Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/M6xyiAPxeXjMfHR1SLJECj-RjTo.roa
File: M6xyiAPxeXjMfHR1SLJECj-RjTo.roa (raw, json)
Hash identifier: F5+/OUmi0dwholCLyZDJbDK4p0Ge9/bxoOjWY0eZ4U8=
Subject key identifier: 33:AC:72:88:03:F1:79:78:CC:7C:74:75:48:B2:44:0A:3F:91:8D:3A
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 0A5D6D2E
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/M6xyiAPxeXjMfHR1SLJECj-RjTo.roa
Signing time: Tue 24 May 2022 13:58:13 +0000
ROA not before: Tue 24 May 2022 13:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 193.160.155.0/24 maxlen: 24
193.160.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173894958 (0xa5d6d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: May 24 13:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33ac728803f17978cc7c747548b2440a3f918d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:d6:22:95:83:b6:e4:12:7b:f2:a8:94:ef:
25:32:c2:41:a9:e6:59:94:2e:45:e3:d4:0d:97:a7:
c0:c7:91:4a:24:0f:f1:d7:5b:dd:39:74:84:fc:37:
6e:1d:db:83:22:05:87:81:d7:6f:b8:77:df:43:8e:
d3:7a:74:12:70:7f:17:22:42:d9:cf:ea:2e:8f:cd:
b6:eb:95:1c:b9:10:b9:22:ff:df:10:8a:cc:da:43:
4d:08:16:7a:39:cd:72:69:dc:8f:b4:01:f9:f4:06:
0a:56:97:39:b2:56:34:8e:56:a9:29:5e:d0:ac:ea:
61:22:c7:fd:ae:b1:97:1a:ea:e9:c7:bf:d8:08:23:
c6:a2:ae:19:7f:bc:96:29:d0:34:12:09:58:ab:37:
ad:e1:cd:3c:f6:75:c8:c6:59:9c:b4:2c:91:50:01:
48:e7:e7:da:de:02:c0:84:bf:3f:5e:3c:ab:d6:a6:
a2:7d:fa:e0:b3:84:13:cf:5f:2e:db:e9:b3:d8:87:
bc:aa:00:4c:b1:67:da:da:c2:3b:1c:a8:db:5b:2c:
f8:23:ce:51:6e:85:27:fa:ec:42:ab:6a:fa:c2:d2:
05:98:b4:e6:40:c3:83:d5:6a:57:03:c7:1b:77:ef:
c8:ac:15:3f:dc:ec:6d:0e:7c:d6:cf:54:07:bb:20:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:72:88:03:F1:79:78:CC:7C:74:75:48:B2:44:0A:3F:91:8D:3A
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/M6xyiAPxeXjMfHR1SLJECj-RjTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.154.0/23
Signature Algorithm: sha256WithRSAEncryption
13:42:ce:2d:49:e6:14:40:c6:08:f5:b7:02:52:11:c6:88:92:
a8:fb:32:10:01:11:88:52:bf:07:3f:72:44:7b:11:69:e1:77:
59:e3:0f:58:94:a2:cd:f8:42:9a:73:37:51:62:2a:4d:75:d9:
9f:cb:a6:39:e3:17:f3:41:5b:68:d1:63:91:b0:e9:86:d6:00:
18:78:1f:ac:28:36:81:f6:18:5b:f2:0d:39:74:3b:6a:4e:06:
a5:70:70:99:f6:10:99:01:39:c4:09:09:04:c4:d2:89:fb:46:
02:5f:d5:b1:86:c1:fe:ef:85:27:2d:cf:1b:b4:7f:05:10:88:
86:ef:b1:0a:1d:ed:cc:b5:90:3f:8a:e5:ff:c0:03:28:ab:2e:
d0:d2:8b:76:90:38:50:5b:67:ae:d5:e7:da:ab:a2:45:45:29:
99:f8:da:e6:2f:8b:fa:b4:64:5c:de:3e:ce:eb:a5:ac:97:ba:
e6:38:01:57:06:52:ea:b8:c2:e0:6d:b9:b0:9d:17:4c:bf:77:
a1:ff:26:7d:b1:f5:48:b8:5a:09:83:fb:92:36:99:de:4f:15:
f5:eb:8e:25:18:bb:48:7a:0f:0f:78:3b:9b:98:4c:a9:3a:4b:
1c:f7:2f:62:db:cd:c0:4a:9d:f0:c4:d1:aa:b0:6e:b5:73:2d:
58:be:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:00 2024 by rpki-client on console-ams.rpki-client.org