Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/6OnVlmKtWP86ywnew35g2UMhKGQ.roa
File: 6OnVlmKtWP86ywnew35g2UMhKGQ.roa (raw, json)
Hash identifier: 3X/rtCNwP9zegeyjcm18vYnSHi8m4po0PYi+7RKLSEA=
Subject key identifier: E8:E9:D5:96:62:AD:58:FF:3A:CB:09:DE:C3:7E:60:D9:43:21:28:64
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 1366809D
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/6OnVlmKtWP86ywnew35g2UMhKGQ.roa
Signing time: Sat 01 Jan 2022 05:58:21 +0000
ROA not before: Sat 01 Jan 2022 05:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22005
IP address blocks: 84.207.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325484701 (0x1366809d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8e9d59662ad58ff3acb09dec37e60d943212864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:25:a7:37:e6:29:a3:a4:71:97:b9:10:f4:
24:13:e5:af:36:bd:0f:c0:5a:3d:49:d9:3d:82:74:
c7:3a:1b:47:14:32:b0:5c:8b:11:24:7d:8a:02:8e:
11:56:20:2e:e6:73:ef:5c:37:a6:ce:a4:27:e5:bd:
80:6a:d5:0d:02:52:74:22:82:52:27:a3:2a:1a:2c:
72:fd:7a:b3:ee:46:3a:78:28:2f:76:56:84:74:0a:
5f:d2:9c:7c:ce:c2:ad:b2:81:63:dd:7b:43:ca:34:
dd:61:88:60:fa:c2:93:d5:79:ac:80:cf:2f:86:4d:
67:f2:5d:fe:79:8e:db:ca:cf:a9:16:b0:48:0e:17:
df:4f:b3:60:6b:1c:87:99:da:b6:e1:8e:9e:6b:37:
b3:66:d7:fd:0b:bd:47:62:de:73:09:11:f6:49:0f:
03:ab:9f:51:1f:01:5e:81:70:a5:b0:c4:d5:4a:d3:
5e:21:40:54:c3:a8:a7:ea:b2:22:a9:aa:25:7d:07:
f3:c3:c1:3b:40:3c:f9:d2:59:32:78:f3:7f:9a:b2:
0f:2c:4f:34:e4:a0:b8:6b:1f:68:01:90:c5:d5:a4:
64:49:26:e6:a2:9b:ca:fd:c3:07:4a:c8:bc:8e:95:
1f:ee:a0:05:e9:4d:14:95:af:e2:84:c9:dc:29:40:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:D5:96:62:AD:58:FF:3A:CB:09:DE:C3:7E:60:D9:43:21:28:64
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/6OnVlmKtWP86ywnew35g2UMhKGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.207.217.0/24
Signature Algorithm: sha256WithRSAEncryption
19:90:af:ef:da:26:a4:7d:f7:a1:65:4a:4f:64:cb:7f:19:5e:
c8:cb:69:45:6c:42:22:02:c7:c3:fb:18:7e:13:6d:28:c0:36:
39:d2:18:ba:e5:ce:4a:34:da:2f:0f:07:f9:56:ef:d1:fe:75:
0e:4d:e7:6b:6d:8e:05:06:86:13:72:5b:fb:1b:f7:fe:e1:eb:
42:cd:85:54:28:19:ac:f9:7e:f7:68:5c:38:4c:65:22:9b:cf:
57:b2:2f:02:93:8a:5a:54:24:94:f4:18:1c:29:5e:3b:52:f7:
2b:b8:77:5c:9d:72:c1:e6:68:14:ce:3c:29:a3:6e:a0:4c:ab:
de:c7:c8:a5:3a:f4:b8:ac:b6:08:0f:f8:b9:8f:91:eb:82:e2:
6b:1c:6d:a6:2b:2d:a9:0d:b3:e1:04:c2:4f:83:e0:2c:b5:a7:
2b:e0:8f:dc:71:67:9b:e8:56:84:e1:52:cf:57:9a:82:6f:36:
97:6d:a5:97:d0:fd:34:b6:1a:0b:a1:1b:a2:7f:35:b1:ab:0f:
ac:d5:ea:b2:d1:e2:24:42:ca:0b:2c:5d:c3:90:0a:4f:18:1b:
7f:9e:86:bd:6c:39:4c:a7:cc:26:83:c4:d2:00:39:4a:d0:0f:
a9:21:5b:7c:7c:71:f3:1e:59:20:dc:61:57:15:76:e0:60:22:
de:d6:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org