Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/6c5dB1AFA0X8QYw4ARFvzv6jMWU.roa
File: 6c5dB1AFA0X8QYw4ARFvzv6jMWU.roa (raw, json)
Hash identifier: nCulbQeKMytA+7LlJkm7A3G6Yfa+zQF27sXRxIAju7c=
Subject key identifier: E9:CE:5D:07:50:05:03:45:FC:41:8C:38:01:11:6F:CE:FE:A3:31:65
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 11CF9947
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/6c5dB1AFA0X8QYw4ARFvzv6jMWU.roa
Signing time: Sat 01 Jan 2022 15:05:45 +0000
ROA not before: Sat 01 Jan 2022 15:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 269070
IP address blocks: 130.185.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298817863 (0x11cf9947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 15:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9ce5d0750050345fc418c3801116fcefea33165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:2d:68:e0:c4:14:0f:83:b7:7c:d9:e8:71:
3e:08:6c:48:b7:68:d0:48:6b:52:f6:e1:46:e2:86:
5c:d6:64:c7:4e:b6:9c:b1:e8:5e:54:ee:6b:d5:fe:
59:0d:d5:af:b6:27:3f:3d:a5:df:74:9b:e9:a1:63:
0b:a8:c2:7c:2b:5c:bc:55:dc:03:60:05:ad:25:df:
d6:7c:95:fb:5b:09:c4:91:09:a7:11:bc:c5:83:e2:
d7:3d:fc:7e:96:09:03:f7:23:5b:0c:23:2d:fb:36:
2a:8e:0f:d2:88:21:3b:7f:b7:f5:1c:e9:b4:de:ae:
20:23:7b:16:48:b9:2c:10:01:f7:85:f8:88:d5:8f:
fa:75:22:db:09:51:25:d9:0e:cc:1f:1c:b7:20:23:
26:4c:04:26:d0:87:4e:03:c9:ae:6c:89:b3:17:b0:
28:ed:b8:dd:61:00:5c:fd:7b:4e:f4:4c:25:16:a4:
28:c1:18:ad:49:70:f3:3c:71:1b:f4:3f:92:c4:0f:
84:52:e6:d3:ea:04:10:53:15:09:85:6e:01:7a:8b:
7f:44:53:d4:d7:f0:fd:44:d8:c9:53:db:99:76:c0:
13:44:b8:9c:3e:e1:fd:67:25:07:ac:5e:e1:40:4c:
5b:25:db:85:6a:f2:fb:05:1a:9f:ce:57:5b:09:71:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:5D:07:50:05:03:45:FC:41:8C:38:01:11:6F:CE:FE:A3:31:65
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/6c5dB1AFA0X8QYw4ARFvzv6jMWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:37:31:31:cf:84:3c:96:b6:f1:e0:4d:87:e2:35:e1:f5:71:
c4:08:d3:f2:1b:a5:74:8f:91:4a:68:f7:cc:54:6c:e8:0e:7c:
09:76:ad:9c:2a:d4:37:eb:69:65:af:ec:f5:54:20:d1:5c:86:
6f:2f:eb:fa:39:81:3b:f5:57:d8:4b:e9:e0:ea:e7:97:54:36:
bf:25:a9:6e:27:3f:ab:a6:36:fe:81:85:63:17:99:27:6f:d4:
fb:8a:bf:f7:25:d5:1c:b0:12:55:54:0b:31:a2:80:cb:01:89:
63:17:bf:f0:a5:d6:cd:c6:90:af:b8:7e:07:be:b3:a3:06:ab:
45:ae:68:65:92:55:61:2f:4c:bb:f8:cb:83:47:c9:7e:31:86:
b1:d4:d7:56:ce:14:f5:a5:21:a7:1b:65:08:9b:f9:6c:96:2f:
a9:f0:98:6c:59:2b:26:57:4e:c1:47:56:d1:b9:dd:95:df:0e:
14:09:cd:6b:18:60:a9:05:13:57:16:55:14:51:bc:68:6a:7c:
3c:c3:be:b9:03:dc:40:1b:bd:b1:0a:62:ca:35:c3:d2:28:ce:
26:d0:69:0b:f6:de:db:4e:0a:3d:6a:b9:a2:64:4e:30:5b:fb:
10:06:2a:b0:c5:34:86:c5:e2:43:0e:f8:0f:83:09:29:08:4d:
d9:b6:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org