Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/6moQKvdM3DFW0-WZt2sJYMAqtjw.roa
File: 6moQKvdM3DFW0-WZt2sJYMAqtjw.roa (raw, json)
Hash identifier: qE7JpT+1AMs1fDSPFgSj5mbheCDlSRIyesn4E7uAYGI=
Subject key identifier: EA:6A:10:2A:F7:4C:DC:31:56:D3:E5:99:B7:6B:09:60:C0:2A:B6:3C
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 01872378F1F19CEA75AB632681C32D3DD5CE
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/6moQKvdM3DFW0-WZt2sJYMAqtjw.roa
Signing time: Mon 27 Mar 2023 14:29:01 +0000
ROA not before: Mon 27 Mar 2023 14:29:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211793
IP address blocks: 83.139.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:78:f1:f1:9c:ea:75:ab:63:26:81:c3:2d:3d:d5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Mar 27 14:29:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea6a102af74cdc3156d3e599b76b0960c02ab63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:25:aa:c2:4e:47:a0:cc:ee:b6:3c:e9:6c:
13:4f:6a:ba:0f:f0:7a:f7:90:32:8e:d0:4d:2c:bf:
aa:59:7f:c7:7d:82:51:1a:f1:ed:33:d0:47:61:e0:
b9:11:6f:ee:8a:7d:a9:dd:29:a5:86:e4:de:73:d5:
f4:29:23:e7:08:1c:31:d4:66:3b:09:17:58:97:6f:
2f:cf:70:98:db:72:4e:db:a0:20:2a:65:fc:94:7a:
73:f0:18:17:03:85:7b:97:85:24:73:6c:13:4b:23:
a7:bf:72:2b:ea:70:34:9c:69:47:66:c2:d9:31:d0:
c6:3e:9b:fa:ef:55:b8:85:22:61:10:28:79:d5:14:
5d:8c:dd:af:c5:09:c0:21:86:86:e9:e3:d5:99:cf:
a5:d7:42:0d:88:17:52:7a:d2:91:6f:de:9d:90:93:
f0:e8:00:9d:3b:3b:41:cd:5e:f9:01:84:d8:35:19:
0e:7b:1e:7b:af:c6:97:e1:d2:fa:cf:5d:ff:bb:1c:
e2:2a:3c:c1:65:24:d1:37:17:e7:2d:e8:c5:32:32:
65:52:26:eb:75:92:6a:3f:26:9f:df:93:a3:3b:fc:
c2:43:16:b4:6c:b8:83:ac:d7:42:60:9b:a4:23:61:
6d:2a:31:c8:de:34:f7:27:50:d3:0b:32:80:df:7a:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6A:10:2A:F7:4C:DC:31:56:D3:E5:99:B7:6B:09:60:C0:2A:B6:3C
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/6moQKvdM3DFW0-WZt2sJYMAqtjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:08:c7:83:a1:98:73:b8:b0:aa:7d:48:0b:53:9b:ab:ae:c8:
0c:c9:1b:c5:af:e7:7b:c5:77:3b:09:e6:fd:bc:a8:dd:39:c6:
e6:fd:7e:dd:64:d0:2d:8e:7e:25:b9:90:d4:7f:1a:b0:fe:72:
b6:c1:9f:81:d1:cb:b7:c2:29:a3:05:e4:dd:ce:8a:de:47:fa:
d0:fb:1e:27:b1:50:2d:02:10:3e:74:fb:d6:a6:84:87:52:f5:
51:d3:a5:38:52:c7:0f:24:e5:d1:aa:f3:17:34:82:96:c8:45:
9e:0a:7e:ab:78:9e:10:26:f5:cf:ab:3b:da:a7:c6:5b:57:7e:
55:c4:e6:75:5a:42:4e:b7:c4:8a:0d:87:e6:21:71:60:00:31:
e0:d4:6f:eb:29:49:81:b8:b1:99:58:05:cd:98:9c:c0:b2:98:
c3:1b:33:18:00:09:dc:87:36:b0:85:5d:50:e9:f2:7e:43:dd:
9e:d3:43:31:74:11:9c:31:3e:0a:5f:60:f1:1e:31:79:a1:7e:
33:bd:f4:17:08:bd:71:b8:60:d4:96:12:49:c4:db:7e:be:0a:
2e:55:74:7f:8c:c2:72:c4:3e:b9:ac:05:14:f3:38:e2:c4:9b:
9e:3d:5f:f5:e6:dc:cd:d6:19:ae:e3:4b:12:d8:2c:a4:7b:16:
06:e0:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:02 2025 by rpki-client