Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6t9Cl22dMsKOs-aBaOUE6V8qjf0.roa
File: 6t9Cl22dMsKOs-aBaOUE6V8qjf0.roa (raw, json)
Hash identifier: /zG1FKbLjoeqMeoXGuxuxX6JoF97p4fguwugaFsPB4A=
Subject key identifier: EA:DF:42:97:6D:9D:32:C2:8E:B3:E6:81:68:E5:04:E9:5F:2A:8D:FD
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0181DCA0A1C5E8EB6F5DDA4EB248ECBD7029
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6t9Cl22dMsKOs-aBaOUE6V8qjf0.roa
Signing time: Fri 08 Jul 2022 07:05:23 +0000
ROA not before: Fri 08 Jul 2022 07:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62448
IP address blocks: 188.212.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:a0:a1:c5:e8:eb:6f:5d:da:4e:b2:48:ec:bd:70:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 8 07:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eadf42976d9d32c28eb3e68168e504e95f2a8dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:62:f3:99:ec:09:ab:b7:05:39:08:b1:1a:
0c:0f:8b:b5:a2:b4:76:e7:84:13:cd:a2:f9:c9:05:
8c:fd:9b:0b:de:4f:67:7a:6d:cf:5b:6f:99:92:da:
d8:e9:d7:69:be:30:2d:84:f7:08:3f:fa:1a:d1:18:
55:10:1a:62:91:94:6d:e4:20:81:c4:39:c9:fb:4c:
9f:f5:b3:c3:ab:2b:4e:87:ea:8f:96:e3:2e:4a:aa:
c8:63:01:c0:9f:e8:bb:96:95:18:7e:de:c8:5d:db:
e7:1d:22:d8:4c:bb:8f:b6:7b:2d:82:d0:f4:ce:95:
16:83:40:ab:05:b9:e9:fe:1b:4f:ec:7d:8c:0c:03:
c9:af:ba:d7:c4:80:06:bb:ca:16:8d:a1:99:d5:5c:
3a:3b:29:26:9b:46:d2:40:d7:2c:c8:38:c9:da:3e:
2a:5c:51:2c:b6:ba:26:ee:87:38:f7:1b:f9:65:a3:
4e:2d:8a:fa:c3:e0:ab:a0:b3:50:eb:09:dd:90:56:
89:31:d4:79:27:ea:47:69:10:94:13:40:ca:76:3f:
ad:d3:f8:78:30:ae:d6:e2:93:98:d8:38:ed:a1:7e:
82:52:9a:53:8a:10:38:b9:53:47:7b:99:1c:fc:b0:
07:e3:5d:86:41:bc:e2:62:e2:2f:0c:7b:8b:6e:7c:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:42:97:6D:9D:32:C2:8E:B3:E6:81:68:E5:04:E9:5F:2A:8D:FD
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6t9Cl22dMsKOs-aBaOUE6V8qjf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.131.0/24
Signature Algorithm: sha256WithRSAEncryption
40:60:df:75:0e:01:6b:e6:da:04:f6:73:42:6f:97:72:71:30:
ca:bb:a8:a8:e8:11:2c:15:7f:5d:61:fc:3a:b0:a7:bc:2c:2d:
bf:42:ae:37:1e:50:b2:39:64:bf:79:87:60:83:6e:d0:93:14:
a0:26:f0:b8:19:d7:a0:f5:e3:38:00:c7:05:e4:c9:d9:be:de:
5a:e7:f6:c8:e1:d5:63:d2:0d:b9:a2:f8:11:a2:5c:fc:69:c3:
34:41:8a:ca:61:ac:a7:da:65:c7:02:96:29:e7:41:5e:11:5c:
5e:74:3f:2a:16:a9:fc:9b:4d:24:ac:1e:6f:3f:70:f2:06:de:
02:ac:ed:7f:e6:5e:5b:6e:cf:b2:64:f8:50:ed:21:fb:d8:9b:
27:16:29:8e:a8:81:6e:0e:65:79:1b:86:43:28:16:02:64:cf:
ea:dc:41:d2:5c:75:e6:05:c2:db:a0:23:99:d7:a1:e9:04:4c:
b7:8e:78:e4:15:48:89:ce:86:a8:b4:9a:b1:e6:67:b9:b8:74:
d8:27:65:bd:c6:ed:f6:8a:bb:bc:45:d0:23:4c:64:8e:a4:54:
9f:3f:7e:e9:e7:9a:21:8e:18:8f:58:3a:5a:77:9e:16:6d:7f:
4b:a6:2d:76:40:12:9e:3f:23:50:a8:1a:e8:f9:72:58:9d:ff:
b6:6a:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org