Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/6f3mo7kVGjjuMDUXK0CjHsh_4gg.roa
File: 6f3mo7kVGjjuMDUXK0CjHsh_4gg.roa (raw, json)
Hash identifier: 0zFkQTZX57MuvBd3wtrmkwGTXZYjOi6LC1vWeR5oQSs=
Subject key identifier: E9:FD:E6:A3:B9:15:1A:38:EE:30:35:17:2B:40:A3:1E:C8:7F:E2:08
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 332D2FC8
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/6f3mo7kVGjjuMDUXK0CjHsh_4gg.roa
Signing time: Sat 01 Jan 2022 03:53:35 +0000
ROA not before: Sat 01 Jan 2022 03:53:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197981
IP address blocks: 176.67.88.0/21 maxlen: 25
185.103.64.0/22 maxlen: 22
2a00:89c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858599368 (0x332d2fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Jan 1 03:53:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9fde6a3b9151a38ee3035172b40a31ec87fe208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:01:3f:39:b2:47:9a:c0:2e:87:a5:d5:4b:
78:71:0e:3a:54:d3:7a:10:69:61:a8:cf:05:9a:dd:
64:1c:72:28:ce:47:a4:95:ee:b5:08:48:c3:24:7c:
fa:62:81:96:29:d0:43:55:62:ea:4b:a9:6a:14:a4:
82:86:2b:56:05:43:42:c3:b0:5e:7b:c8:e5:3e:3e:
f4:8b:f8:f4:33:fa:f7:7b:92:cc:ab:f2:bc:43:19:
1d:f4:ba:9a:55:52:49:ac:f2:0c:6b:78:80:36:de:
e1:e7:00:e6:19:b7:e8:fa:80:bd:f0:2d:65:c3:0a:
3c:05:c0:ea:ed:58:7e:09:e5:e2:90:05:a2:1c:0c:
34:4e:9a:fa:47:dd:ed:71:32:8a:ee:c8:eb:43:da:
bd:04:8a:17:d0:95:8b:30:db:8c:24:e3:79:26:6a:
ba:f0:f5:7e:aa:4d:c4:9a:65:fc:77:da:0f:42:a7:
29:45:44:43:80:f5:b9:d0:91:09:cb:27:0d:6f:80:
d5:73:80:f3:34:23:39:6a:e2:5b:c0:cf:6a:3d:39:
62:42:20:45:fb:01:59:2c:8f:7b:83:3a:ad:d2:4a:
f0:23:1c:ae:80:0c:4c:8f:d6:3b:13:d6:8c:27:b5:
60:41:19:82:cc:c6:b5:72:0f:0a:35:16:d1:0a:48:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:E6:A3:B9:15:1A:38:EE:30:35:17:2B:40:A3:1E:C8:7F:E2:08
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/6f3mo7kVGjjuMDUXK0CjHsh_4gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.88.0/21
185.103.64.0/22
IPv6:
2a00:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:65:ab:1d:dd:8f:da:74:9e:97:86:b4:c7:7d:7f:ce:03:79:
e9:b1:ee:ab:70:4d:58:c0:0f:f2:17:98:65:d4:24:b2:ce:3b:
33:ee:5f:41:82:1a:ff:6a:8a:87:64:ef:fd:58:ae:1c:f7:bd:
35:fc:8a:b2:1e:92:81:0a:d1:ad:f5:91:e9:df:ff:2d:36:9b:
ba:be:9e:20:e5:80:ab:a8:5f:e3:f8:36:64:66:27:ff:4d:bf:
0d:4f:b3:17:dd:97:eb:cf:a5:29:2d:19:0a:44:6e:b0:51:11:
24:e8:f2:17:16:75:95:ef:b9:a8:f0:e6:3d:09:c0:18:72:e3:
97:8f:19:79:a9:f7:5c:b7:48:e6:43:43:3e:02:52:6e:0e:46:
8a:38:7d:05:84:a9:5e:50:4b:33:1f:02:90:9e:c5:5b:6f:1d:
fe:f7:f2:3b:1e:d6:2f:96:2d:c5:26:f5:ba:08:4e:c7:3f:3a:
20:05:32:12:9d:1e:7e:77:e3:8c:65:63:b6:c9:4e:83:21:e6:
67:07:29:9f:eb:51:c9:b7:00:dc:84:ba:69:8f:97:de:a0:27:
e0:3d:cd:77:8e:83:cf:35:28:43:d7:18:bb:b6:1d:c7:c0:4d:
4b:a7:3a:f9:6a:e6:12:20:d6:76:b1:61:1b:c2:f8:e6:b2:b1:
c0:15:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:44 2024 by rpki-client on console-ams.rpki-client.org