Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/bd0vusM_g6wqhsunTn9jySweHeA.roa
File: bd0vusM_g6wqhsunTn9jySweHeA.roa (raw, json)
Hash identifier: pv8dY9cNJ281Ff+1vZoOnV19JLgCVA7kKeqibtXWmhk=
Subject key identifier: 6D:DD:2F:BA:C3:3F:83:AC:2A:86:CB:A7:4E:7F:63:C9:2C:1E:1D:E0
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 3A8459DE
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/bd0vusM_g6wqhsunTn9jySweHeA.roa
Signing time: Sat 01 Jan 2022 06:00:05 +0000
ROA not before: Sat 01 Jan 2022 06:00:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199159
IP address blocks: 217.146.6.0/24 maxlen: 24
217.146.7.0/24 maxlen: 24
144.208.204.0/24 maxlen: 24
185.2.176.0/24 maxlen: 24
2a05:8900:36::/48 maxlen: 48
2a05:8900:28::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981752286 (0x3a8459de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 06:00:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ddd2fbac33f83ac2a86cba74e7f63c92c1e1de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:19:b6:df:d3:bf:19:5c:40:b1:eb:d2:42:78:
5d:f9:c4:53:16:62:f0:70:ef:25:2f:76:3c:9b:d6:
7e:0f:4e:85:4d:aa:bc:c2:6c:c1:e7:b2:25:d7:5d:
7b:1b:86:9c:76:9e:41:61:6c:f7:9b:ed:f1:03:1f:
04:3b:96:f8:5e:60:45:0b:49:89:34:5d:43:84:a8:
fa:c9:8f:7e:e7:82:d0:a5:b0:4f:96:d1:9b:b5:d2:
36:c5:48:46:3e:7a:f4:30:2b:e5:77:a4:f5:e1:01:
97:62:90:2b:1a:49:21:6d:6a:a8:8b:50:d4:55:ff:
d7:e1:01:13:36:15:1e:67:94:7b:ad:4d:61:3f:93:
df:4d:c8:94:db:f6:1f:50:b0:e4:44:c0:39:23:40:
36:9f:ab:8e:ea:73:8f:3f:18:ed:9b:89:a8:05:db:
60:45:52:4f:c7:39:73:8b:a5:82:22:ef:c9:41:27:
1d:9e:0e:7a:8b:c0:ca:3c:c6:98:b0:b9:14:44:b7:
02:32:ae:66:56:4e:09:59:9d:e2:08:43:91:0b:22:
68:30:8a:a4:c6:9f:ec:eb:eb:f8:95:6d:84:51:83:
d5:fa:6e:9d:d6:c4:48:e3:89:74:29:3c:a7:14:fd:
05:d1:4d:74:45:64:ef:6b:21:a5:6c:0a:e6:f9:26:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:2F:BA:C3:3F:83:AC:2A:86:CB:A7:4E:7F:63:C9:2C:1E:1D:E0
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/bd0vusM_g6wqhsunTn9jySweHeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.204.0/24
185.2.176.0/24
217.146.6.0/23
IPv6:
2a05:8900:28::/48
2a05:8900:36::/48
Signature Algorithm: sha256WithRSAEncryption
1b:a1:17:e9:e2:d4:e8:1e:6c:7a:19:cd:58:ec:69:5f:5d:57:
f9:56:42:5e:41:87:64:ff:6e:65:64:e5:f5:6d:92:3b:fc:4b:
2c:b5:8d:eb:73:b9:66:23:e9:0c:a7:ca:44:73:ea:0c:02:0c:
0b:20:7f:0d:bc:f5:24:fb:f5:ae:21:70:d3:f5:96:b8:24:b4:
55:1a:b1:e6:f2:cc:17:00:be:d6:8a:79:9d:cb:58:b8:bc:61:
20:0d:b1:b1:0b:d4:74:ab:fb:c3:67:46:11:bf:a8:9f:46:75:
5f:6e:35:58:af:08:05:ab:5f:03:93:e5:cc:3d:6b:57:ff:ff:
93:d5:5c:fe:72:21:54:91:d7:ce:83:74:1a:a7:8a:14:9b:cc:
76:05:f6:0e:10:b9:37:de:45:b6:f6:73:cb:24:ea:ba:53:60:
00:45:2e:0f:99:09:12:b9:0b:6c:a1:2c:ea:c0:72:d7:80:7d:
b5:d2:37:0d:b8:fe:0d:84:50:1b:ce:c9:f2:82:bb:b0:bb:f2:
5e:af:98:eb:e4:ec:a0:f4:a4:6c:56:0b:56:15:5f:6b:ad:ef:
3b:b8:fc:c9:f8:9b:8a:70:34:eb:3b:a6:4c:2b:3c:c8:77:49:
6f:3d:4b:f0:f2:1b:fb:b0:d7:80:05:a1:99:79:b8:71:c9:60:
bf:0b:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org