Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/d_Blv94rfFaK4LNO1rgvkGJf8fg.roa
File: d_Blv94rfFaK4LNO1rgvkGJf8fg.roa (raw, json)
Hash identifier: 6D+3Hd1Tp2xmyNSk6z40cewjb5wB9aTjlqJzMNNmHQU=
Subject key identifier: 77:F0:65:BF:DE:2B:7C:56:8A:E0:B3:4E:D6:B8:2F:90:62:5F:F1:F8
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 38512BC1
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/d_Blv94rfFaK4LNO1rgvkGJf8fg.roa
Signing time: Sat 01 Jan 2022 16:10:55 +0000
ROA not before: Sat 01 Jan 2022 16:10:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200070
IP address blocks: 193.29.206.0/24 maxlen: 24
194.0.14.0/24 maxlen: 24
2001:678:11::/48 maxlen: 48
2001:678:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944843713 (0x38512bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jan 1 16:10:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77f065bfde2b7c568ae0b34ed6b82f90625ff1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:6d:fb:a6:38:b2:07:0d:ad:2d:c7:91:80:
11:ee:1b:a4:97:82:40:3f:32:b1:8d:5d:92:fa:6a:
1e:58:d2:9a:3f:76:c7:80:0c:92:55:5d:60:f7:4b:
de:fc:71:5d:4d:77:01:3c:c4:e3:ec:a3:2d:d1:c0:
22:b1:a1:60:be:43:8d:06:af:ed:8b:a7:8f:35:ac:
83:a5:8a:16:ca:c5:c0:31:12:e6:7f:da:60:e4:07:
e7:f0:1a:73:fd:5d:ba:7e:4a:7a:16:f0:fe:fe:67:
00:02:a4:e5:23:d5:71:ca:8e:99:30:e6:fd:ed:a3:
cc:c1:5f:7e:ba:5b:7f:a2:c0:d3:4c:06:7a:cd:2c:
42:3a:20:07:f2:e3:4d:cd:41:cf:b7:cb:a7:48:23:
2e:77:ac:e8:79:9c:3b:b2:cd:4f:c2:09:ca:6b:c4:
ee:ae:63:46:dd:78:d9:ad:33:a9:b4:8b:40:af:9c:
7e:b7:4b:d5:ca:66:d6:82:5c:28:ad:b3:84:1b:9a:
d4:21:2f:1a:43:d8:d8:53:d0:1b:71:00:c7:b0:55:
33:2f:97:d8:85:40:36:ab:ab:45:6c:55:f8:cd:7d:
d4:bd:13:64:1f:a4:2d:6f:0a:83:6f:e9:4e:5c:85:
2b:f9:a2:8a:a4:61:75:8d:a0:da:10:d1:69:6e:07:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:65:BF:DE:2B:7C:56:8A:E0:B3:4E:D6:B8:2F:90:62:5F:F1:F8
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/d_Blv94rfFaK4LNO1rgvkGJf8fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.206.0/24
194.0.14.0/24
IPv6:
2001:678:1::/48
2001:678:11::/48
Signature Algorithm: sha256WithRSAEncryption
46:34:a2:84:2f:f9:a4:bb:22:cc:67:85:ae:f1:bd:ba:7b:2d:
01:c7:05:52:01:d1:ca:92:95:06:79:55:6e:dc:1e:e6:7a:ed:
63:57:ed:fc:da:7e:9c:7c:75:0f:1a:5d:3c:33:1c:ec:74:45:
18:7c:2b:26:b9:d3:30:7f:f2:f3:d6:0e:f4:58:d9:b2:84:b2:
bd:1b:5b:09:ee:b7:99:e8:20:58:86:e4:20:90:88:d2:3f:41:
72:df:ad:f4:b1:8e:2a:fa:c0:ed:0e:fc:f8:3a:01:e3:f8:f5:
dc:e8:11:a0:dc:4b:38:ed:f9:9f:67:d9:67:0d:68:fc:5c:74:
dc:c2:ae:7e:06:e6:a4:1e:5e:c8:b4:a4:e7:07:3c:3f:ee:83:
ff:bf:80:b9:63:a2:fc:b5:66:7e:bc:02:76:6a:97:da:44:4c:
25:eb:00:d4:5a:4d:cb:40:34:62:4d:ef:0d:fb:4a:9b:d9:52:
49:8f:21:d5:5f:87:ca:dc:1a:35:a4:15:3b:7f:40:4c:e1:17:
26:38:68:0b:dd:4e:68:ce:49:15:8c:fb:c1:4b:39:6c:e6:2a:
0c:ad:ce:8a:da:64:47:24:c9:c0:92:ae:05:18:5e:b8:02:02:
2d:f4:b3:78:f0:94:2a:fb:b8:b2:5c:d5:09:33:85:df:b7:a1:
28:6a:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:54 2024 by rpki-client on console-ams.rpki-client.org