Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/a794saWixrYFCRAHasQvf_-pazI.roa
File: a794saWixrYFCRAHasQvf_-pazI.roa (raw, json)
Hash identifier: 66eRKin+N3mAhC3wnS0EyX4cITY2K/hhV3K4OcmqZYo=
Subject key identifier: 6B:BF:78:B1:A5:A2:C6:B6:05:09:10:07:6A:C4:2F:7F:FF:A9:6B:32
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 0DBAAE64
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/a794saWixrYFCRAHasQvf_-pazI.roa
Signing time: Sat 01 Jan 2022 15:04:07 +0000
ROA not before: Sat 01 Jan 2022 15:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58291
IP address blocks: 213.156.28.0/22 maxlen: 24
185.102.68.0/22 maxlen: 22
2a01:4c01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230338148 (0xdbaae64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jan 1 15:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bbf78b1a5a2c6b6050910076ac42f7fffa96b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:45:f0:4d:8c:58:a1:c6:de:7e:a4:82:03:
15:78:81:87:aa:2d:d7:ec:2d:5e:eb:e0:c4:e0:0d:
e9:2a:02:46:16:b4:b2:fd:1b:36:6b:c1:21:50:79:
5c:d7:55:26:88:c7:d7:4b:db:6a:75:68:b1:34:d9:
5f:dc:ca:54:e0:c9:c6:17:50:05:d2:dc:d0:2e:e0:
23:f6:be:57:1f:a2:70:bd:f5:62:2e:41:3a:91:c7:
9f:69:46:c7:ff:ad:ee:ce:02:56:36:3b:9d:ec:b7:
f3:7b:d7:62:1a:ad:9e:1f:1f:7c:91:e1:0d:ca:be:
a0:74:b0:bc:e0:6d:03:ec:21:4f:07:31:d5:5b:31:
67:a2:1f:30:29:91:39:fd:21:98:32:53:98:7c:2f:
15:a7:d3:0f:57:f1:55:4e:11:8a:9d:66:1c:47:15:
19:43:58:f2:50:f3:c5:3a:b2:ba:c7:81:35:b9:6a:
21:4b:c2:3b:fb:bb:bd:6f:bd:9e:03:59:d7:bb:66:
d9:25:ac:01:f6:9a:d6:ba:23:67:2c:30:c3:5a:b6:
4c:c1:54:b6:5b:91:a7:c1:ae:e3:51:f5:3a:08:cd:
49:0b:f5:47:da:7a:51:7f:61:af:a5:3c:79:11:e2:
ef:80:61:92:f8:d5:36:b0:80:a1:7f:da:cf:94:47:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:78:B1:A5:A2:C6:B6:05:09:10:07:6A:C4:2F:7F:FF:A9:6B:32
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/a794saWixrYFCRAHasQvf_-pazI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.68.0/22
213.156.28.0/22
IPv6:
2a01:4c01::/32
Signature Algorithm: sha256WithRSAEncryption
2c:11:48:8f:f5:78:02:61:a1:42:24:cc:f0:0b:3d:f4:3c:85:
4b:62:e8:a0:c4:cb:95:4c:d7:02:34:bc:6b:2d:4a:5e:1d:dd:
b4:d8:6b:bf:0c:b8:65:aa:f1:c3:52:eb:c9:5a:78:74:56:ec:
3c:71:be:66:47:52:24:81:83:15:1a:78:4e:66:b1:c5:cb:7f:
5f:59:c6:4a:fa:f6:c8:30:e2:f2:3c:7c:f7:09:2a:97:bd:b7:
47:a7:88:70:b2:b6:6c:f2:b2:43:d0:1e:e5:f7:21:36:bd:26:
97:6a:7b:14:94:e4:86:43:b4:5b:c7:58:ad:ef:30:32:d3:e2:
dc:bd:75:de:83:83:40:21:d0:d1:d5:f5:42:a3:30:f1:78:d2:
cc:3c:39:f8:08:09:45:e4:0d:7b:66:00:cd:07:db:0b:1f:7b:
41:64:a0:00:2e:ec:ac:0b:c5:cb:e9:2d:f7:ef:ed:16:5a:7b:
f5:6f:12:13:0c:89:2e:ff:7b:29:86:74:3b:9e:19:88:9b:92:
e9:b9:2f:ef:15:0a:e9:99:2a:fe:1b:1a:eb:9f:af:0b:ee:fd:
26:c1:35:7d:a1:eb:74:e3:58:e7:1a:a6:69:32:45:e4:14:76:
2d:27:9a:57:30:1d:a7:82:66:e1:20:03:8e:5d:9d:c6:3c:7c:
05:20:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:13 2024 by rpki-client on console-fra.rpki-client.org