Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6ttQmEL_wMQHN8iynKoz7RKZqNU.roa
File: 6ttQmEL_wMQHN8iynKoz7RKZqNU.roa (raw, json)
Hash identifier: l2hYPkqKYTe+V5490Xihr7yPPUPm85RNQ8x4P5w7UI4=
Subject key identifier: EA:DB:50:98:42:FF:C0:C4:07:37:C8:B2:9C:AA:33:ED:12:99:A8:D5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0182D173AECC02BAF99817B9C8629BDE0A16
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6ttQmEL_wMQHN8iynKoz7RKZqNU.roa
Signing time: Wed 24 Aug 2022 20:03:15 +0000
ROA not before: Wed 24 Aug 2022 20:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d1:73:ae:cc:02:ba:f9:98:17:b9:c8:62:9b:de:0a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 24 20:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eadb509842ffc0c40737c8b29caa33ed1299a8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:0d:c6:e8:76:0a:14:16:8b:81:74:94:f8:
18:0e:1d:30:a9:7d:b1:e4:97:bc:88:d6:32:83:0b:
16:38:cc:75:10:f4:39:e4:36:05:f7:b4:64:8a:a9:
66:9e:44:d9:ad:e8:23:a2:ea:1a:76:5e:b6:cb:a1:
b2:a2:d0:40:32:c9:ea:ec:2e:da:21:40:5e:1f:21:
8e:98:77:0e:82:13:54:82:76:15:7e:a3:52:24:1f:
55:44:d3:6b:d2:92:c8:d3:c0:c4:ea:a3:09:6c:21:
e8:90:16:32:3c:1b:17:9f:6a:44:b9:a1:92:ae:c4:
b9:d3:c4:85:de:e6:69:fd:9a:6d:d7:25:02:e2:c8:
1e:6c:06:63:d2:65:88:cc:bf:05:cc:55:3c:4e:41:
74:05:36:58:46:2d:75:eb:0e:0c:25:f3:a5:ff:73:
c1:a7:8a:e2:74:6a:84:8c:fd:34:c5:74:4a:c9:b9:
d9:1d:1d:85:16:8e:e1:6a:3d:96:69:2e:dd:9f:57:
55:bb:25:1e:a9:1c:16:18:55:ed:a9:f6:27:2a:5b:
53:b3:ad:12:de:5f:8b:3b:c4:a3:99:6f:4a:f8:f6:
1f:52:6d:b6:48:f6:c7:60:3d:2d:e3:01:75:6d:1a:
ab:48:df:c6:3d:a4:77:2a:4d:48:1b:36:7c:72:83:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DB:50:98:42:FF:C0:C4:07:37:C8:B2:9C:AA:33:ED:12:99:A8:D5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6ttQmEL_wMQHN8iynKoz7RKZqNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/22
94.241.136.0/21
94.241.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:42:2a:2a:6d:93:e3:d3:b0:2d:ab:02:e8:87:9f:be:11:f2:
35:31:85:8e:f9:83:35:dd:09:61:70:c6:a1:41:0a:8b:36:a4:
92:ac:32:5d:27:e4:dc:86:8a:d3:f1:36:93:49:ad:a2:ba:2f:
91:f2:53:9f:c0:16:9f:90:a5:ed:ab:9d:ee:10:95:b5:d9:1b:
69:99:97:68:71:0d:30:94:96:f8:8c:a4:cc:84:83:2a:e3:ec:
2e:a2:44:75:4d:f9:16:c8:f6:58:3f:b8:77:74:90:37:da:04:
66:3e:84:87:70:3f:76:d5:62:06:cf:8f:eb:06:44:99:e4:20:
81:75:dc:1a:a9:d4:ba:06:48:63:4e:8e:c0:47:e8:bd:45:e2:
c7:e5:f9:4e:01:fa:3a:7e:df:19:43:e0:da:75:1f:d7:5d:74:
82:4c:1c:64:4b:07:96:d5:e7:c6:7b:16:11:ab:b5:a4:4a:36:
d7:e8:fa:af:03:b3:90:86:3d:75:7d:05:db:f6:79:42:2c:c0:
79:32:7d:b2:8c:a9:43:4e:97:d4:bb:9e:49:75:bb:ff:3b:8f:
6f:ce:b9:bf:cc:5f:f0:77:77:1f:1f:ec:db:a9:5a:ac:c7:5f:
6a:e7:fa:51:d7:8f:be:b5:30:6f:cf:b1:74:7d:83:96:4b:fe:
d7:d1:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org