a:4e:a7:7d:2b:d3:56:d3:b3:b4:1d:bb:73:40:19:d8:80:
73:87:fa:65:10:df:4a:d2:ed:c9:86:e4:1c:d8:c7:68:fd:04:
cb:b3:ed:d7:12:cd:51:8e:fb:ca:81:26:11:0f:35:93:16:69:
2b:76:b9:cf:d6:11:45:12:52:16:27:aa:f3:ac:f8:f5:99:04:
13:3a:33:e4:5a:b1:65:31:35:6b:7d:b0:e8:65:13:9b:b5:bc:
2c:c0:14:b7:6f:80:ee:38:85:37:a3:b8:98:ef:89:0f:62:45:
46:c4:ac:e5:76:db:c9:e6:4d:ee:fb:71:69:ca:bb:f4:ec:6d:
b3:da:08:8c:7d:8a:67:cc:29:8a:a1:bb:a2:1b:9c:b7:28:01:
8b:74:d4:cf:18:0e:a9:46:91:32:05:4b:20:da:83:7f:f6:36:
54:53:d9:81:37:1e:03:8c:a3:83:7b:63:d8:a1:03:9f:84:5b:
b5:b7:93:05:a0:15:4c:9c:70:d2:e9:f2:ea:ac:7f:71:32:0c:
db:07:7c:bc:78:d8:f3:ff:b8:c6:6f:d3:3e:ab:a0:b7:ad:56:
d0:8f:62:1e:52:57:d4:b9:c8:e9:5a:3a:4d:cd:01:81:e6:06:
28:01:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:12 2023 by rpki-client on console-ams.rpki-client.org