Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/6WG6lMArgqAlFGsBMVvsK4I7TZk.roa
File: 6WG6lMArgqAlFGsBMVvsK4I7TZk.roa (raw, json)
Hash identifier: UvtXfbDXB/fZNKdvIDGwbzrPbxXsCmnvBfxQl/GD/Hw=
Subject key identifier: E9:61:BA:94:C0:2B:82:A0:25:14:6B:01:31:5B:EC:2B:82:3B:4D:99
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 08BCFC2D
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/6WG6lMArgqAlFGsBMVvsK4I7TZk.roa
Signing time: Sat 01 Jan 2022 14:05:20 +0000
ROA not before: Sat 01 Jan 2022 14:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 193.38.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146603053 (0x8bcfc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Jan 1 14:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e961ba94c02b82a025146b01315bec2b823b4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:5c:18:46:12:14:1a:ac:8b:bc:3b:75:8d:
c4:95:47:bf:e1:a4:51:59:d7:4c:a6:8c:f1:85:43:
9b:62:b6:6d:2b:25:e7:b5:b9:57:2f:88:24:9d:05:
73:4d:96:bf:39:12:04:cd:a6:d8:92:3a:31:f1:9b:
34:77:e7:c7:ff:ff:60:bd:19:25:5c:2b:a6:64:b8:
54:36:48:f3:5d:af:e6:7c:44:ec:b4:9a:65:1f:3f:
23:d3:11:3a:cb:d4:6b:b9:ca:26:e4:05:b2:de:9c:
c8:28:a7:f9:37:ee:e8:9d:08:4a:a6:e9:8b:8a:9d:
89:02:ec:95:fa:15:c2:11:c5:dc:b1:c9:93:3b:21:
b8:c2:b5:32:52:5d:23:17:a3:a2:84:a4:2d:8c:c9:
e8:3a:7a:7e:0b:0f:0e:7f:ec:08:f2:4c:79:c1:fb:
91:11:55:1d:01:ed:d5:ef:a9:9e:bf:0a:b3:1e:eb:
46:e0:37:79:28:0b:7a:bb:f9:2f:3d:35:8b:b2:f1:
cf:d3:1a:61:64:3b:3d:2d:65:0a:d2:92:8f:9f:32:
74:8b:9c:83:7e:99:6b:5f:4f:73:5d:26:cb:18:78:
0c:97:04:a5:ad:a3:ee:98:1f:d6:af:67:54:5c:35:
c4:51:c5:fa:e8:26:4d:d1:37:57:5b:fa:59:3c:10:
2c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:61:BA:94:C0:2B:82:A0:25:14:6B:01:31:5B:EC:2B:82:3B:4D:99
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/6WG6lMArgqAlFGsBMVvsK4I7TZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:09:d2:2d:ab:51:2f:e5:ca:11:9e:ce:1f:2c:b7:a3:90:81:
01:c4:37:26:61:27:15:c5:12:61:b5:9f:eb:a5:68:f5:34:7f:
fa:41:ac:e4:15:b4:77:e3:ee:7f:a8:e3:33:f8:97:48:9f:d7:
98:e7:53:f0:ff:a7:e0:43:d3:57:87:af:40:e5:51:13:c2:5b:
a0:38:15:b3:0a:e4:25:c8:76:7e:78:87:02:ea:5d:94:d3:c6:
91:a7:0c:27:08:7e:96:d0:48:dc:52:b8:0f:11:32:4f:87:8b:
c8:c5:5f:9f:47:aa:cc:c3:71:ea:cc:e6:42:c0:90:87:1c:c6:
73:a8:e6:aa:11:3c:6e:5e:4d:3d:90:81:23:0c:e9:ff:e3:e8:
86:48:7c:0b:1d:f7:1e:1c:04:09:04:5d:96:5d:8f:21:4e:a0:
bd:44:9b:0d:bb:03:fb:f5:f3:9e:82:0c:74:78:2e:e0:b0:73:
8f:c7:ea:81:0e:11:47:cd:3d:52:4e:09:63:fc:99:f1:dc:a9:
21:3e:d4:d2:f0:e9:11:80:42:f7:fc:7d:b4:33:bc:8e:c4:8a:
a4:38:e7:a9:76:9f:5d:32:e1:7d:48:48:34:32:bd:fb:61:88:
86:2f:7e:de:44:12:48:6a:f8:be:08:d7:76:83:56:f3:da:7f:
a0:41:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:59 2024 by rpki-client on console-ams.rpki-client.org