Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6zPfe92nY-UA_IqE_hkEfZe9Wac.roa
File: 6zPfe92nY-UA_IqE_hkEfZe9Wac.roa (raw, json)
Hash identifier: uOqQnLvA1JfWY5ZqTMWiWEmUfIONR3QuVVX/t1nZgbM=
Subject key identifier: EB:33:DF:7B:DD:A7:63:E5:00:FC:8A:84:FE:19:04:7D:97:BD:59:A7
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01828E8429CF652A21642CCBDB820233A6E6
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6zPfe92nY-UA_IqE_hkEfZe9Wac.roa
Signing time: Thu 11 Aug 2022 20:06:41 +0000
ROA not before: Thu 11 Aug 2022 20:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 91.193.232.0/23 maxlen: 24
91.193.234.0/23 maxlen: 24
195.8.200.0/24 maxlen: 24
152.89.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8e:84:29:cf:65:2a:21:64:2c:cb:db:82:02:33:a6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Aug 11 20:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb33df7bdda763e500fc8a84fe19047d97bd59a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:66:4c:02:81:c0:62:fd:79:48:13:ff:a5:
63:fe:ae:90:d8:1c:ed:fc:d9:34:10:5e:4c:92:b2:
cc:4b:28:e1:92:c4:53:4e:e5:6b:5b:4e:6e:38:6a:
8b:21:7f:cf:73:56:3e:e9:d7:28:f4:d0:80:c9:dc:
51:af:ae:2e:d8:5e:72:0e:2c:bd:6e:aa:b3:9f:3a:
75:63:de:90:e8:1f:15:ec:99:c9:9e:96:e5:47:68:
04:4e:16:97:d1:40:5c:cd:a3:b9:36:fb:bd:e8:b4:
78:d4:ef:b2:81:5d:ab:7a:f3:3d:8e:0a:f7:42:ef:
55:0f:5e:a9:a2:55:89:01:7a:8b:06:fb:f6:d0:b2:
8e:4c:36:9f:37:db:6d:f6:b1:49:b0:85:c4:8c:f6:
b3:33:d2:9a:f7:d2:2f:29:90:a3:ef:7f:d0:a0:95:
25:2e:b6:17:cf:83:f1:8c:ba:0e:8c:56:76:df:ee:
c0:da:c0:44:40:bb:99:f4:f9:30:17:22:a8:55:c6:
b1:da:25:d7:54:3e:1f:a9:86:89:c4:a6:f3:d7:40:
3f:8f:70:d7:34:43:52:ab:af:89:d7:7f:65:61:84:
66:d5:8e:78:d1:f1:68:71:b0:9b:8a:1a:ae:79:c3:
9e:64:86:fa:8e:3f:1f:b2:51:dc:28:b4:dc:75:27:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:DF:7B:DD:A7:63:E5:00:FC:8A:84:FE:19:04:7D:97:BD:59:A7
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6zPfe92nY-UA_IqE_hkEfZe9Wac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/22
152.89.195.0/24
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fc:cc:07:cd:c4:00:6d:9f:cb:5c:00:3b:ce:54:ec:8c:5d:
c6:cf:5b:03:9d:56:ec:a2:4d:52:db:89:59:dc:49:28:11:76:
4e:0b:a6:92:86:fd:96:fe:a3:06:36:c7:47:cc:eb:1e:2d:0b:
f6:c1:59:ef:93:71:89:5c:a2:af:d6:0f:b4:ee:6a:7d:41:12:
ec:9b:77:00:33:a9:fc:0b:a9:56:7e:ed:b8:12:b3:0d:e5:ef:
8d:f1:a8:4d:19:a4:ce:fd:e6:c1:fc:23:b0:17:1a:72:ea:20:
a0:78:a8:d4:26:97:c9:74:e1:9a:15:1b:11:6e:ae:95:94:d1:
fa:a3:d5:2f:c8:76:25:f1:d6:dd:33:e7:19:0f:b2:4f:0f:e7:
f1:7a:6a:05:ae:6c:32:5d:2c:ad:54:7d:1f:21:8a:8e:bd:8e:
c2:d9:6a:65:c0:9d:17:cc:c9:d8:ed:26:94:9b:e7:03:fc:9c:
26:5a:6d:81:f0:a2:54:50:bb:20:93:22:e2:cb:9c:ba:35:d2:
61:17:66:33:a1:e8:0d:df:4c:90:1a:dd:c9:db:ae:d1:66:4f:
45:ae:08:27:f3:38:57:1b:52:56:2b:fa:58:2f:8b:9a:1c:c0:
78:7d:83:f3:23:22:62:b8:a2:e5:26:0f:a3:ff:54:dd:1a:ba:
60:05:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:49 2023 by rpki-client on console-fra.rpki-client.org