Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/6WvttmLf4anZbZgtr0RNZmjuz-I.roa
File: 6WvttmLf4anZbZgtr0RNZmjuz-I.roa (raw, json)
Hash identifier: xtAftrhB6VZPOC7osEDvhFcDdWxTAGbPUSGVKKsp04A=
Subject key identifier: E9:6B:ED:B6:62:DF:E1:A9:D9:6D:98:2D:AF:44:4D:66:68:EE:CF:E2
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 0184E8D03DE7B3800E76EE06698939ED82DD
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/6WvttmLf4anZbZgtr0RNZmjuz-I.roa
Signing time: Tue 06 Dec 2022 19:01:12 +0000
ROA not before: Tue 06 Dec 2022 19:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210403
IP address blocks: 185.98.131.0/24 maxlen: 24
78.138.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:d0:3d:e7:b3:80:0e:76:ee:06:69:89:39:ed:82:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: Dec 6 19:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e96bedb662dfe1a9d96d982daf444d6668eecfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:80:81:4b:00:80:8f:14:70:ac:0f:7e:2e:
53:af:36:66:7b:f7:fe:b7:6b:7d:f4:a7:f1:36:77:
35:bb:56:03:95:9f:c6:59:3d:7f:14:dd:35:38:ee:
46:85:8c:b9:cc:cd:41:e2:35:19:5c:47:1a:9e:68:
1d:6b:2b:cc:89:eb:f8:ce:77:8a:09:6c:be:ed:d3:
92:d0:50:2c:45:95:a7:82:87:5c:74:cd:72:34:5d:
80:6d:29:73:66:fc:ab:b7:ef:5d:46:5e:4a:15:05:
15:27:e6:82:79:e7:4e:00:3c:44:d8:15:ae:a2:ff:
d5:0b:ed:22:61:c9:b8:43:dc:91:57:2c:a6:c6:99:
d0:52:a7:33:f8:f0:5c:e1:4d:f5:a6:f8:bf:a6:c8:
88:e9:83:1b:c1:42:ef:b7:4f:26:11:5f:6c:8b:4b:
e3:57:21:25:f0:18:13:26:a6:ca:86:86:13:c3:5a:
d8:77:80:c6:ac:ee:44:5d:ca:f2:5f:77:02:df:6d:
f5:9c:62:bf:e3:1a:69:29:f5:0e:46:57:e8:48:0a:
16:3e:97:8b:53:75:25:7b:da:df:6a:82:8f:3c:fe:
b2:7c:9a:49:d8:7a:16:16:d1:43:5f:e7:46:d3:e7:
05:68:f2:25:05:d0:ed:74:d9:52:51:8e:b9:a9:eb:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:ED:B6:62:DF:E1:A9:D9:6D:98:2D:AF:44:4D:66:68:EE:CF:E2
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/6WvttmLf4anZbZgtr0RNZmjuz-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.45.0/24
185.98.131.0/24
Signature Algorithm: sha256WithRSAEncryption
44:15:4e:b4:17:c1:24:5d:e5:1f:da:d6:dc:a7:f7:63:64:7f:
ae:aa:de:f8:b4:0f:cb:97:b6:8b:7e:0c:09:46:66:86:91:6f:
f7:b2:de:eb:f8:39:7b:33:9b:b9:74:5d:18:72:84:e6:ee:96:
a6:28:1e:b1:dc:9b:14:34:31:53:8e:95:a7:2b:15:ab:6d:a4:
04:ff:4c:7f:8f:e0:ba:23:70:4f:e5:12:3b:30:4d:21:35:20:
77:d2:46:02:14:4c:31:4e:2b:c1:aa:d2:60:0a:1c:48:a1:3f:
c5:1c:92:8a:57:ff:af:a4:c1:20:28:00:90:3f:06:31:69:bb:
2d:bc:9f:c2:74:1e:df:35:cb:f1:54:8a:a1:5b:2b:8c:05:31:
6c:78:c6:ab:77:69:8d:aa:5b:d5:67:8d:0f:7f:77:33:52:bf:
b4:52:2a:cd:26:a5:f3:84:f5:69:5e:42:de:7f:7f:21:62:80:
30:03:55:e0:98:d0:15:e0:c1:1f:5a:d9:8f:0f:39:8c:73:b0:
92:f8:25:36:de:44:44:ec:74:24:2d:0f:5c:3f:a7:31:07:8b:
b9:dc:35:0e:05:93:d5:1a:36:81:33:bc:28:80:00:df:4f:cf:
dd:27:a2:7e:d9:65:34:fb:90:b7:08:54:eb:15:94:50:63:b8:
0b:40:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:41 2024 by rpki-client on console-ams.rpki-client.org