Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6ATx7pro46u1Mb70lEZ4hfbv04w.roa
File: 6ATx7pro46u1Mb70lEZ4hfbv04w.roa (raw, json)
Hash identifier: lfPmsSa25mh4EzlN+GDtn37NkMMVF+NJSHkdoT8gV8k=
Subject key identifier: E8:04:F1:EE:9A:E8:E3:AB:B5:31:BE:F4:94:46:78:85:F6:EF:D3:8C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 427D8325
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6ATx7pro46u1Mb70lEZ4hfbv04w.roa
Signing time: Sat 01 Jan 2022 14:03:21 +0000
ROA not before: Sat 01 Jan 2022 14:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61102
IP address blocks: 193.182.144.0/24 maxlen: 24
193.182.145.0/24 maxlen: 24
192.71.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115521829 (0x427d8325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e804f1ee9ae8e3abb531bef494467885f6efd38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:d8:42:4b:81:d2:e0:92:32:c9:74:52:4b:
18:82:3c:8a:69:a1:32:18:1c:6b:1b:15:09:b5:d7:
31:87:b9:e5:d2:c1:37:ea:9c:9b:97:62:c1:56:e6:
c1:2a:d1:bd:c9:94:2d:8a:05:d6:dd:22:e5:d7:af:
43:7e:1e:83:25:be:32:9a:ea:69:69:70:e6:b8:5c:
0e:3b:da:d7:00:16:aa:7c:80:39:aa:ba:14:93:ec:
19:bb:fb:45:8f:32:3e:b5:a7:39:bb:64:fb:68:a8:
99:82:4a:32:25:64:b9:fe:57:64:85:54:8b:cd:6e:
4d:a8:ee:6c:be:27:28:75:ce:a6:57:e4:e0:77:88:
11:7a:30:ca:c7:a6:f8:45:00:d3:3e:c5:30:37:69:
e1:79:bd:18:ce:a6:21:ff:88:c2:6e:ac:b2:1d:97:
d6:c0:ae:70:3e:8f:88:7c:08:be:56:f5:97:3f:03:
24:fb:95:22:d0:78:71:39:16:7f:c4:12:eb:52:41:
15:3b:0a:58:50:46:6b:d2:fd:f3:07:3e:f2:60:84:
93:3f:39:54:f7:49:e9:2a:c8:66:28:51:e5:2e:82:
22:a2:ca:a0:1e:ce:d1:e8:85:93:e2:88:72:16:96:
2e:1b:41:d5:46:5c:04:8d:9c:97:e1:64:13:2f:07:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:F1:EE:9A:E8:E3:AB:B5:31:BE:F4:94:46:78:85:F6:EF:D3:8C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6ATx7pro46u1Mb70lEZ4hfbv04w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.27.0/24
193.182.144.0/23
Signature Algorithm: sha256WithRSAEncryption
46:45:dc:1b:66:e9:5b:78:11:12:99:c0:37:4b:02:96:74:f5:
18:55:aa:0c:bc:5a:fa:fa:ad:89:d8:2b:84:7d:cc:e1:97:45:
74:a5:e2:83:7f:91:9d:bd:d4:c8:93:ab:0b:13:78:f3:bd:c5:
8f:df:db:98:48:85:b5:d1:39:80:6e:08:a2:f5:dd:c5:34:9b:
ea:12:42:b4:89:43:9c:c4:ee:4e:61:17:fd:ba:24:d9:2b:19:
93:c1:5b:14:84:45:47:58:e6:d9:86:c3:65:b6:58:99:0a:70:
bd:b7:3b:cf:43:ad:e1:de:de:37:a4:47:3d:61:d3:2e:9b:45:
84:f0:63:71:10:1a:d5:3a:d0:24:ea:cd:19:bb:2b:6b:74:8c:
43:61:28:4d:87:ba:2d:2f:26:98:e6:4d:ba:ad:53:2b:66:db:
34:3a:97:ad:52:36:ab:fb:a9:b4:f6:b4:13:7d:7d:f2:0a:24:
29:57:1f:9c:e7:57:e7:35:83:11:0c:b6:31:18:b3:93:92:0b:
f2:8e:05:20:bd:9a:11:71:33:db:c0:e8:b7:dc:50:18:6b:d8:
63:43:dd:9b:cd:74:e6:98:9b:ed:26:2c:d4:fe:4a:a3:26:96:
2a:5a:2a:f3:57:9d:b2:cd:3f:0b:ee:86:2f:b4:fe:35:41:e3:
fd:15:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:41 2025 by rpki-client