Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/6W80yzjxxm18ym7GiPGgI6ZzjEg.roa
File: 6W80yzjxxm18ym7GiPGgI6ZzjEg.roa (raw, json)
Hash identifier: hXg07X+wcWuxeU7it1i8bK4HEIiCF7NEJhnLjX4a0Bs=
Subject key identifier: E9:6F:34:CB:38:F1:C6:6D:7C:CA:6E:C6:88:F1:A0:23:A6:73:8C:48
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 01840A2304C5E84167D14EF718063F47A313
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/6W80yzjxxm18ym7GiPGgI6ZzjEg.roa
Signing time: Mon 24 Oct 2022 13:16:17 +0000
ROA not before: Mon 24 Oct 2022 13:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35584
IP address blocks: 193.200.200.0/24 maxlen: 24
89.33.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:23:04:c5:e8:41:67:d1:4e:f7:18:06:3f:47:a3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Oct 24 13:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e96f34cb38f1c66d7cca6ec688f1a023a6738c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:5e:07:d2:ca:3f:9d:26:1f:a7:0f:b6:74:
92:9c:7d:62:db:75:8c:3a:23:c3:e8:e2:c0:0e:4b:
f2:d9:cf:52:c5:79:c1:f2:0b:0e:77:83:93:c7:77:
04:b2:5f:80:92:99:bd:8f:f7:76:45:95:d9:df:ca:
a8:b4:37:21:d6:20:09:be:51:79:57:ed:54:b9:d5:
9e:3b:46:24:5a:dd:48:3a:50:49:f5:88:8f:94:97:
6b:1a:cf:9e:8c:65:66:6d:da:33:31:bd:51:5e:81:
ec:8a:fc:7b:07:dc:b9:93:3c:d5:b8:86:a0:d0:f6:
e7:c8:c2:15:41:0e:c6:e2:7e:3a:4f:23:5d:53:02:
e6:91:37:09:c2:fb:e2:3c:fd:18:e4:74:c2:d8:a9:
f8:f4:7d:b8:6b:8f:46:bb:59:62:a5:12:2a:80:42:
53:b8:25:e8:da:34:81:a9:b2:49:10:5b:75:49:2f:
03:8f:4f:5f:65:e2:16:75:3e:5f:fb:db:2a:48:ef:
fc:79:a7:c0:04:bb:d9:22:6f:eb:d4:7f:af:02:13:
ba:ba:64:f9:7a:e0:60:38:5c:75:4e:17:cf:b2:ed:
d1:d0:57:b8:f7:4e:72:c1:68:f5:ca:96:f6:d5:03:
43:8f:61:9a:c9:78:78:d9:b4:5e:ca:ea:4e:d2:31:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6F:34:CB:38:F1:C6:6D:7C:CA:6E:C6:88:F1:A0:23:A6:73:8C:48
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/6W80yzjxxm18ym7GiPGgI6ZzjEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.96.0/22
193.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f2:21:5f:c2:26:1c:df:43:e6:0e:34:45:1a:27:17:01:be:
cf:56:41:98:52:82:76:22:23:10:51:0a:b2:43:66:75:ae:c7:
f1:03:7f:af:04:80:bb:06:ca:10:01:80:e3:b1:74:5d:23:81:
75:1c:31:79:e1:76:78:94:b4:3e:b2:fc:74:ed:96:25:98:5b:
11:49:dc:c1:fb:7b:3d:87:ed:18:e5:90:41:26:d3:3d:38:71:
bd:79:0e:e9:58:e9:90:9d:5f:dd:31:b6:9d:82:51:4a:5c:a6:
38:88:f7:dd:03:f0:e1:4a:7e:08:c6:03:ca:c4:7e:84:3b:94:
48:f0:64:8d:0d:2f:0b:a1:3b:a4:9c:4c:40:c9:67:e3:f9:c9:
69:2d:96:54:10:12:1c:31:0b:0a:e5:f3:83:54:f7:25:de:b7:
4a:b9:80:cd:07:0c:82:e9:e5:bb:6b:d1:cc:77:4f:f5:85:a1:
59:63:7c:3c:c7:a7:f9:82:da:5e:63:ef:e4:a0:73:4a:80:6d:
c4:7c:5a:7c:1e:cb:46:7f:b9:cc:fa:70:ed:cf:08:45:ce:fe:
7b:e9:b8:44:87:c6:8b:78:71:0b:f9:07:43:b9:6f:54:40:fe:
ed:3d:a1:4a:ad:f3:81:2b:9c:a9:c5:b5:e8:fe:4d:f7:27:91:
4c:a1:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-ams.rpki-client.org