Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cx6aZVVmCag4k8vdmKJ6-zGc3oQ.roa
File: Cx6aZVVmCag4k8vdmKJ6-zGc3oQ.roa (raw, json)
Hash identifier: d0QQqQ3dGC7c7snwAvGq4n+Xeftt4/Nll6uZDZvpLZA=
Subject key identifier: 0B:1E:9A:65:55:66:09:A8:38:93:CB:DD:98:A2:7A:FB:31:9C:DE:84
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01837D8FEFBE209A871DF861B3ED7540D17F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cx6aZVVmCag4k8vdmKJ6-zGc3oQ.roa
Signing time: Tue 27 Sep 2022 06:08:48 +0000
ROA not before: Tue 27 Sep 2022 06:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60643
IP address blocks: 86.110.104.0/24 maxlen: 24
80.250.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:8f:ef:be:20:9a:87:1d:f8:61:b3:ed:75:40:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Sep 27 06:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b1e9a65556609a83893cbdd98a27afb319cde84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:68:a4:f6:9d:9e:9e:a7:9e:8d:ca:60:24:
d2:b1:85:b0:eb:e4:4c:4e:27:2c:82:f7:35:a4:ac:
3e:f6:16:2f:4d:33:bb:a6:c3:2d:51:55:95:4e:e9:
50:36:af:8a:26:4a:13:95:74:62:b7:a4:b7:80:ca:
67:db:85:59:21:de:a6:a6:53:d2:dd:db:0c:0a:41:
ee:71:36:e3:9c:73:c8:7b:4b:7b:85:e3:99:de:ea:
1c:a2:53:d4:1e:e8:36:b7:f6:ad:5f:0c:77:9a:68:
91:3d:a3:8f:ba:96:69:03:49:bd:e5:7e:b9:ce:aa:
1d:85:a6:0b:2f:da:bf:ed:86:7b:92:15:20:62:53:
fd:79:de:6c:5d:01:da:78:78:74:15:bf:e6:61:cf:
1d:ee:9a:99:c0:85:bc:94:70:a6:57:48:de:8e:c8:
3a:87:b4:3e:5a:1a:c9:b5:ef:81:02:0e:79:d8:35:
23:3b:39:52:41:77:c7:55:81:5e:34:c3:cc:64:d5:
be:50:ae:93:60:74:35:02:23:c3:09:e2:1d:9a:fd:
53:cb:c6:7b:f2:3d:81:df:fc:ea:c2:16:8d:3f:31:
e3:4a:b9:9a:2b:ff:84:a7:5b:41:61:ea:6c:80:10:
9c:da:5f:57:74:a9:95:0c:63:88:bd:a4:0e:83:33:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1E:9A:65:55:66:09:A8:38:93:CB:DD:98:A2:7A:FB:31:9C:DE:84
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Cx6aZVVmCag4k8vdmKJ6-zGc3oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.167.0/24
86.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
54:fb:86:da:a2:c5:98:3f:17:02:ba:c3:9b:94:6e:f0:8d:61:
f0:86:d1:c2:f1:50:ed:28:be:90:18:79:c3:0a:cd:b9:0a:72:
ea:36:0b:d7:b2:c6:2e:4c:0c:36:8d:77:5e:fc:99:a2:20:b7:
b2:e2:59:e9:ce:b8:53:82:50:c5:00:b8:bd:20:04:8b:93:f8:
e4:2a:4d:c1:8c:c4:cc:44:f0:97:b7:23:b6:2e:dd:60:37:9e:
50:02:e6:46:9f:c9:3b:98:9a:c1:91:50:14:f9:b8:7b:bb:ae:
17:ee:f0:cc:22:9f:aa:97:70:08:cb:7e:5a:d1:8d:a7:46:99:
10:27:42:fe:a7:60:df:3a:f8:fb:87:ac:cf:2c:5f:4c:32:58:
0e:ed:4c:33:da:bc:b4:bb:06:5e:71:1b:4a:5e:55:8e:2a:57:
ea:e4:20:d2:0d:fc:c9:9d:3d:3d:62:99:20:d3:9f:38:07:62:
1e:36:5e:f4:e7:77:b4:66:88:70:65:5a:27:1d:ed:09:b5:df:
f2:54:ba:9e:0b:fc:c5:06:51:3f:84:40:0a:bc:39:37:fa:a2:
66:95:b8:01:88:74:9a:c3:b9:17:49:c2:20:08:b8:00:a9:8d:
68:03:95:95:f7:1b:86:a1:7f:8a:01:11:9a:e6:64:8a:cc:73:
2f:27:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org