Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/6xs-azB-VP50a1D7R2gXanw3uPE.roa
File: 6xs-azB-VP50a1D7R2gXanw3uPE.roa (raw, json)
Hash identifier: a2JVrkJRHLsLydpXlyTCCHudsFw3ShujbyPXlYFvd/0=
Subject key identifier: EB:1B:3E:6B:30:7E:54:FE:74:6B:50:FB:47:68:17:6A:7C:37:B8:F1
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 05100382
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/6xs-azB-VP50a1D7R2gXanw3uPE.roa
Signing time: Sat 01 Jan 2022 05:58:16 +0000
ROA not before: Sat 01 Jan 2022 05:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 212.101.204.0/24 maxlen: 24
212.101.205.0/24 maxlen: 24
212.101.211.0/24 maxlen: 24
212.101.212.0/23 maxlen: 24
212.101.207.0/24 maxlen: 24
212.101.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84935554 (0x5100382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jan 1 05:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb1b3e6b307e54fe746b50fb4768176a7c37b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:8b:8a:01:8f:72:fd:74:c4:4a:83:74:8f:
b7:73:66:54:70:3b:b8:46:34:4a:04:73:c3:9e:00:
97:af:8f:2a:2d:d6:1c:08:fc:49:0c:c1:e2:4d:86:
3d:50:78:37:59:b6:fb:fb:ea:47:de:ac:7d:d5:eb:
23:6d:25:69:bf:39:7a:e8:29:04:e5:b7:af:e5:49:
f1:f8:59:09:f8:23:54:32:bd:43:e7:af:a0:d8:4c:
79:80:9e:03:aa:c3:4f:bc:74:ec:19:4f:ff:be:84:
52:44:cd:8f:f0:21:cc:92:f3:72:6e:1b:65:a8:e0:
f2:89:bd:94:31:8c:a3:d3:0c:3e:fe:4d:03:3d:14:
53:c2:f3:b3:6c:61:5b:a7:63:86:03:4d:ce:a3:4c:
44:a3:fc:f5:eb:ac:da:fe:6c:48:f5:a6:c0:6d:9f:
25:b4:77:ab:69:0a:3e:a5:e0:e4:f7:51:f6:58:ac:
79:41:4b:d4:33:23:f3:83:48:bb:56:b1:7f:9a:9d:
f6:c2:91:65:90:e5:95:d5:b3:87:a8:d2:f1:48:10:
c2:77:25:9e:d1:3e:46:9b:50:71:1d:4e:2e:d7:e1:
a1:92:46:af:71:88:c5:a1:3c:50:4b:b4:19:31:2f:
81:72:f0:fa:53:46:49:7b:35:64:61:2b:5a:bd:c9:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:3E:6B:30:7E:54:FE:74:6B:50:FB:47:68:17:6A:7C:37:B8:F1
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/6xs-azB-VP50a1D7R2gXanw3uPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.204.0/23
212.101.207.0/24
212.101.211.0-212.101.214.255
Signature Algorithm: sha256WithRSAEncryption
95:99:44:e5:28:85:b7:6c:56:59:b3:30:97:1d:3d:83:2b:ef:
d0:14:75:31:9b:99:14:6e:ba:d4:f1:30:de:59:ed:db:fd:21:
f7:ea:8a:f3:43:08:60:70:31:36:77:0e:da:f8:2b:6c:a7:f9:
30:fb:72:72:8a:40:87:c4:ab:af:f2:19:cb:5a:cb:81:ab:75:
06:6f:db:5f:0b:19:f0:cc:42:7a:e3:af:02:8c:c7:44:2b:78:
3e:d3:f8:fc:01:e6:a7:f9:2f:c4:71:b5:a2:ce:6e:a5:76:b2:
e2:4e:eb:3b:78:b2:09:da:9a:5e:b1:84:e0:f4:22:3c:cb:1a:
da:0b:01:06:a1:5a:85:c3:0a:f4:b8:28:e4:8c:5d:ef:52:c1:
63:3d:55:d7:f0:bd:f5:c1:47:d2:18:fd:b4:ad:f4:4c:25:64:
e8:e2:36:9e:59:fc:4a:f1:67:d5:54:cb:41:5c:7f:b7:e0:14:
a2:49:cd:81:17:ea:03:22:cd:32:ab:cc:44:30:6f:d3:6a:3a:
27:c7:0c:5a:ef:e4:7e:cb:cb:87:d3:c7:6c:e0:d5:3b:74:92:
6a:b8:43:a9:09:60:b3:97:02:f0:0c:20:75:4c:8d:e1:2e:e4:
e1:1b:c3:91:3d:54:38:d5:bc:bd:36:7d:6b:89:84:2a:2f:92:
e1:13:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org