Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/6M0vd05yLcU17wVvMMYh3zWV1Ig.roa
File: 6M0vd05yLcU17wVvMMYh3zWV1Ig.roa (raw, json)
Hash identifier: DDo4jHFDbaoEUCkyRWQaSs0Ly9gE+VkY3JzgS0gNO7Y=
Subject key identifier: E8:CD:2F:77:4E:72:2D:C5:35:EF:05:6F:30:C6:21:DF:35:95:D4:88
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 072F230E
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/6M0vd05yLcU17wVvMMYh3zWV1Ig.roa
Signing time: Sat 01 Jan 2022 15:04:58 +0000
ROA not before: Sat 01 Jan 2022 15:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39591
IP address blocks: 185.98.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120529678 (0x72f230e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Jan 1 15:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8cd2f774e722dc535ef056f30c621df3595d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:82:4b:af:14:67:40:e2:08:0b:ad:1b:77:
02:1b:41:73:d0:c0:d0:80:d0:96:1d:95:73:32:6e:
f1:54:95:49:35:f8:79:32:e8:4c:90:21:8d:a2:c2:
45:8b:10:51:2e:dd:46:66:8a:4a:67:ee:cf:67:a8:
ec:56:f9:5f:3f:14:53:34:82:22:7b:d0:f4:01:86:
e3:02:8e:da:d4:91:6c:1b:8e:e9:c9:a3:c6:81:75:
51:15:8b:a3:23:69:12:72:1e:ad:93:69:97:93:31:
71:56:fa:70:a9:21:5a:a7:93:75:99:15:36:f7:c7:
8c:da:15:fb:41:b9:e9:4a:38:bd:7f:96:60:54:c0:
b3:83:de:a1:75:14:5b:6e:47:77:f7:b3:80:71:ef:
4e:e3:65:1c:44:32:08:a5:c8:81:3f:b6:5b:b6:2e:
03:df:9f:4b:75:34:08:28:58:d8:96:db:e9:6d:59:
79:bb:67:da:f1:e1:14:25:13:45:d9:60:97:cd:de:
2a:7e:20:63:de:08:fe:3b:b4:db:40:b8:7f:ce:91:
a2:12:9f:17:78:99:59:a6:f6:8c:9f:cd:e6:28:39:
bc:18:be:2b:76:f9:c0:21:b2:34:00:68:3e:23:74:
9b:ea:0a:27:9f:01:cd:db:1d:c4:37:3b:d4:a7:4d:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:2F:77:4E:72:2D:C5:35:EF:05:6F:30:C6:21:DF:35:95:D4:88
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/6M0vd05yLcU17wVvMMYh3zWV1Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:aa:93:25:2a:8b:23:d9:11:d0:b9:6b:50:96:17:b6:2a:c7:
e2:4b:c4:82:39:b0:70:7a:ba:7a:c6:47:24:d4:32:e9:15:18:
7b:27:b1:7c:af:51:4b:0a:68:d8:1f:4c:67:57:ce:df:c9:25:
c3:3c:41:86:57:cf:b0:81:34:07:2f:6e:92:23:bf:d4:cc:f2:
c4:28:4a:aa:bd:4d:d6:34:f7:2a:fe:2c:eb:67:96:10:dc:4e:
07:0d:14:bc:40:6f:e0:39:43:14:b9:f8:59:0b:2f:a0:c8:92:
dc:68:9a:65:f4:69:1e:ec:7e:78:41:51:17:eb:2a:d0:26:36:
50:75:ac:1e:9e:b8:37:d5:af:82:10:50:a6:8c:82:3e:cf:a1:
b8:20:d6:d6:5f:b0:ce:0c:8f:78:70:af:a5:81:ff:c3:d8:00:
e1:89:85:37:d8:11:92:bc:1a:e9:d2:4b:b1:f2:a9:74:0b:5b:
63:64:3c:62:2e:c9:ec:ce:c9:37:21:80:8a:63:91:2e:b4:67:
39:0f:6d:4a:f7:49:04:12:68:d2:b5:c7:5a:1b:27:c5:09:1d:
31:3d:2c:a8:29:d3:ed:53:1f:7b:fe:53:d7:2e:6b:8a:42:79:
e0:76:cf:4d:01:af:1a:1c:5c:16:24:ca:5a:7e:4a:e0:f0:94:
41:86:38:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:56 2023 by rpki-client on console-fra.rpki-client.org