Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6JocVJabJg666QlTWWnGcWLyaZE.roa
File: 6JocVJabJg666QlTWWnGcWLyaZE.roa (raw, json)
Hash identifier: JLlbjzT/XxFUcxeeR08KKpVFASxghQn1aTMV7eGMWYg=
Subject key identifier: E8:9A:1C:54:96:9B:26:0E:BA:E9:09:53:59:69:C6:71:62:F2:69:91
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505910C77C5A5A6D7A9F8F09DA7358B38
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6JocVJabJg666QlTWWnGcWLyaZE.roa
Signing time: Mon 12 Dec 2022 09:01:10 +0000
ROA not before: Mon 12 Dec 2022 09:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24767
IP address blocks: 193.201.228.0/22 maxlen: 24
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:0c:77:c5:a5:a6:d7:a9:f8:f0:9d:a7:35:8b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e89a1c54969b260ebae909535969c67162f26991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:fa:dd:07:10:09:78:ca:c1:a1:0b:52:14:
78:5c:02:5c:fd:17:4b:dc:02:69:52:6c:91:4d:db:
92:5e:73:65:55:42:8b:93:6b:01:fa:1b:61:2f:c7:
4a:f9:4f:23:6a:c2:9a:5d:a5:1f:ce:28:11:0a:29:
58:f7:5b:2d:d0:33:66:4d:cd:36:f5:f5:0b:8f:13:
c0:b4:47:5c:cd:57:1c:6e:84:a0:b0:c2:7e:c1:62:
44:68:7f:2b:7a:25:da:fc:ec:05:ef:37:4c:7d:c8:
83:fb:77:01:26:c8:56:4b:73:a8:d9:67:8d:86:8b:
fd:24:bf:13:91:37:cd:af:fc:82:74:9b:5e:3b:00:
7f:72:73:ba:23:0d:26:e5:54:d2:27:63:c5:be:3e:
2b:f9:4c:c3:ba:74:66:f3:5a:4a:2c:3c:26:96:3e:
8c:63:43:a6:95:4a:20:cf:23:cd:8d:51:4c:da:0d:
64:13:d2:68:75:65:c5:71:9b:4e:38:e8:b6:49:c2:
67:01:c7:62:d0:8c:f4:26:84:6b:03:76:ad:4b:3d:
3c:ac:7f:74:5a:e0:24:c7:c7:5d:06:f6:91:b4:0d:
55:ec:7c:50:bc:dd:ab:06:3c:96:48:9a:d8:e0:b7:
1e:d5:cf:cb:0b:14:df:25:2c:69:9f:50:41:0e:5c:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:1C:54:96:9B:26:0E:BA:E9:09:53:59:69:C6:71:62:F2:69:91
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6JocVJabJg666QlTWWnGcWLyaZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
71:5f:d5:82:c6:d8:db:60:68:d2:c2:b8:52:5c:57:95:e4:02:
49:5c:65:9f:6b:b4:03:c0:bd:2f:12:0a:90:b8:5c:00:73:31:
33:ac:66:c8:0b:08:36:3b:4f:88:23:c4:da:96:14:6e:0f:6c:
81:83:d0:d8:75:12:9e:8b:93:00:c7:df:12:be:55:f5:a1:ad:
60:e9:0f:74:be:62:67:d1:d3:a7:06:6f:5d:0e:94:94:b9:9b:
b6:8a:89:5e:8c:b9:ec:25:fd:2d:fc:f1:7a:1b:80:80:46:24:
b8:f2:1c:f7:b1:79:60:ea:f5:9c:bb:d4:c3:29:7e:a1:4b:d4:
87:c8:20:82:00:db:39:82:6d:ee:3d:84:d8:d1:f2:9e:16:36:
39:46:16:e9:ab:f7:fb:9d:16:3e:fd:85:11:0d:07:a7:8c:85:
7d:07:50:c6:67:cf:37:25:08:13:64:7b:e9:4a:2f:e7:f5:61:
88:f8:de:61:d6:72:5e:d6:aa:58:5a:e3:34:d2:3d:9d:3d:4b:
9d:77:41:1f:1f:76:ca:43:96:c7:f5:d8:23:be:9a:a6:1a:2a:
77:3a:8e:59:06:20:40:c5:7d:4b:07:62:18:3a:f2:d5:93:aa:
58:01:9e:f6:dc:58:50:b5:77:fc:09:02:d1:bf:4c:9a:6c:e7:
3b:95:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:24 2024 by rpki-client on console-fra.rpki-client.org