Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/EC6Pz0NbYkyrouiFQkGrOgTj_wc.roa
File: EC6Pz0NbYkyrouiFQkGrOgTj_wc.roa (raw, json)
Hash identifier: EvoojHqbKgP21wwgB377sDsTJDxu4FzU6DAgDr4adXU=
Subject key identifier: 10:2E:8F:CF:43:5B:62:4C:AB:A2:E8:85:42:41:AB:3A:04:E3:FF:07
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 01887C994829C2849071CA0693A3ECE344A0
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/EC6Pz0NbYkyrouiFQkGrOgTj_wc.roa
Signing time: Fri 02 Jun 2023 14:53:20 +0000
ROA not before: Fri 02 Jun 2023 14:53:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43872
IP address blocks: 84.38.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:99:48:29:c2:84:90:71:ca:06:93:a3:ec:e3:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: Jun 2 14:53:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=102e8fcf435b624caba2e8854241ab3a04e3ff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:a2:f9:0c:7e:f2:ad:c6:f5:1d:bc:02:15:
28:dd:d1:81:fa:34:8a:8e:0b:03:e0:61:74:f1:03:
f9:56:cc:ed:82:63:ad:c8:de:8e:79:8e:56:31:76:
ec:c1:ef:d6:4f:c7:63:9c:77:2b:16:00:ed:2f:ea:
72:32:2b:84:32:ef:fb:9d:6c:fd:21:76:c6:07:bb:
17:e8:f7:5e:a4:d0:fc:ce:18:83:37:43:c0:b2:51:
0d:42:84:5c:07:29:72:3e:24:8c:28:1e:b6:f8:79:
44:fe:ec:0a:34:a3:26:23:6b:fe:12:75:54:26:de:
99:3e:b1:4a:ad:98:8f:1c:37:b4:dc:85:ab:32:59:
cc:fc:11:29:b7:7e:66:44:4e:f7:87:02:77:a6:84:
e9:c2:26:6d:d2:16:dd:a6:79:13:d5:64:e4:e2:14:
61:a9:db:2a:90:63:51:5a:4b:5f:b9:50:52:5c:7e:
b3:97:ba:a5:d8:24:fb:1b:b7:a0:b1:e8:22:07:2e:
7d:00:45:86:62:1c:58:2b:bf:73:a2:8b:5d:81:07:
38:de:24:5e:43:1f:a0:15:42:14:0d:f7:d6:9a:79:
ec:ba:58:2a:58:47:18:2a:5a:ad:c5:d6:c4:92:b0:
5b:11:f4:88:03:d5:34:7f:fa:1b:14:2f:ab:a6:1a:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:8F:CF:43:5B:62:4C:AB:A2:E8:85:42:41:AB:3A:04:E3:FF:07
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/EC6Pz0NbYkyrouiFQkGrOgTj_wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.246.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c7:bb:50:5a:86:74:9b:43:e2:09:a0:e7:89:29:f0:a5:b5:
86:45:08:f0:8e:26:ad:55:0a:f7:96:58:df:8f:25:5f:eb:78:
a3:b9:d5:91:b1:67:5f:21:e3:69:2d:3c:3c:01:c2:c3:2e:33:
ad:27:e2:3b:76:5a:96:09:86:a9:ec:9c:f7:51:74:fe:f0:27:
e5:bf:5e:be:7a:38:03:27:ef:89:43:0f:2c:69:82:5c:41:97:
e8:44:48:47:35:db:20:09:6c:8f:c7:e1:75:65:97:75:d9:51:
73:a2:66:39:43:c2:f0:2f:13:a2:9b:fa:26:da:90:42:da:23:
d9:45:86:46:c4:b1:4a:de:ac:6c:79:06:ae:6f:8b:59:34:5e:
70:7c:40:f8:a1:01:24:d2:aa:7c:cc:99:ca:15:68:a9:6d:3f:
7d:71:fe:d9:a0:f8:8c:68:81:02:e2:c1:7c:7a:74:84:0d:91:
8d:cf:a8:85:e7:b2:1a:8d:91:23:b5:2b:8b:20:da:59:43:3a:
fa:d5:9f:a4:40:26:61:cf:ba:5a:0d:71:f7:07:4d:3b:50:12:
08:65:c3:03:e2:aa:78:26:c9:48:71:7c:08:b2:07:a8:4f:44:
b1:21:f0:95:42:e9:09:3f:25:49:c9:65:ea:88:70:64:70:20:
0b:fc:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:59 2025 by rpki-client