Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/6B16UvrjdxZrzBDVkT3qKplFzuw.roa
File: 6B16UvrjdxZrzBDVkT3qKplFzuw.roa (raw, json)
Hash identifier: I605kMYiy3+o3lVxpM/qDKcbbHLy26IL5zlKURzFDww=
Subject key identifier: E8:1D:7A:52:FA:E3:77:16:6B:CC:10:D5:91:3D:EA:2A:99:45:CE:EC
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 0A771F5B
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/6B16UvrjdxZrzBDVkT3qKplFzuw.roa
Signing time: Mon 11 Apr 2022 13:45:35 +0000
ROA not before: Mon 11 Apr 2022 13:45:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9051
IP address blocks: 91.245.248.0/22 maxlen: 24
82.146.160.0/19 maxlen: 24
82.146.170.0/24 maxlen: 24
2a0d:b3c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175578971 (0xa771f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Apr 11 13:45:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e81d7a52fae377166bcc10d5913dea2a9945ceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:77:98:e5:3b:9c:7b:6a:2c:28:95:43:62:
b0:df:12:eb:3a:9a:43:3f:f8:82:33:8f:81:cd:a5:
ca:2d:1d:20:40:d6:dc:38:ab:33:7e:bb:b1:a4:dc:
43:ee:fe:7b:8d:cd:ec:8b:97:3c:d6:24:e7:2d:85:
56:36:ec:4d:8c:42:e8:3e:61:5b:d5:db:cc:7b:cf:
f3:a9:8f:8c:2b:90:78:ac:29:b2:03:e6:2b:a0:f2:
4b:47:61:16:15:89:51:05:9d:89:8c:9f:10:5b:ea:
8a:be:0e:7d:63:82:4b:3c:53:1f:8a:eb:a6:f3:6c:
e5:73:da:09:9d:a7:5d:ba:f2:05:a1:aa:3c:e5:23:
71:cd:5d:fb:79:18:ad:c7:5c:c3:10:ac:99:df:de:
a8:2b:9d:ec:a1:46:51:47:d4:a0:0e:39:1e:31:08:
e8:9d:a0:a0:70:74:7c:00:ba:4c:10:ab:f9:ea:3e:
a1:5c:27:45:09:a4:85:65:4e:9a:bb:99:12:a4:30:
01:17:9f:52:c8:fc:46:b8:79:04:42:57:4c:ae:b1:
6e:ae:42:ba:f8:97:89:b7:03:4d:72:80:2f:bb:c6:
3f:34:66:16:1e:ec:eb:0d:9c:42:b4:76:27:fd:ea:
b1:d8:6a:e2:09:cd:0e:70:f9:f1:e7:fd:51:18:a2:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:7A:52:FA:E3:77:16:6B:CC:10:D5:91:3D:EA:2A:99:45:CE:EC
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/6B16UvrjdxZrzBDVkT3qKplFzuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.160.0/19
91.245.248.0/22
IPv6:
2a0d:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:0b:f2:e1:23:d8:78:55:20:be:75:93:09:56:26:37:58:ed:
4a:b4:2d:e1:f7:0d:ce:f3:dd:18:2c:8e:9e:81:bf:0f:26:ac:
dc:2a:06:d1:52:df:ea:bc:b0:da:73:df:31:37:03:cc:9d:7e:
f3:e1:dd:1e:a0:47:36:f3:e8:f7:ab:55:6a:08:bf:ee:fd:24:
fb:53:d4:9c:8e:1c:50:57:94:64:55:cc:43:ba:02:62:a9:c1:
77:e1:0d:f7:69:a3:79:2b:fc:c5:a8:b2:83:e4:4e:f7:dd:0d:
1f:e2:74:e7:3a:55:c7:c6:20:31:72:70:65:c5:b9:9e:2d:d9:
6f:b9:d3:26:50:62:83:32:2b:7e:64:78:c0:61:19:4a:02:93:
2b:f1:a1:34:ef:46:db:f0:d7:b3:51:01:83:e2:85:51:4e:3d:
33:1b:e0:45:b8:d4:bb:1b:7e:a0:61:e7:1c:34:95:83:5e:94:
4f:c4:60:36:94:e3:19:5c:68:3e:65:e2:d4:df:e8:59:e3:d1:
73:f5:71:da:e4:f4:b2:b7:09:51:59:c9:a1:06:14:1c:06:29:
c2:69:f5:55:69:94:75:64:85:44:b1:4a:42:fa:08:5b:78:14:
ea:77:7a:25:d4:38:94:2f:fb:d2:39:db:df:2e:44:3e:19:76:
f1:dd:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org