Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/6V9FKlZk7X42G42uW79pZZBuhs8.roa
File: 6V9FKlZk7X42G42uW79pZZBuhs8.roa (raw, json)
Hash identifier: WRHe8CNVyGqlQVDwcfA06hnE5oXo7SQkS448+TW+DPU=
Subject key identifier: E9:5F:45:2A:56:64:ED:7E:36:1B:8D:AE:5B:BF:69:65:90:6E:86:CF
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 39483EF0
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/6V9FKlZk7X42G42uW79pZZBuhs8.roa
Signing time: Sat 01 Jan 2022 03:53:05 +0000
ROA not before: Sat 01 Jan 2022 03:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199399
IP address blocks: 185.1.123.0/24 maxlen: 24
176.126.38.0/24 maxlen: 24
195.130.66.0/24 maxlen: 24
195.251.247.0/24 maxlen: 24
2001:648:20f0::/48 maxlen: 48
2001:7f8:6e::/48 maxlen: 48
2001:7f8:ce::/48 maxlen: 48
2001:648:2cef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961036016 (0x39483ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e95f452a5664ed7e361b8dae5bbf6965906e86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:ea:37:74:57:f0:fc:e2:92:5b:6f:bb:db:
94:e7:0d:6b:06:00:59:7e:cd:c9:41:20:e8:41:f0:
86:b3:a7:12:90:1c:2d:0e:c0:d2:c3:60:a3:90:10:
01:7e:be:49:bd:12:0e:f8:70:ea:a9:7a:f7:31:5c:
51:24:20:c0:9f:eb:be:81:17:1d:eb:02:e9:ea:be:
ec:5c:c2:7a:6e:95:27:34:b7:c3:78:11:55:a1:f5:
bc:41:91:0d:96:82:13:d4:6d:c1:30:3a:fd:8a:0f:
57:e1:8e:1d:35:a2:5f:fc:a2:23:64:3e:e3:d0:07:
bf:e9:6f:0f:9d:4a:ec:5d:5e:74:be:99:56:ff:86:
fd:34:cc:73:6c:59:fc:25:f3:9d:e3:3e:3f:ad:eb:
15:ea:44:f0:c9:93:c6:a4:b0:70:5d:15:1e:5c:4b:
b5:34:9d:75:87:10:21:6c:5b:d1:a3:9e:b9:c2:16:
e3:22:de:2f:0c:da:6b:d5:7b:97:80:ae:9b:4a:84:
1c:38:39:69:04:13:48:c0:b3:13:1c:dc:99:50:4d:
7e:c7:a9:1d:ad:63:02:ca:7d:11:60:2c:3d:6d:5e:
c4:03:b3:f0:93:b0:1c:f8:50:26:19:7d:c6:6a:c9:
16:37:6b:b5:97:76:dc:f5:1a:75:b2:46:bc:1e:0e:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:45:2A:56:64:ED:7E:36:1B:8D:AE:5B:BF:69:65:90:6E:86:CF
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/6V9FKlZk7X42G42uW79pZZBuhs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.38.0/24
185.1.123.0/24
195.130.66.0/24
195.251.247.0/24
IPv6:
2001:648:20f0::/48
2001:648:2cef::/48
2001:7f8:6e::/48
2001:7f8:ce::/48
Signature Algorithm: sha256WithRSAEncryption
3e:90:a9:5b:d1:ad:dd:a5:28:a4:86:3c:34:87:cc:ea:c4:7e:
e6:6c:ec:d8:2f:61:87:9e:fd:b5:92:81:1e:22:35:36:c2:4d:
33:6e:9e:fd:d0:d3:55:58:54:86:3f:a9:84:06:fc:8c:bf:f2:
bd:06:e8:5e:02:f3:fe:d3:41:f1:00:be:bd:59:b9:5c:27:54:
a4:cc:93:3d:7e:fe:fc:38:8a:fd:3b:1a:9f:ad:1a:a8:10:da:
f6:18:80:7e:6d:5b:95:68:8c:4c:10:51:88:c3:22:06:3d:48:
e0:27:ea:3a:57:f7:03:78:7d:2d:65:17:4a:5e:f4:da:a1:3b:
21:d9:a3:b7:f1:91:80:e6:54:32:c0:cb:73:af:e8:8a:cb:0c:
08:2d:be:bb:ac:e1:1d:b7:49:81:9a:33:96:d0:66:47:aa:d0:
f4:f3:5e:05:9e:36:04:09:82:88:ca:aa:48:64:86:96:d5:2d:
0d:60:a9:a6:6d:b7:bf:54:c9:49:46:5b:fb:29:d1:15:11:31:
4e:0d:fe:69:30:43:1a:fe:4f:23:df:51:27:ef:d3:15:b9:28:
7c:74:94:29:07:dd:89:18:11:5e:67:dc:75:85:b5:d7:19:3d:
cd:96:69:4a:3f:4d:28:da:43:73:5b:fd:9d:e4:22:21:8b:e7:
01:0f:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org