Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/6uCknQS3AeLKo6QOb9mQfUZfYjM.roa
File: 6uCknQS3AeLKo6QOb9mQfUZfYjM.roa (raw, json)
Hash identifier: P5udcvfVszy9C8kbLOAN3iIJsYrO24D97F4uOb8z3SE=
Subject key identifier: EA:E0:A4:9D:04:B7:01:E2:CA:A3:A4:0E:6F:D9:90:7D:46:5F:62:33
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0183E6E15B3796A2A936FFA2EB94F4D097D1
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/6uCknQS3AeLKo6QOb9mQfUZfYjM.roa
Signing time: Mon 17 Oct 2022 16:57:52 +0000
ROA not before: Mon 17 Oct 2022 16:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.221.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:e1:5b:37:96:a2:a9:36:ff:a2:eb:94:f4:d0:97:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Oct 17 16:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eae0a49d04b701e2caa3a40e6fd9907d465f6233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c5:90:76:e0:ed:e6:fb:4a:5f:ae:5f:94:5c:
f1:b7:e5:52:dc:18:6d:a9:85:94:cc:84:38:fb:7e:
cb:ce:b4:1f:33:3c:81:0d:08:66:c4:ac:d2:6f:2c:
34:41:04:ef:11:ea:65:6e:a3:44:b9:70:db:f5:af:
cf:bc:f2:05:72:f9:dd:87:3f:d9:01:0f:19:8f:d9:
bd:0a:e1:60:94:f8:de:e2:59:92:68:f8:c9:0d:fa:
f7:01:dd:84:bb:be:8f:21:21:5b:dc:0d:96:52:f1:
5e:fa:b8:c3:1d:d7:99:6c:3d:75:e3:df:c5:92:53:
22:be:8f:f9:d6:c3:0c:96:df:45:ec:08:8a:c6:9d:
16:b6:de:3b:1a:7b:f8:2e:a8:1e:63:0c:a0:cb:b7:
a2:5e:23:a2:23:43:42:ef:04:d9:9a:6c:be:56:2d:
b7:53:ed:36:f9:c4:e6:3d:ef:b4:2f:d8:ff:33:a8:
5f:5e:f5:d5:df:4f:6b:53:e0:a6:29:22:1e:43:9c:
c8:ee:34:c1:51:13:1f:d4:ab:7f:e1:ac:f9:24:ee:
bb:1f:0f:42:9c:4a:ce:3a:81:5f:46:b4:4b:03:de:
72:99:6f:5f:84:d9:c7:a2:60:8f:de:5d:f3:89:a6:
db:eb:e6:94:20:7e:71:58:68:48:65:eb:43:84:a2:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E0:A4:9D:04:B7:01:E2:CA:A3:A4:0E:6F:D9:90:7D:46:5F:62:33
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/6uCknQS3AeLKo6QOb9mQfUZfYjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.84.0/24
Signature Algorithm: sha256WithRSAEncryption
54:66:16:5e:ff:10:8f:2f:90:da:9f:4f:a7:15:2a:24:49:ee:
f1:e3:4f:0f:80:89:47:d4:99:a4:f9:83:06:2e:c6:df:35:56:
9a:1f:05:3c:a8:4b:13:78:05:98:1c:69:8e:da:fd:b8:a4:03:
24:03:bd:3c:7c:04:77:95:8a:35:50:57:e0:e6:65:70:7c:ac:
1d:65:17:88:f3:f1:69:5c:dd:83:7b:ec:b1:be:f5:66:d7:fd:
26:2d:09:2b:a5:0e:8a:42:f3:61:84:ba:b7:82:e4:57:db:96:
e4:ef:d4:03:01:98:43:68:b5:99:a3:55:06:e5:6a:10:97:ff:
16:d5:af:62:fd:60:e7:f2:c1:dd:e0:40:ca:9d:86:f5:3f:5f:
4a:28:f8:bb:d1:0d:05:34:06:90:25:4f:78:df:e7:6f:c6:32:
49:2e:fe:4f:c0:5e:f3:fa:9a:8d:89:ed:f1:20:fe:2e:91:a6:
f1:96:e2:dc:ad:7f:20:9c:22:9a:98:54:93:41:dc:27:bf:c0:
41:ec:bc:e7:35:d5:e6:98:30:6e:6a:84:ce:31:f2:d0:b7:77:
e9:38:9f:a2:7d:84:b3:f6:c2:27:5e:89:79:44:10:f0:0e:8f:
c6:bd:05:84:b2:37:f0:f4:25:a4:a1:66:99:f2:39:7b:24:b0:
c5:8a:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org