Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/6bmil88eLmuV6EDb-m8Epk8FTmw.roa
File: 6bmil88eLmuV6EDb-m8Epk8FTmw.roa (raw, json)
Hash identifier: pnAYmUF7J74aKoEfYYLFEJ9i7bhbVxIjuH4hmL3GzC4=
Subject key identifier: E9:B9:A2:97:CF:1E:2E:6B:95:E8:40:DB:FA:6F:04:A6:4F:05:4E:6C
Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial: 6BA7ED
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/6bmil88eLmuV6EDb-m8Epk8FTmw.roa
Signing time: Sat 01 Jan 2022 01:52:42 +0000
ROA not before: Sat 01 Jan 2022 01:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41655
IP address blocks: 195.8.199.0/24 maxlen: 24
195.8.198.0/23 maxlen: 23
37.153.80.0/21 maxlen: 21
2a00:adc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7055341 (0x6ba7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
Validity
Not Before: Jan 1 01:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9b9a297cf1e2e6b95e840dbfa6f04a64f054e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:d0:67:65:f9:6c:3a:7f:04:14:27:e1:c2:
1d:6e:64:7f:e2:97:52:00:f3:0f:9f:f3:7b:5a:3b:
ac:91:23:25:6d:92:7c:69:b2:29:15:90:7a:9c:74:
56:2a:41:31:70:b8:89:89:3b:ad:79:3f:ce:84:62:
fa:2b:02:65:8b:8f:35:da:14:e9:60:e8:9e:1b:e7:
59:bf:99:51:ff:a1:8a:5f:43:77:10:ce:70:4a:a3:
3d:27:27:7f:1c:83:82:05:77:84:b9:4e:0b:db:2c:
b8:fb:1e:b0:6f:d9:7b:44:2d:2a:8a:cc:da:3a:4a:
94:e4:b4:2a:49:86:90:79:81:86:b9:a2:47:ae:ef:
f7:d1:07:e0:b8:38:61:c8:60:39:c2:a4:42:e3:d7:
c3:3b:9c:28:b2:65:18:62:97:d1:ee:20:9c:bc:14:
18:12:d9:5a:fc:8f:6e:02:84:bc:35:e8:47:ef:fc:
63:d8:67:ad:b6:69:85:5a:c1:cb:ee:53:58:d1:84:
90:9c:d7:c0:3c:ce:06:6d:71:07:04:88:1a:8d:32:
3c:e8:b0:4c:8f:17:d0:5a:79:62:01:f1:c0:71:41:
8b:46:81:f7:36:d0:a9:54:d2:f6:df:70:6c:4a:85:
68:0c:41:1b:2b:eb:d9:a0:73:a4:74:aa:ad:1d:95:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:A2:97:CF:1E:2E:6B:95:E8:40:DB:FA:6F:04:A6:4F:05:4E:6C
X509v3 Authority Key Identifier:
keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/6bmil88eLmuV6EDb-m8Epk8FTmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.80.0/21
195.8.198.0/23
IPv6:
2a00:adc0::/32
Signature Algorithm: sha256WithRSAEncryption
77:d7:84:fb:09:c4:3c:3d:42:35:71:37:25:c3:f2:d9:f0:69:
a4:a5:e6:fc:3c:cc:dc:e4:33:8e:85:2c:20:38:6a:a9:b5:bf:
3e:cb:4a:98:a0:95:dc:38:bb:e4:77:aa:20:a5:73:8e:ea:0f:
ae:63:99:ba:96:58:ca:9f:10:54:27:08:92:a0:55:8c:fb:5b:
31:f7:db:e5:95:48:27:aa:62:d5:df:1d:81:4d:cb:ca:60:0a:
78:bf:ff:e3:9f:57:2a:c3:5e:38:4f:fa:4e:9c:32:fd:9d:c7:
44:69:f7:a4:e9:27:ff:83:07:ae:f8:fa:e0:6a:bb:4c:22:89:
c1:b1:19:08:04:b9:c6:4b:0d:f1:9d:e1:5f:f3:89:8d:c7:6c:
48:b6:85:74:f9:b1:0b:ab:3a:46:17:42:cb:f9:ba:29:b4:ae:
33:ce:c3:16:3e:2b:7f:4b:52:dc:4b:0a:4e:58:ad:0a:14:66:
4f:0b:9e:3f:36:31:0b:e4:29:28:58:8b:fd:18:34:f1:88:61:
f9:d2:0b:12:25:29:bc:07:1e:9a:7d:d9:53:5f:1e:61:6a:07:
13:bc:8c:10:f8:4d:ac:c6:a5:95:e2:ac:e5:c8:86:7e:89:61:
1a:ff:10:47:d9:1b:d0:3e:97:fe:e2:7e:eb:5a:d0:53:f4:a2:
dd:b3:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:21 2023 by rpki-client on console-fra.rpki-client.org