Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6k1cLjVDxY-1YYH8rXTUC5aRRIk.roa
File: 6k1cLjVDxY-1YYH8rXTUC5aRRIk.roa (raw, json)
Hash identifier: 8C1T5Sh5yu9xfJvo+UdkG0YCykjintdHxixfoSDkw+8=
Subject key identifier: EA:4D:5C:2E:35:43:C5:8F:B5:61:81:FC:AD:74:D4:0B:96:91:44:89
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01843C5FEC8D7EDDA64925127C72E49F3232
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6k1cLjVDxY-1YYH8rXTUC5aRRIk.roa
Signing time: Thu 03 Nov 2022 07:23:50 +0000
ROA not before: Thu 03 Nov 2022 07:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 82.163.56.0/22 maxlen: 24
82.163.60.0/22 maxlen: 24
82.163.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:5f:ec:8d:7e:dd:a6:49:25:12:7c:72:e4:9f:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 3 07:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea4d5c2e3543c58fb56181fcad74d40b96914489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:fa:77:0a:6e:31:bb:4e:f5:b8:3a:20:7c:
13:3a:3c:be:16:3a:42:f4:24:3c:0e:ec:81:39:5a:
ed:70:80:86:b0:15:18:5d:8e:ce:80:19:a6:d1:18:
70:f9:88:3c:1a:b6:ac:6d:3c:ad:96:fe:c6:21:3f:
97:58:a3:39:06:bd:2f:3f:61:00:14:a7:d2:26:4e:
4d:a4:23:b1:bd:d0:b8:85:43:cc:10:be:c3:08:aa:
ca:a6:f1:19:40:c2:fc:a3:8b:f7:20:ec:ae:df:63:
15:c7:2a:9a:e8:ef:ff:fd:9f:a6:09:08:7a:56:36:
4d:f3:c7:c1:5e:08:ca:a0:c4:7b:86:8b:da:90:c1:
d0:5e:41:a0:17:53:a2:0d:e2:ea:90:42:11:20:b3:
91:19:a1:8c:79:db:e0:25:08:56:48:d8:a3:96:56:
36:66:29:32:ca:3b:2c:df:33:00:28:d8:cd:ab:d8:
3e:e1:82:52:34:7c:27:d7:85:26:b6:3e:3c:64:78:
3f:87:7d:a9:e5:01:9e:3a:30:dd:76:fb:40:a7:d3:
da:90:d0:f2:97:0c:16:47:90:55:b6:cb:24:6d:1a:
81:d2:dd:38:56:94:d8:51:ac:07:29:cc:e7:26:f9:
b6:80:b0:25:9a:a7:72:c9:c4:f1:85:e4:dc:fc:81:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4D:5C:2E:35:43:C5:8F:B5:61:81:FC:AD:74:D4:0B:96:91:44:89
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/6k1cLjVDxY-1YYH8rXTUC5aRRIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.56.0/21
82.163.224.0/22
Signature Algorithm: sha256WithRSAEncryption
15:8b:d4:cd:d6:06:9d:0b:d9:aa:f8:9e:d4:7d:af:45:0f:83:
c4:0e:33:fe:7e:0b:78:1f:cf:1e:60:fa:5e:79:95:37:23:61:
e6:26:2a:5d:7d:97:17:b3:29:29:fd:11:12:13:d7:d6:66:d5:
45:87:55:c9:fb:35:b2:82:1f:f1:56:c6:1a:00:49:8b:a7:7f:
1f:6f:94:3b:00:6d:9c:90:5d:05:1e:71:02:5e:dd:8b:df:99:
96:93:29:df:fd:7e:9d:eb:e4:6b:31:15:94:52:5d:60:13:90:
87:87:6e:e9:26:f9:f9:63:36:9e:ef:73:41:af:d9:f3:bb:32:
46:da:8a:92:23:43:4e:f0:70:24:7c:9c:a5:25:01:93:15:92:
60:72:0f:56:6e:64:d1:55:8f:87:76:8e:fc:bc:02:c7:60:c3:
6e:9e:bc:46:37:d1:04:33:f9:f7:c1:88:1d:dd:29:13:c0:18:
8d:60:0f:2d:ac:1e:75:69:1d:b7:07:96:e2:8a:e9:f8:84:43:
b6:7e:8c:5d:8f:16:e3:5f:00:5b:31:0b:87:28:c8:4d:a2:8a:
df:aa:e4:e7:84:fd:6b:ab:39:26:99:ce:3c:62:5f:ed:e1:24:
d3:7d:82:82:b6:e0:5e:04:fe:88:34:0b:e3:85:b5:0b:5a:77:
4c:6c:95:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:46 2024 by rpki-client on console-ams.rpki-client.org