Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/sk_uAnrrJInhlbDVWqpWesKol-k.roa
File: sk_uAnrrJInhlbDVWqpWesKol-k.roa (raw, json)
Hash identifier: fZJ77fpT3TN/RLmn8jkqR3t0Wf/eN80hWQr0sEF3wCM=
Subject key identifier: B2:4F:EE:02:7A:EB:24:89:E1:95:B0:D5:5A:AA:56:7A:C2:A8:97:E9
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38D5A2C6
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/sk_uAnrrJInhlbDVWqpWesKol-k.roa
Signing time: Sat 01 Jan 2022 07:55:15 +0000
ROA not before: Sat 01 Jan 2022 07:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6900
IP address blocks: 145.61.196.0/24 maxlen: 24
145.61.200.0/24 maxlen: 24
145.61.200.0/23 maxlen: 23
145.61.200.0/22 maxlen: 22
145.61.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953524934 (0x38d5a2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b24fee027aeb2489e195b0d55aaa567ac2a897e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:e6:c0:6d:c4:5f:26:23:27:73:4f:9f:fd:
bb:c9:a2:84:7e:44:94:c7:83:e3:18:71:b6:d4:34:
f3:a0:6a:8c:8f:00:dc:77:82:60:79:db:a5:60:a4:
61:cb:75:9a:09:fa:3a:60:44:0f:a8:71:a3:99:59:
44:9d:86:c1:54:9d:f4:29:ad:af:fd:2a:f5:fe:98:
f4:25:76:73:38:9d:85:e2:78:89:d8:d3:0e:42:2f:
35:2a:1b:70:33:d5:02:58:a7:86:a9:ad:9d:f1:54:
84:d1:08:25:dc:8b:c1:c4:75:4f:e8:a4:30:e0:bf:
6a:ff:8f:4d:06:d8:08:77:f8:6b:ee:70:c1:b0:d4:
75:d0:b1:da:b2:52:0b:59:24:68:c4:d7:f1:59:64:
28:88:af:18:2e:07:87:01:a1:5f:36:e2:33:cb:f2:
06:46:e1:21:8a:71:8a:40:8e:52:3b:6d:28:dd:50:
1b:df:4b:77:73:ea:7e:4a:1d:37:66:63:6e:e2:3f:
ab:8f:d2:e6:8c:e3:4f:8e:1e:d4:2b:b4:f9:83:d9:
e9:8a:f7:bd:4b:07:db:a6:0b:9f:72:f4:92:2d:6d:
c9:aa:5e:9c:68:73:01:2d:0c:cf:9a:88:00:a2:e8:
5f:68:b7:ef:fe:04:89:8b:1b:2c:54:e9:3c:aa:10:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:EE:02:7A:EB:24:89:E1:95:B0:D5:5A:AA:56:7A:C2:A8:97:E9
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/sk_uAnrrJInhlbDVWqpWesKol-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.61.196.0/24
145.61.200.0/22
Signature Algorithm: sha256WithRSAEncryption
04:44:88:02:8f:70:35:64:53:2f:64:de:6d:ab:28:1b:54:ec:
8f:0b:c6:c7:90:89:f6:e1:f5:bc:b9:27:e0:8c:d7:e9:13:75:
51:b0:35:57:ed:6e:c4:17:a7:7e:0d:ac:52:ef:1c:d7:75:33:
4b:7b:79:ba:2c:6f:20:6e:ee:bf:27:2f:90:49:9e:ee:4e:98:
ff:e6:c0:09:d6:0f:31:03:69:25:b3:a4:f8:c7:52:19:41:00:
25:63:42:d9:98:c5:59:4f:b9:e2:d7:89:dd:8d:b6:4e:01:6c:
3f:3c:ab:34:6e:de:2c:55:0a:39:3e:a5:ef:6d:62:08:fa:b2:
97:2d:59:87:8e:c2:6c:02:75:60:da:55:17:28:93:ea:1e:d3:
d5:a3:00:f9:a7:cb:62:9d:75:f6:e9:66:18:e5:a0:6a:81:b6:
1a:50:96:51:6b:16:91:d3:55:71:21:26:66:ac:f9:94:bc:eb:
35:2d:34:6c:2c:ee:07:5a:5f:81:ae:0b:0f:e0:f1:1c:26:43:
f3:30:5d:c4:43:4d:32:a9:ea:42:7f:5c:e6:1b:c3:13:b3:78:
b8:6e:8f:14:27:bb:cc:6b:91:93:c0:1a:90:7d:ef:b1:ac:2f:
09:47:1b:96:89:69:bb:7a:46:76:18:19:db:a1:46:c6:10:e8:
52:81:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org