Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6fbEuc0AV3JRVWHERB0zZPRDDVY.roa
File: 6fbEuc0AV3JRVWHERB0zZPRDDVY.roa (raw, json)
Hash identifier: lca4KQo5AodydDc7EW6H8l9QFolKZuGs3yAXatBXDsQ=
Subject key identifier: E9:F6:C4:B9:CD:00:57:72:51:55:61:C4:44:1D:33:64:F4:43:0D:56
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 069A8DD4
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6fbEuc0AV3JRVWHERB0zZPRDDVY.roa
Signing time: Mon 27 Jun 2022 15:49:56 +0000
ROA not before: Mon 27 Jun 2022 15:49:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 213.170.223.0/24 maxlen: 24
185.111.24.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110792148 (0x69a8dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 27 15:49:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9f6c4b9cd005772515561c4441d3364f4430d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:d1:b4:90:3e:09:41:e7:f1:7b:26:b0:e5:
d7:24:f8:87:95:9e:c8:32:83:f5:ac:af:75:f1:fd:
23:08:79:5f:ec:85:15:1d:70:76:ec:4e:05:c8:33:
ed:ef:81:8e:f5:b5:5d:45:24:df:42:dd:cf:1c:de:
8d:34:4d:57:48:89:77:9b:d8:8e:65:03:f3:db:14:
d6:c5:f8:46:31:ca:7a:50:a2:67:7f:13:f8:6a:11:
83:0a:42:a0:fe:95:3e:32:d6:5c:6e:e4:6c:2c:e7:
70:28:bd:fb:25:d4:2c:f7:64:a9:2e:d4:78:0d:78:
54:da:b1:9f:1e:9b:75:bd:43:32:b7:06:0a:5e:27:
fe:ad:7b:2b:29:a9:e7:15:43:c8:ee:58:c0:e1:d5:
20:a2:11:ed:d0:0f:17:a8:88:2f:81:d3:f9:ef:cc:
2a:12:17:f3:c4:da:0c:f0:c3:8b:0c:e5:95:cb:d3:
81:5d:87:42:6a:51:ef:1a:41:c8:de:47:ab:1e:5e:
83:7b:a0:35:21:e8:21:c2:77:36:1a:d0:f9:ba:cc:
30:18:cb:8c:79:d6:81:8b:0c:a9:bc:60:20:20:44:
23:a2:a2:21:bb:8e:b4:fa:7c:02:c1:ea:58:1e:18:
0e:c7:a7:b2:0e:a4:3e:7a:54:cf:10:de:f2:97:21:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F6:C4:B9:CD:00:57:72:51:55:61:C4:44:1D:33:64:F4:43:0D:56
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/6fbEuc0AV3JRVWHERB0zZPRDDVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.24.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0d:fa:6c:5e:43:26:f0:09:3c:0d:cd:78:cb:d0:d2:a2:aa:
7d:d3:2c:e6:12:9e:f1:e1:34:ef:07:58:12:dd:fc:11:ec:5d:
92:38:4b:04:e5:66:08:49:9a:ee:4f:3a:41:91:60:05:b7:c2:
27:bb:54:92:e0:d1:83:8d:ec:7a:fd:d8:97:ca:91:7d:53:57:
25:62:e7:93:b9:76:c7:57:ad:ae:c5:fc:2e:24:d8:fb:73:1e:
cd:e7:fc:07:f1:b3:b3:a7:52:ec:9d:94:5b:8e:20:96:6d:1c:
26:42:c4:8b:7a:28:5e:b3:cd:1d:02:d2:75:f9:d2:c6:c5:5e:
18:53:0c:16:1b:8f:aa:dc:a9:8f:31:8c:f1:16:3c:9b:3b:d2:
40:5c:38:34:a6:b9:98:aa:8a:28:3b:f8:8c:04:02:49:85:55:
65:24:ab:e0:6c:cf:2e:9d:be:4b:99:b8:30:73:10:bb:d1:8a:
36:17:96:f2:63:df:4d:85:a9:7f:20:0f:bc:0b:51:4f:e3:c4:
a0:80:50:4a:1c:0d:d3:22:d2:0b:1f:6a:b2:47:e3:3c:53:14:
bd:00:7f:7e:bc:a8:85:22:7b:18:23:04:e5:50:b3:fd:f8:9d:
f4:09:90:be:d7:b7:92:72:ad:b9:12:76:b4:7c:3b:64:cd:0b:
b7:23:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:17 2023 by rpki-client on console-fra.rpki-client.org