Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6il7IpfZKeGRWNT87Aa6ORLz-kI.roa
File: 6il7IpfZKeGRWNT87Aa6ORLz-kI.roa (raw, json)
Hash identifier: GGFtioy6/C2AanZschpdA+Zye2uQ6YsWX7bolpI3J9w=
Subject key identifier: EA:29:7B:22:97:D9:29:E1:91:58:D4:FC:EC:06:BA:39:12:F3:FA:42
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01839979A001B8BF9750BCA5BC4FBF2984E7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6il7IpfZKeGRWNT87Aa6ORLz-kI.roa
Signing time: Sun 02 Oct 2022 16:13:48 +0000
ROA not before: Sun 02 Oct 2022 16:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.33.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:99:79:a0:01:b8:bf:97:50:bc:a5:bc:4f:bf:29:84:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 2 16:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea297b2297d929e19158d4fcec06ba3912f3fa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:bb:b3:bf:f3:a5:2e:7c:8e:ef:88:12:f4:
22:86:4b:dd:c6:90:49:cd:eb:36:bd:24:5a:75:2c:
35:09:e4:d6:2a:c5:ab:c7:dd:c7:f2:1a:ec:4b:da:
fd:15:95:67:fc:a0:29:98:80:9d:0e:f7:79:c8:54:
e7:1e:48:53:dc:39:aa:e9:51:48:c6:ce:36:5d:70:
ac:27:c0:6b:b4:03:5a:0c:1f:3d:4f:d1:f5:3a:b1:
5e:5d:e1:64:ff:76:14:92:3b:d9:62:0e:a3:b4:88:
53:91:5b:3e:93:8d:fd:db:42:ce:be:90:cb:d5:f8:
ae:97:ba:82:0f:c4:b2:fc:0a:07:c9:c1:a8:ad:e5:
2a:0a:ef:9d:95:32:05:72:43:58:32:5a:1d:75:70:
c5:62:19:80:35:2d:ce:ba:7b:f5:81:2b:d3:f6:0d:
bc:38:47:9b:00:92:2f:5b:77:46:18:87:50:5a:a4:
7e:e8:95:73:dd:da:f6:69:b9:22:da:32:b0:83:4e:
36:ed:d6:af:e1:5d:70:ca:90:e2:dd:29:4d:b1:f0:
dc:ca:b8:df:51:3c:00:e0:bf:6c:fc:e0:cc:4e:59:
6a:da:53:4e:ca:ed:11:f7:93:56:26:be:96:96:ae:
41:01:94:53:1d:cc:0c:b3:50:16:e4:4a:dc:07:0f:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:7B:22:97:D9:29:E1:91:58:D4:FC:EC:06:BA:39:12:F3:FA:42
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/6il7IpfZKeGRWNT87Aa6ORLz-kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.36.0/24
Signature Algorithm: sha256WithRSAEncryption
67:dc:f1:fa:3f:6b:07:66:25:f1:0d:de:3b:ee:25:70:0a:3d:
7c:b5:c3:7a:20:09:ff:7f:d2:2d:19:43:3c:b9:3d:a0:b9:68:
b8:f2:db:b0:74:8d:b5:5c:96:0f:7d:cf:fa:d1:6e:90:88:8c:
5e:c1:18:dc:4a:50:bf:55:b2:ec:29:e4:79:29:ac:f7:fe:10:
26:9d:8c:d3:96:d9:5f:13:5d:a5:b4:4f:79:b6:d7:8a:45:93:
8b:c9:41:07:cc:63:52:6e:a2:3f:e8:49:87:41:46:40:a4:4a:
ff:5c:1e:71:60:4a:e9:83:fa:13:e9:d9:c5:7c:89:f0:02:59:
92:ec:c1:54:fe:7b:43:7b:71:f2:ec:e0:39:38:cd:09:40:41:
b1:43:1c:ef:ff:b3:3e:2f:f2:c6:00:f0:20:96:28:42:a6:f1:
dd:71:d6:1f:ca:8b:17:c8:f3:55:ec:53:18:66:03:7f:96:7c:
f8:9b:68:8f:e3:03:79:cd:fd:db:c6:ec:46:80:14:20:2c:69:
92:6f:a3:92:d9:26:a5:ec:df:57:a3:5f:3f:af:47:ad:9c:64:
e0:47:89:dc:f6:50:76:fb:1a:33:ff:46:2b:82:5c:1a:ca:c5:
44:ed:09:05:58:92:2f:13:89:64:8e:da:a9:73:f9:a9:f5:1c:
32:a8:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org