Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/6kfieIgxyWsLJadTiqVSZuG70Wk.roa
File: 6kfieIgxyWsLJadTiqVSZuG70Wk.roa (raw, json)
Hash identifier: 6JN8tQEq5TC9kMU8xySa+IM7MFrguPOGPqhyuRXTTn8=
Subject key identifier: EA:47:E2:78:88:31:C9:6B:0B:25:A7:53:8A:A5:52:66:E1:BB:D1:69
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 13B532F5
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/6kfieIgxyWsLJadTiqVSZuG70Wk.roa
Signing time: Mon 04 Apr 2022 06:31:18 +0000
ROA not before: Mon 04 Apr 2022 06:31:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60620
IP address blocks: 185.14.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330642165 (0x13b532f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Apr 4 06:31:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea47e2788831c96b0b25a7538aa55266e1bbd169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:0b:b1:65:87:7d:8d:e9:e3:0f:24:2a:ee:
a1:4f:eb:12:8d:b0:eb:50:bc:9c:5e:2d:7d:fe:3b:
b9:08:32:16:41:0f:f5:d3:1e:e6:95:9a:83:19:c7:
42:27:a9:27:13:b4:84:69:ef:2c:9a:77:40:f1:8e:
29:e4:21:18:3e:93:2f:83:83:3b:55:52:89:78:3b:
ab:2b:db:a0:ca:78:e6:b8:a8:f7:65:9e:41:2e:b5:
6e:88:79:57:bc:e8:99:02:23:7b:72:fa:5a:84:e3:
e1:85:6d:7a:38:b4:b4:c9:07:66:69:26:7f:44:d1:
27:1b:ae:18:88:c9:f0:32:98:6d:8b:46:59:fe:2e:
29:2b:ab:89:97:1e:a1:0a:a3:41:e1:5a:f7:a7:ad:
d2:a8:c7:86:3c:01:04:d1:68:e9:51:6b:61:5c:ad:
53:7c:96:f6:9f:02:3f:a5:35:82:e0:48:0c:ed:d1:
a3:da:88:d6:73:ba:d6:a5:98:87:34:20:87:b4:9f:
17:a8:03:57:a0:33:45:12:b4:7b:da:62:23:82:13:
e5:fa:21:e0:83:6e:8f:98:d7:ab:f3:fb:ea:fd:5f:
7c:d2:a3:c9:c2:4e:d2:1e:7c:be:e5:08:18:86:68:
30:1c:9c:f9:db:d8:a5:07:6c:f7:d4:35:44:16:b4:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:E2:78:88:31:C9:6B:0B:25:A7:53:8A:A5:52:66:E1:BB:D1:69
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/6kfieIgxyWsLJadTiqVSZuG70Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:34:cc:0f:fa:db:12:c5:d7:d9:bd:8f:43:f7:43:6b:32:c7:
f1:fb:b7:46:71:27:fb:d7:20:a0:9e:61:9a:80:e5:27:3b:7f:
2e:e7:27:41:e3:86:14:89:9d:cf:cb:e1:d8:33:53:e4:c8:67:
ce:4d:96:a1:71:19:5c:b0:b9:be:67:59:94:68:17:06:88:bf:
b4:55:75:3d:40:32:d1:37:80:8e:c5:b6:a3:94:44:76:f4:83:
46:2d:d6:97:bd:3c:2c:d4:28:c0:41:69:08:cb:fb:4f:db:1b:
79:57:ec:39:c3:06:33:fb:19:c4:b1:1d:9e:92:29:8a:01:e2:
bc:77:02:66:40:2b:37:66:8a:98:a6:f2:39:20:0b:d6:20:3e:
94:ac:46:28:18:d4:dd:f2:e7:48:fa:12:3e:c0:72:30:89:b5:
90:49:72:ed:7c:04:c0:62:4b:31:2a:c8:f4:d0:c6:d0:78:0c:
53:a7:30:ef:f0:b6:9e:66:e0:1f:1a:45:28:21:89:57:ae:80:
68:ab:dc:d8:6a:1f:16:2e:aa:f5:69:d4:60:38:2f:d3:5a:18:
99:fc:00:21:10:1a:6d:f0:ff:88:f6:e7:d3:1b:cb:fa:68:27:
e0:47:82:09:a5:8c:0a:82:a7:9b:f3:f6:48:d9:db:2f:33:92:
df:4e:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org