Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/6w8j7i13mM0hGnR3tUMfzMY17SE.roa
File: 6w8j7i13mM0hGnR3tUMfzMY17SE.roa (raw, json)
Hash identifier: G29sPWLk05eJlu2OSoMth06rLCrL7afGQ49SrErOiHw=
Subject key identifier: EB:0F:23:EE:2D:77:98:CD:21:1A:74:77:B5:43:1F:CC:C6:35:ED:21
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 0713D5D9
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/6w8j7i13mM0hGnR3tUMfzMY17SE.roa
Signing time: Sat 01 Jan 2022 11:54:04 +0000
ROA not before: Sat 01 Jan 2022 11:54:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209253
IP address blocks: 92.119.61.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
2a09:d1c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118740441 (0x713d5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 1 11:54:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0f23ee2d7798cd211a7477b5431fccc635ed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:9b:f1:86:9c:35:49:a6:ef:dd:ed:ac:84:
2f:78:84:16:28:23:76:a0:64:a2:65:bd:31:c4:73:
6c:16:e9:ee:d5:42:40:5e:0b:d0:19:a9:a8:7d:97:
c1:83:4d:18:5d:58:33:99:cf:45:e1:22:d2:f8:49:
be:67:f8:fa:b9:2c:fa:3c:ef:45:94:35:04:ab:a2:
ef:f9:ff:c0:e5:99:7a:f5:80:57:ed:b5:9c:8e:c0:
8d:b3:f1:2f:c9:29:81:76:c0:a1:3b:3c:16:e3:6e:
a9:85:a1:b7:d9:0b:93:db:28:f1:6e:d5:5c:50:ff:
1d:c6:1f:91:53:a2:a0:6a:c5:db:70:02:a7:b0:83:
6b:7d:2c:7d:0a:5d:08:d0:21:0b:32:a7:c5:3d:03:
14:d8:5a:ac:62:76:b7:c9:30:7c:2f:4a:57:99:d5:
92:ae:c4:1b:a1:c6:15:0f:ac:c3:b1:7f:73:c8:64:
46:2e:3e:26:1f:f2:e4:25:a0:68:5e:e6:69:e8:bd:
78:49:c7:c1:2f:25:de:f0:03:f6:67:5e:14:8b:f7:
28:38:70:98:cd:06:53:05:2f:cc:6d:05:22:1a:4f:
5a:77:3f:04:95:74:7e:94:6b:55:e1:7d:64:29:a5:
50:f3:86:e9:28:77:76:d8:be:e3:a2:1b:c4:cd:d6:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0F:23:EE:2D:77:98:CD:21:1A:74:77:B5:43:1F:CC:C6:35:ED:21
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/6w8j7i13mM0hGnR3tUMfzMY17SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.61.0-92.119.63.255
IPv6:
2a09:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:5d:d3:21:62:24:ef:46:40:07:8a:0b:50:54:ab:f3:0c:35:
e1:39:68:2f:61:5c:92:12:cb:33:86:bb:28:7c:e2:d8:97:79:
7e:04:4d:ce:fe:f5:fb:cf:b1:6b:00:c0:10:d2:bd:80:00:d4:
02:ce:fb:78:71:56:f8:bd:57:b4:b1:26:24:46:63:e5:f5:c7:
52:4e:26:48:52:1e:14:4e:15:5f:92:d7:8c:f7:35:7e:ef:f3:
2d:55:62:70:5f:5f:36:14:f1:4a:bf:c1:8c:50:5e:5e:e0:cf:
84:9b:59:63:53:dc:e0:74:0f:fa:dd:96:c4:7c:13:53:07:e5:
1c:48:b9:ef:1f:10:dd:b4:80:bc:3d:b2:dc:e9:2f:d6:48:68:
27:9b:3e:e9:ce:b0:66:b4:4c:b6:0f:01:98:7c:00:16:56:a2:
1c:39:97:5b:14:41:3d:6b:94:cf:5b:b0:c9:2b:91:4b:52:a2:
b6:ca:e1:61:c4:69:fd:8f:66:db:7b:02:12:6d:67:50:fb:27:
c9:fc:52:b4:d1:de:39:21:9b:d9:49:19:ee:83:2e:80:57:84:
14:e4:11:79:eb:7a:15:a5:40:c6:82:0c:92:13:8f:1a:68:da:
b8:a9:52:35:9a:a6:65:c8:8f:52:48:ec:e6:44:2c:0c:f0:ab:
46:ce:9e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org