Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/AY6B0u6K8_s2vkG0rLvswJP1LLY.roa
File: AY6B0u6K8_s2vkG0rLvswJP1LLY.roa (raw, json)
Hash identifier: SHmo9nqMeL8Q+5w3gBS4+0618rJiRXnDch8rF6Ph984=
Subject key identifier: 01:8E:81:D2:EE:8A:F3:FB:36:BE:41:B4:AC:BB:EC:C0:93:F5:2C:B6
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 01820C233495BA9B4634426CD6DD1BE3761F
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/AY6B0u6K8_s2vkG0rLvswJP1LLY.roa
Signing time: Sun 17 Jul 2022 12:30:09 +0000
ROA not before: Sun 17 Jul 2022 12:30:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60800
IP address blocks: 185.181.116.0/22 maxlen: 22
91.197.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0c:23:34:95:ba:9b:46:34:42:6c:d6:dd:1b:e3:76:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jul 17 12:30:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=018e81d2ee8af3fb36be41b4acbbecc093f52cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:e9:f0:b4:5a:6e:f9:65:5b:dc:85:0d:f3:
51:aa:6f:58:68:7d:a5:6e:8c:9c:89:63:fc:fe:1b:
cb:c0:9e:39:61:d6:c1:bd:60:66:a2:bb:a8:94:1b:
63:17:a7:9b:e1:af:81:14:76:02:6a:70:e3:9e:d2:
ac:84:e4:3b:13:27:5f:83:f9:a5:0c:e5:29:84:ef:
c8:9f:bb:a7:c5:69:1d:a1:d7:7f:53:12:a4:5c:e6:
e9:4a:c3:a0:eb:e8:18:38:78:f5:b6:56:b4:5c:8b:
4c:35:84:70:6e:84:3d:b0:e3:09:a8:9a:34:74:26:
bb:0c:54:1e:9e:99:ae:e4:dd:e9:24:bb:9c:ee:8d:
f6:06:39:42:41:e8:13:98:ad:21:c5:05:43:19:05:
2e:3c:5a:4f:1a:30:f8:b3:a5:c0:18:c7:ff:89:1b:
8e:cd:2b:09:c3:5b:c8:8b:ae:96:44:de:83:85:b2:
f3:aa:0a:48:37:e0:b6:af:85:c6:f0:1f:31:3d:3b:
06:00:ac:55:23:29:1b:23:2c:12:d4:97:48:d2:8e:
ff:4d:4f:89:e3:d9:3a:2e:94:96:4e:43:a0:a6:47:
86:ed:ca:7d:6e:c2:09:28:0f:ec:28:0a:0e:8f:76:
77:82:fb:d8:c5:ae:ea:a4:2d:8d:13:c0:10:3f:15:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:81:D2:EE:8A:F3:FB:36:BE:41:B4:AC:BB:EC:C0:93:F5:2C:B6
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/AY6B0u6K8_s2vkG0rLvswJP1LLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
Signature Algorithm: sha256WithRSAEncryption
07:94:bd:89:c3:83:16:94:c4:6c:96:3d:04:87:65:e2:72:e3:
73:85:a8:20:a3:c3:4d:88:60:64:ea:63:91:82:31:69:4c:5b:
27:71:b7:9d:f7:9d:77:cb:2b:ca:c5:c5:55:69:65:b3:52:34:
42:f4:25:73:16:3e:d1:52:bd:78:5d:54:12:96:a2:03:10:2d:
8d:11:21:2b:07:fe:53:01:dc:b5:74:34:76:0f:71:71:24:dc:
9b:9f:1a:8f:d1:9d:d8:f9:19:3f:28:62:d0:eb:23:d3:e6:61:
2a:aa:e1:d5:ea:56:a2:e0:62:69:e0:79:2e:9a:5d:43:57:1e:
73:88:3c:0a:bb:f8:54:5f:76:97:c4:e0:14:07:4e:44:8e:5e:
0d:2a:82:72:29:e7:57:0f:ef:4d:2f:a0:b5:52:cf:88:16:2a:
c9:9a:f6:6d:e6:91:ad:70:34:d7:87:30:47:5e:b5:c2:c6:94:
ad:0c:b6:0c:a9:81:ad:be:6f:5f:83:2c:4b:ad:24:d2:24:dc:
64:38:58:45:96:c4:78:8f:ed:69:c2:0e:35:31:6d:03:45:e2:
5b:48:04:38:56:dd:6f:c3:4b:ed:c3:f1:c9:7f:e2:2b:aa:07:
17:cd:35:8f:92:8f:cb:cf:2c:a8:2a:85:a0:9a:42:62:e0:a0:
ed:e3:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:24 2024 by rpki-client on console-ams.rpki-client.org