Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ar6YsFTR11V_feyfYKKgD8QRXsI.roa
File: ar6YsFTR11V_feyfYKKgD8QRXsI.roa (raw, json)
Hash identifier: JvijyLkvyis3wYtvZvkNYD2edjKkqKyJbikwxCBMrCc=
Subject key identifier: 6A:BE:98:B0:54:D1:D7:55:7F:7D:EC:9F:60:A2:A0:0F:C4:11:5E:C2
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 083D6C6F
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ar6YsFTR11V_feyfYKKgD8QRXsI.roa
Signing time: Mon 14 Feb 2022 21:24:04 +0000
ROA not before: Mon 14 Feb 2022 21:24:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42898
IP address blocks: 185.73.243.0/24 maxlen: 24
45.141.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138243183 (0x83d6c6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Feb 14 21:24:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6abe98b054d1d7557f7dec9f60a2a00fc4115ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:50:73:07:72:64:17:d2:20:c6:96:e2:c0:
23:8b:c6:34:ae:aa:7e:99:c7:c8:18:b1:c1:3e:c1:
93:ae:07:e0:71:d2:76:b3:f6:40:15:d9:78:40:8d:
fc:c8:4b:32:c9:e5:1b:89:47:ea:90:08:35:04:4a:
ed:51:20:52:c4:45:98:6d:63:95:73:9a:cc:99:70:
aa:10:e9:0e:e2:5f:5e:d4:a1:47:6d:29:b3:55:36:
1f:b3:e1:ce:38:91:d3:f6:35:d8:4c:6a:3f:46:d5:
46:ea:92:b5:cc:8f:a2:2d:4c:23:0b:1e:20:e3:9e:
00:fe:c9:a6:a0:70:9f:98:55:1e:e1:40:6d:19:fb:
ab:14:64:23:b4:c5:1f:b8:92:98:62:51:60:8c:fe:
72:83:2b:d5:cb:6e:17:1f:3d:34:7f:98:24:4c:9c:
1d:16:52:ee:75:bc:6f:cf:09:0e:da:6f:33:05:dd:
90:7a:7f:6b:27:ac:54:a9:26:6d:c0:42:c8:ad:ef:
57:4a:2b:75:02:2f:63:0d:93:e3:92:1a:a9:70:db:
fd:9b:53:68:72:e0:29:e0:7b:63:a8:d6:05:98:c0:
b2:8a:6f:a3:0c:56:9c:9e:5c:fe:e9:df:b2:77:a6:
18:83:b4:70:6a:20:57:a0:9b:66:98:a4:0d:3c:27:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:98:B0:54:D1:D7:55:7F:7D:EC:9F:60:A2:A0:0F:C4:11:5E:C2
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ar6YsFTR11V_feyfYKKgD8QRXsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.54.0/24
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:dd:7a:a1:da:94:5e:45:eb:ec:ba:e6:76:fc:44:c3:98:
d6:13:42:7d:77:5a:97:19:84:3a:56:c2:27:5d:83:9f:b5:c2:
7d:64:8b:25:cb:96:9a:8a:b3:87:ae:40:2a:4a:24:7b:fe:1a:
aa:4e:71:f1:78:b0:71:ba:2b:c1:90:67:d2:63:50:6a:19:de:
a1:53:5f:bb:de:33:56:3b:18:f8:53:ca:cc:1a:0a:df:cc:8a:
2e:cb:78:e1:c6:63:64:f3:1b:c0:65:a5:aa:9c:b6:a9:33:a2:
7f:3f:d0:7a:5f:0b:00:df:61:a2:c8:10:be:65:39:22:76:47:
73:f3:1c:e1:6b:f4:dd:17:43:9a:48:d8:7f:d7:63:e6:ea:d6:
38:89:5d:59:3a:17:49:5a:b8:cb:9a:6a:32:9a:7e:b8:ab:a1:
b6:a8:e4:44:7c:ee:09:cb:d3:d3:0e:9c:ca:6b:a6:f0:6a:64:
f3:7d:28:67:9c:3b:47:a5:0e:93:a1:6f:b8:7d:f5:f8:e7:ad:
26:14:d5:b3:89:f8:7d:87:36:43:ad:a2:c7:c8:1f:ba:a0:4b:
c3:82:94:49:21:88:b1:2c:a9:42:c5:b2:82:25:d9:2d:13:fb:
9b:92:02:34:10:34:70:e6:77:1a:a5:b0:25:d4:3c:09:4b:f4:
6f:6a:e1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:06 2023 by rpki-client on console-fra.rpki-client.org