Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/6mj4YjY7PvmiLByVrmyFwmgVp54.roa
File: 6mj4YjY7PvmiLByVrmyFwmgVp54.roa (raw, json)
Hash identifier: zvA9nSUE2Eb0eiwJAY/V0p890MyDGvc3ctMjpamZz0I=
Subject key identifier: EA:68:F8:62:36:3B:3E:F9:A2:2C:1C:95:AE:6C:85:C2:68:15:A7:9E
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 08504C4C
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/6mj4YjY7PvmiLByVrmyFwmgVp54.roa
Signing time: Sat 01 Jan 2022 07:53:46 +0000
ROA not before: Sat 01 Jan 2022 07:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60501
IP address blocks: 45.129.160.0/22 maxlen: 22
81.16.220.0/22 maxlen: 22
212.102.98.0/24 maxlen: 24
2a0e:4cc0::/29 maxlen: 29
2a0f:c2c0::/29 maxlen: 29
2a0d:2640::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139480140 (0x8504c4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Jan 1 07:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea68f862363b3ef9a22c1c95ae6c85c26815a79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:01:35:ae:1e:2d:b1:12:95:bc:3c:b4:2d:
83:77:b2:eb:8d:13:5f:a2:de:0f:c5:e2:48:88:b4:
4b:66:e3:e7:e8:37:96:5b:fe:08:e5:a7:76:9c:78:
67:80:c7:c8:81:30:57:5e:d9:66:78:9e:92:f6:c5:
da:36:38:47:62:c7:68:5e:2d:e2:48:23:0c:95:a7:
6f:80:c1:83:d0:bd:d4:b8:b9:20:bb:9c:76:61:90:
f0:ca:f6:c0:d6:37:70:0b:63:d9:7f:7e:c6:96:ba:
25:a8:ce:f7:ce:e6:75:17:94:9a:49:12:97:2b:1a:
fc:2c:64:5e:ed:dd:76:d3:65:c0:e0:76:e7:ae:21:
97:bf:62:4f:7d:9a:6a:60:bd:d5:7e:05:02:a5:d9:
18:7c:7b:24:a7:3b:c2:bc:c5:ba:74:80:31:5f:f4:
a0:0f:4f:d5:70:25:ff:71:42:49:0d:33:c6:6f:de:
4d:d5:cb:82:54:da:44:e5:d4:de:8e:0a:f4:86:33:
26:a2:8a:fc:e2:59:d4:08:1e:7c:b6:0f:59:5e:d0:
af:8a:89:ab:7f:7e:3a:d0:ec:46:07:84:f7:8a:d1:
ec:2d:e6:8b:cf:d3:f6:93:44:af:ec:b6:46:14:45:
ce:0e:9e:83:82:5c:fe:71:c4:20:fa:45:ae:d1:da:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:F8:62:36:3B:3E:F9:A2:2C:1C:95:AE:6C:85:C2:68:15:A7:9E
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/6mj4YjY7PvmiLByVrmyFwmgVp54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.160.0/22
81.16.220.0/22
212.102.98.0/24
IPv6:
2a0d:2640::/29
2a0e:4cc0::/29
2a0f:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:e7:7f:11:1c:32:db:0c:33:31:8b:4c:42:2e:4d:cf:0e:ad:
a6:5b:1a:92:62:60:2c:4b:c0:3b:58:53:03:09:18:dd:a8:15:
e8:5d:37:af:dd:72:b0:f1:49:b5:62:d3:c7:05:f1:6f:2a:7b:
8e:17:a6:aa:02:6f:74:67:44:15:c9:7d:34:dc:dd:88:53:a5:
ec:55:8e:5a:47:c5:6e:cc:9f:63:c6:94:92:dc:01:40:4d:e4:
bf:03:01:ce:b0:60:16:d4:44:4f:1e:2b:1c:0a:75:0f:ed:62:
01:d3:7e:10:83:77:95:1b:87:90:80:3c:07:07:70:d1:32:45:
6f:c6:43:94:a9:f7:f3:3c:d4:e7:42:67:c3:0c:4e:9c:82:58:
d3:8c:ef:ea:f6:b3:b8:8d:b2:1e:47:ca:16:80:4e:a4:c9:1d:
08:29:16:0e:cd:07:e5:b0:2f:5d:55:e0:9b:2c:e3:80:c3:b3:
19:df:aa:60:ff:82:cf:5f:23:d0:6d:94:8d:22:cd:f4:6e:1c:
c6:54:09:a1:7a:5f:2f:93:2e:35:39:6e:db:0e:9a:89:6e:ab:
68:84:e1:b0:83:54:e2:36:a8:8d:37:0e:44:7a:7a:db:48:2d:
29:da:2a:65:65:d6:d8:2c:b7:25:95:b0:79:9e:72:10:bd:84:
00:86:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:20 2023 by rpki-client on console-fra.rpki-client.org