Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/6CbXK2lr8Kum1qZkO3RMNl6Ttco.roa
File: 6CbXK2lr8Kum1qZkO3RMNl6Ttco.roa (raw, json)
Hash identifier: ZrJmJnkOhBMuZd3thbzvaMTbQVyWlyE/BS3kkvYe4SI=
Subject key identifier: E8:26:D7:2B:69:6B:F0:AB:A6:D6:A6:64:3B:74:4C:36:5E:93:B5:CA
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 044017A6
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/6CbXK2lr8Kum1qZkO3RMNl6Ttco.roa
Signing time: Sat 01 Jan 2022 11:05:18 +0000
ROA not before: Sat 01 Jan 2022 11:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208591
IP address blocks: 45.84.208.0/22 maxlen: 24
2a0e:a180::/29 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71309222 (0x44017a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jan 1 11:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e826d72b696bf0aba6d6a6643b744c365e93b5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:58:a5:6a:ee:f7:84:73:ec:de:2a:c1:df:
bc:6d:ca:23:9e:46:5a:e4:6c:dd:ca:59:ae:2a:b7:
88:dd:f6:cf:d9:9d:a8:8a:95:d2:67:fe:8a:47:cd:
ef:e3:2c:4b:f8:85:e5:b7:e2:06:7e:eb:50:28:64:
0c:a1:f4:72:6f:32:a9:bd:15:f4:33:fc:4e:ca:17:
15:7d:64:0c:b3:35:3a:ed:8b:f5:72:70:71:2d:bb:
6a:94:fa:09:9a:62:3d:8b:2f:00:21:30:7b:04:73:
4a:48:85:e2:31:0b:71:03:83:6f:92:5d:4d:29:a0:
a8:15:e2:40:48:27:9b:6e:0a:e7:47:da:f9:ad:92:
ca:b6:e5:a5:d7:80:3f:4d:91:97:30:e1:4d:36:e7:
c5:ae:e1:f0:16:b6:2d:67:b1:2a:5d:77:d8:a2:4f:
a3:b8:0e:18:28:64:01:c2:d5:5d:bb:55:68:a4:36:
75:ea:ed:f7:15:e0:db:3d:c5:76:d2:96:2f:2b:74:
fa:0a:d3:e2:62:88:31:be:03:26:4f:52:98:ac:ac:
fe:fc:89:97:b1:18:8a:d3:0e:b2:d4:69:e5:1f:ad:
bf:50:80:44:1e:cc:c5:31:85:da:97:25:32:00:8a:
bc:3d:61:a8:22:4a:7c:e8:a0:9a:e1:65:8c:89:4e:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:26:D7:2B:69:6B:F0:AB:A6:D6:A6:64:3B:74:4C:36:5E:93:B5:CA
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/6CbXK2lr8Kum1qZkO3RMNl6Ttco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.208.0/22
IPv6:
2a0e:a180::/29
Signature Algorithm: sha256WithRSAEncryption
88:03:d5:c9:f0:48:f8:60:17:46:bb:fc:d8:ea:84:db:65:55:
73:a9:60:e9:9f:59:e5:ff:92:48:9e:db:85:f9:55:e6:50:39:
0f:b6:aa:c2:c8:0a:e2:54:cb:9e:b9:80:14:d0:00:77:f6:e2:
91:89:ee:2d:f1:70:2d:f3:16:81:bb:dc:e7:d9:f9:09:a3:32:
75:e5:e9:b2:c9:a4:2c:5b:3d:4d:07:45:c1:81:7d:15:00:7b:
df:74:01:f4:04:cb:03:57:45:fd:7b:54:9d:0d:e2:e9:2b:76:
9c:8d:67:e8:ac:81:d3:49:31:4f:c7:e0:bd:cd:87:1e:fa:0d:
07:16:3f:40:de:f0:bb:2c:b8:f2:5f:59:7d:b1:77:d9:bd:6b:
bc:b6:55:71:2f:6f:35:2d:22:3e:4b:c6:c2:c7:41:64:18:b4:
36:c9:2c:57:f3:52:4f:f0:29:5a:17:b3:0c:cf:a9:1c:2e:8c:
cf:36:4e:dc:e5:03:75:0b:4f:43:43:a8:f9:97:af:86:81:7e:
98:90:12:25:25:a5:68:ce:93:86:79:7a:a6:2d:7c:69:5f:75:
25:09:56:28:ec:4b:77:64:82:34:4d:6f:f1:19:70:64:cf:26:
8c:29:6e:b6:fd:b3:d2:f4:99:0d:78:1e:6f:d5:01:a3:3f:7e:
67:20:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org