Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/eh6-EFTRRv4o2ZPYFkciCAWZgfU.roa
File: eh6-EFTRRv4o2ZPYFkciCAWZgfU.roa (raw, json)
Hash identifier: 1c8vnkzHzQ1KPKTWTO7cwnfoU4bNkH79YQZBws0Ob4k=
Subject key identifier: 7A:1E:BE:10:54:D1:46:FE:28:D9:93:D8:16:47:22:08:05:99:81:F5
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 089E0166
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/eh6-EFTRRv4o2ZPYFkciCAWZgfU.roa
Signing time: Sat 01 Jan 2022 08:05:58 +0000
ROA not before: Sat 01 Jan 2022 08:05:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15787
IP address blocks: 212.69.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144572774 (0x89e0166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 1 08:05:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a1ebe1054d146fe28d993d816472208059981f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ab:15:7d:ab:30:d4:25:15:08:3d:ee:5c:7c:
d4:f9:9e:18:bb:50:25:4c:ea:9f:fb:a0:10:52:c4:
bb:9a:9a:3f:b6:e0:c3:4d:c7:25:6a:97:2c:b6:79:
c0:60:dd:bf:23:5c:51:e3:41:fc:3e:de:c8:2c:ff:
2f:a1:e7:67:2f:c6:4d:1b:e4:fd:e3:92:37:8c:32:
2f:dc:75:b8:94:4b:6e:9b:e0:f5:02:d4:ee:45:a1:
98:8c:39:cb:bc:70:f7:19:72:d0:23:f0:1a:32:a8:
fa:00:5e:83:fe:9e:de:e2:e2:32:a0:fd:bd:6a:4d:
f3:5c:5e:4e:e4:af:55:27:6a:ba:fb:ef:dd:60:f0:
21:5e:61:ef:2d:df:ac:12:cd:5d:88:84:64:0e:54:
8b:a5:c9:82:17:12:fe:90:26:f2:ed:fa:33:ba:9d:
ff:d9:ab:17:48:61:ba:04:78:6a:5f:ba:3f:71:47:
d6:e9:32:12:ac:d0:53:b4:93:10:64:7c:37:38:0a:
bf:e3:6d:41:18:ed:45:a0:c9:2d:74:da:e3:56:ac:
10:e1:8b:5b:c8:b2:55:0e:d5:08:10:24:a6:82:eb:
95:f6:20:c6:ed:71:3a:30:fe:e5:d5:82:10:e7:21:
d2:5b:74:bc:a3:08:8d:52:74:b0:3c:7c:fa:84:88:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:BE:10:54:D1:46:FE:28:D9:93:D8:16:47:22:08:05:99:81:F5
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/eh6-EFTRRv4o2ZPYFkciCAWZgfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.77.0/24
Signature Algorithm: sha256WithRSAEncryption
38:41:b0:8e:4a:a8:41:2c:be:ff:9e:24:5e:93:fd:83:a3:18:
6b:82:15:c1:45:3e:61:93:c7:b0:9c:ad:89:fa:be:64:1a:55:
2d:6d:92:16:09:4e:3d:30:c7:8a:d6:63:61:6d:ae:25:04:29:
d7:72:12:48:dd:33:1c:d1:18:28:b8:b5:af:d9:45:e0:e8:ab:
95:c2:7d:46:8c:e7:60:dc:f8:7c:90:c4:5a:7c:f1:1d:71:88:
27:38:f0:dd:54:ab:03:cd:a7:a6:05:fb:6c:1f:7f:7e:44:0d:
25:33:02:90:79:b8:c9:fd:5f:f4:7c:64:69:db:72:45:73:30:
d6:9c:d1:06:fa:ae:ee:45:74:d4:60:b0:ce:90:2e:dc:b9:e0:
15:f5:17:d1:a4:59:59:4e:0a:c9:be:4e:73:c2:b3:a8:51:40:
a6:69:a6:23:77:e4:8c:df:64:e6:a3:0d:0c:b2:aa:31:32:06:
9d:3a:98:89:fb:47:0c:d3:00:0d:34:a7:bd:47:c7:f2:13:14:
59:57:d5:33:a4:30:a7:f1:26:30:e4:e5:75:4b:00:50:50:bd:
10:93:6f:39:16:b2:4d:14:d4:01:1a:26:2e:02:da:27:5c:77:
a7:12:0a:f5:dd:35:53:d3:92:0c:5a:72:9e:9e:ae:99:ba:ef:
7c:2f:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:06 2024 by rpki-client on console-ams.rpki-client.org