Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/6miv41Jt2hUcB1a08-trAVEMKzQ.roa
File: 6miv41Jt2hUcB1a08-trAVEMKzQ.roa (raw, json)
Hash identifier: 2s4tMWQTTxJ6pQqg0aDHZH6ch/CpMPPKZvQ6DU/IA1I=
Subject key identifier: EA:68:AF:E3:52:6D:DA:15:1C:07:56:B4:F3:EB:6B:01:51:0C:2B:34
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 096C1978
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/6miv41Jt2hUcB1a08-trAVEMKzQ.roa
Signing time: Sat 01 Jan 2022 10:03:39 +0000
ROA not before: Sat 01 Jan 2022 10:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57381
IP address blocks: 193.150.22.0/24 maxlen: 24
193.150.22.0/23 maxlen: 23
193.150.23.0/24 maxlen: 24
2001:67c:24e4::/48 maxlen: 48
2001:67c:2a00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158079352 (0x96c1978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Jan 1 10:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea68afe3526dda151c0756b4f3eb6b01510c2b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:36:32:5c:08:5f:b3:6d:e3:49:86:d0:83:
6f:5e:a7:d4:b4:da:69:3d:a4:96:a8:13:49:9d:7b:
1b:2c:82:d1:2e:c8:71:bd:94:61:4d:86:38:6e:b1:
e9:19:51:fa:d7:8d:5d:c5:32:cb:e9:fa:5c:5b:bb:
42:1a:f3:40:07:48:f6:a8:cc:23:fa:71:e3:d7:26:
e7:88:4e:87:7d:0b:9e:34:91:68:2e:ee:82:19:98:
25:e1:f6:16:af:1b:08:60:f4:f4:d8:3e:b8:eb:89:
f8:bb:7a:8e:8a:d1:02:83:44:1f:14:85:f6:bd:50:
d5:fc:c6:61:89:66:fe:37:3a:a3:c4:34:24:f7:48:
94:b9:91:9d:11:84:2d:77:a3:a2:d5:aa:ea:ec:b6:
01:a6:cd:59:9c:06:06:bf:8b:e8:1e:97:00:1a:88:
c5:00:d5:ff:37:4f:3c:ed:fb:ef:d7:cc:04:ef:1e:
01:f8:7d:f4:b8:0e:25:28:89:4c:1e:41:19:68:a4:
e5:76:33:41:fc:a3:4d:fa:2e:68:24:9b:db:fa:53:
33:37:ea:f1:db:1e:a8:70:08:0b:ea:d8:8f:d6:56:
47:69:5b:bc:d9:41:e7:c2:d6:18:88:97:9d:f9:71:
c9:53:66:91:ac:15:42:11:21:d4:9d:1f:c3:63:83:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:68:AF:E3:52:6D:DA:15:1C:07:56:B4:F3:EB:6B:01:51:0C:2B:34
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/6miv41Jt2hUcB1a08-trAVEMKzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.22.0/23
IPv6:
2001:67c:24e4::/48
2001:67c:2a00::/48
Signature Algorithm: sha256WithRSAEncryption
05:7e:92:62:ea:f0:a1:a6:f0:6f:d1:3f:76:bf:90:cf:64:45:
81:ad:4b:38:80:35:c9:01:98:bc:37:dc:55:93:7b:9a:d2:a5:
b5:18:27:65:89:a3:a6:46:40:78:b2:2d:c4:b4:6a:27:7f:f4:
c2:bc:b4:f0:06:72:a8:25:b9:4c:47:f9:27:55:cf:6b:44:f2:
d0:be:78:d4:ff:26:ce:00:a7:38:c6:be:42:98:fe:9c:34:39:
a9:01:90:22:d5:e9:63:14:95:c3:5b:d6:3b:cd:83:f2:fa:b1:
85:e9:27:98:36:7b:4f:bd:c9:d3:08:6a:d0:e3:eb:21:51:0c:
fb:e1:22:e2:5c:e0:96:4f:90:c7:5f:28:75:92:a4:26:2b:5e:
90:e0:65:9e:1d:db:46:ec:cd:ee:2f:dd:56:a3:96:4e:50:4c:
d4:4e:04:02:ba:1e:fa:0c:0b:5b:92:3d:10:36:c2:a0:11:a2:
4c:2c:73:d3:64:39:8d:de:d4:a9:e9:e6:5d:ad:2d:ad:b3:66:
9f:85:88:07:a2:6a:46:97:25:9e:6b:3c:39:99:dc:90:b8:a4:
2d:32:f4:2f:71:3b:50:a0:41:59:65:1a:f9:f8:0e:8e:85:88:
86:f8:1e:fe:5e:e7:94:4c:ef:65:26:88:8c:d1:1c:0d:11:a9:
04:e3:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:45 2024 by rpki-client on console-fra.rpki-client.org