Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/t6-oWOVGRd9PeWUllfOz6WEN8eo.roa
File: t6-oWOVGRd9PeWUllfOz6WEN8eo.roa (raw, json)
Hash identifier: PAJgj5jzyFwEN6TEMqRYOdz/vvJ8F0dCN0Bj9Yy2JRo=
Subject key identifier: B7:AF:A8:58:E5:46:45:DF:4F:79:65:25:95:F3:B3:E9:61:0D:F1:EA
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 05163328
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/t6-oWOVGRd9PeWUllfOz6WEN8eo.roa
Signing time: Sat 01 Jan 2022 07:02:09 +0000
ROA not before: Sat 01 Jan 2022 07:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200370
IP address blocks: 194.60.208.0/22 maxlen: 22
194.60.210.0/23 maxlen: 23
194.60.210.0/24 maxlen: 24
194.60.211.0/24 maxlen: 24
194.60.208.0/23 maxlen: 23
194.60.208.0/24 maxlen: 24
194.60.209.0/24 maxlen: 24
2a0f:51c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85340968 (0x5163328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Jan 1 07:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7afa858e54645df4f79652595f3b3e9610df1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:07:f4:61:b4:0b:3b:cc:98:21:aa:ec:22:
4f:8e:30:32:f2:c9:3e:24:e3:cb:e4:87:1c:59:e4:
50:ab:ee:37:2b:1b:7d:b2:93:6b:f6:49:a0:ec:21:
5c:d9:3b:df:10:48:9d:a7:d0:6f:08:5f:1c:a2:92:
64:41:f2:a0:24:1c:e2:ba:aa:10:1e:70:b5:7f:d9:
d4:45:1d:e1:a0:87:92:9e:f9:27:b7:65:26:d9:ea:
04:5d:92:f5:95:a1:7c:17:b5:59:de:0e:06:cb:bf:
b8:3d:41:c5:89:a6:fe:84:bc:1a:b0:af:1c:87:05:
fa:3d:fa:cf:d2:40:8e:ed:de:80:84:f9:47:18:aa:
34:39:c2:e4:8a:f1:fb:76:af:4e:16:2d:e5:ac:11:
30:d7:60:d3:2f:a7:ee:c2:e8:79:82:5b:eb:e0:54:
32:79:34:da:4c:f2:42:d3:f6:ab:e8:c7:aa:02:ad:
e1:6e:a7:70:1c:c0:1f:0f:4a:3f:b1:bd:ee:10:df:
7c:8f:18:48:bd:a9:2f:71:65:fd:6d:1c:d4:70:b2:
1d:4b:59:2a:15:8b:0a:07:57:2a:9b:10:69:51:6c:
7f:e1:d7:8f:2b:23:53:b5:7c:46:68:de:6e:33:48:
db:d2:51:e7:8a:98:e5:69:3b:4c:5f:55:4c:0d:1b:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AF:A8:58:E5:46:45:DF:4F:79:65:25:95:F3:B3:E9:61:0D:F1:EA
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/t6-oWOVGRd9PeWUllfOz6WEN8eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.208.0/22
IPv6:
2a0f:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:6b:a9:4b:c9:8d:4c:37:d2:85:ce:2a:a4:e1:39:93:ff:5b:
c6:7b:96:01:1c:d2:2a:30:e7:09:23:00:70:3f:a6:79:83:28:
10:72:92:d0:42:b6:2a:f8:22:1d:bb:58:59:aa:f5:69:f3:4f:
89:6a:5f:d8:fd:e4:23:9e:03:81:4e:9e:ad:9b:b9:9d:a6:8f:
59:c0:a6:61:2a:1d:76:39:f8:69:a0:a3:a8:22:27:67:77:e3:
0f:7c:b0:e7:a5:1a:2c:3e:76:fc:ae:10:36:a2:8f:9c:a1:7c:
8e:1f:aa:17:88:61:65:77:0c:82:da:9f:e6:fa:1b:ea:ae:e3:
72:29:cb:9f:42:ee:fe:28:f2:26:b4:b5:50:d9:95:64:bd:dd:
e3:80:69:0d:f9:07:f2:c9:bc:a7:82:ef:c4:72:fb:16:f0:01:
2b:e4:af:f1:f1:a0:41:96:6b:f0:86:a4:4d:e4:9b:1b:a0:ac:
cb:6e:31:83:d9:7f:4c:bf:37:cb:d0:3b:18:d5:3d:45:e3:8f:
8c:18:75:d6:de:91:88:3e:0b:ee:5e:46:14:cc:4b:d4:5e:47:
32:d6:61:9b:5c:c4:76:d3:ef:b3:d2:59:16:f5:7d:38:95:c5:
3a:10:8f:2d:93:0e:8c:d7:da:13:b2:47:bc:e8:10:66:a6:4e:
93:57:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:02 2024 by rpki-client on console-fra.rpki-client.org