Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/H6fMJsZ3BOblS-CLyBZf1_GQlpQ.roa
File: H6fMJsZ3BOblS-CLyBZf1_GQlpQ.roa (raw, json)
Hash identifier: 6/Juy7QbMcUyqrwFMV4ztD+bZ1V8LIV8nvwrniqpXws=
Subject key identifier: 1F:A7:CC:26:C6:77:04:E6:E5:4B:E0:8B:C8:16:5F:D7:F1:90:96:94
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0183A91C8F5AE450B238BD63087396C3BC6C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/H6fMJsZ3BOblS-CLyBZf1_GQlpQ.roa
Signing time: Wed 05 Oct 2022 17:06:04 +0000
ROA not before: Wed 05 Oct 2022 17:06:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/24 maxlen: 24
81.28.254.0/23 maxlen: 24
95.214.178.0/23 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:1c:8f:5a:e4:50:b2:38:bd:63:08:73:96:c3:bc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 5 17:06:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fa7cc26c67704e6e54be08bc8165fd7f1909694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:b5:60:64:ab:c3:76:57:ff:5c:98:58:9e:
3e:d5:ad:3f:88:e3:3e:82:02:ac:58:9a:e8:8b:02:
d1:8c:b9:e2:51:b6:3d:6a:ad:50:10:ce:e5:73:e9:
70:70:4d:52:0c:dd:9d:86:03:54:d7:2b:b0:f3:83:
d8:7d:92:c6:58:0f:8c:4e:9d:10:b5:fe:99:bf:6f:
b1:5b:42:cd:8e:70:07:d2:fe:73:ab:51:f5:90:b5:
66:a4:a7:e5:ce:f5:66:4a:2c:3e:68:b1:da:cc:59:
d6:26:44:83:eb:30:0d:2f:06:36:3e:53:f4:92:c2:
97:1e:35:a5:7c:4c:6f:4a:9e:9a:31:16:c7:d0:98:
72:05:3a:8c:65:0a:5a:c4:d3:23:ff:72:f0:ab:b7:
5f:03:92:2d:ef:a5:70:25:21:46:86:40:85:f2:02:
27:ce:f8:04:84:dd:b1:98:da:16:72:89:b4:c3:92:
b7:ee:0e:87:fe:50:2e:23:d9:92:96:0c:f6:3e:69:
09:e1:ce:7d:c6:5c:c0:4f:1e:48:74:2c:8c:bc:46:
cb:65:10:20:7c:cc:1c:4c:66:c2:10:c4:95:06:74:
e4:b6:28:2a:f5:f3:4d:d5:ca:74:dc:19:46:9b:c9:
ee:35:da:49:fe:c7:a1:be:6a:1c:45:1f:1a:14:dc:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:CC:26:C6:77:04:E6:E5:4B:E0:8B:C8:16:5F:D7:F1:90:96:94
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/H6fMJsZ3BOblS-CLyBZf1_GQlpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
81.28.254.0/23
95.214.178.0/23
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a5:70:dd:bb:dd:78:b4:8d:1f:f4:0f:28:d2:4e:f9:a0:01:
5b:53:a4:c3:3c:56:3a:1d:4c:5c:1f:5c:a2:0b:c5:69:bd:51:
9b:b5:62:07:43:8a:b9:0e:3d:69:b0:55:7f:23:6d:8b:6f:4d:
92:c3:35:17:1e:87:e4:c9:87:ef:f1:1c:f1:72:0f:5c:67:c4:
5d:8a:a0:af:70:9a:95:4a:da:87:23:a2:14:c3:c2:54:88:9e:
bf:a4:ec:ac:e4:c2:e1:7c:97:57:ea:80:54:fa:c4:e3:6e:b6:
46:6b:83:6a:10:d2:28:ae:66:b9:5a:f2:45:1d:da:a6:b6:62:
a2:59:d8:ba:b6:9a:18:94:7b:94:fb:24:cc:a5:2d:39:2e:24:
d7:ba:12:c5:b8:bd:81:bb:67:9e:86:58:33:ce:61:91:7d:57:
e5:e3:e6:81:ee:79:c4:a8:a4:e4:73:c5:90:9a:ae:48:fe:e2:
5a:0b:02:e0:85:53:9e:9b:ec:e0:4c:5c:fe:30:12:ed:5a:61:
a3:76:0d:87:d3:7d:79:f1:23:15:61:80:31:95:53:d2:4b:c7:
90:94:47:78:d3:64:0f:29:61:6b:da:b0:49:3d:ba:cd:53:e3:
66:22:44:37:6c:cb:68:82:ad:31:0b:b5:ed:7f:6c:b4:a2:ee:
1c:f0:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org