Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6ZqxVhxuWF43V-uKgHvQGISt4c4.roa
File: 6ZqxVhxuWF43V-uKgHvQGISt4c4.roa (raw, json)
Hash identifier: DcPeRML4OD2Pz30zMAejsILZ5QxOMDXu4MXXYpXiHDA=
Subject key identifier: E9:9A:B1:56:1C:6E:58:5E:37:57:EB:8A:80:7B:D0:18:84:AD:E1:CE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01831C7DB4191A14345D6CDEDFCE83DA72FD
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6ZqxVhxuWF43V-uKgHvQGISt4c4.roa
Signing time: Thu 08 Sep 2022 09:45:43 +0000
ROA not before: Thu 08 Sep 2022 09:45:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 83.137.154.0/24 maxlen: 24
88.209.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:7d:b4:19:1a:14:34:5d:6c:de:df:ce:83:da:72:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Sep 8 09:45:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e99ab1561c6e585e3757eb8a807bd01884ade1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:ea:3c:7f:08:80:b5:b5:cc:c7:81:8f:68:
f7:7c:ef:96:5b:54:36:74:e6:70:ef:6e:81:eb:58:
66:ae:1b:68:43:65:ea:bb:06:36:4e:79:69:92:cc:
05:10:70:3d:e3:e3:8c:16:36:79:a2:f6:7c:d6:58:
b9:36:40:56:7e:81:61:c5:52:69:f0:14:3c:da:ef:
b0:26:fc:bf:d7:bf:19:5e:a7:c8:ed:15:42:bf:cb:
cf:7a:83:10:4d:6f:11:ac:28:5f:d6:15:d7:5b:06:
93:54:17:c0:21:1d:ff:17:14:25:37:96:cd:37:cb:
5a:69:29:49:6c:13:72:b9:4d:60:75:b2:c4:d4:cf:
24:94:f7:1d:09:6f:b5:ec:25:35:a8:b3:85:a0:e8:
8d:4a:14:b6:59:6a:b0:24:ad:9f:d3:26:18:d7:a0:
6c:9c:0d:9e:b8:8b:6b:bc:cf:27:d6:3c:6c:81:a7:
ac:86:f5:a9:5e:5a:65:9f:2e:34:4d:9a:d4:f2:81:
a2:08:c2:19:43:34:4e:43:b2:46:43:5a:f4:29:6a:
b7:03:4c:c9:e8:21:c9:08:7d:5a:3c:88:d0:46:fb:
0c:30:9b:4a:a4:ed:4b:e2:c9:27:06:73:70:e1:4e:
c1:dc:bb:46:58:47:ab:d9:49:a7:d8:cf:0f:ce:6f:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:B1:56:1C:6E:58:5E:37:57:EB:8A:80:7B:D0:18:84:AD:E1:CE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6ZqxVhxuWF43V-uKgHvQGISt4c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/24
88.209.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:33:6b:a7:27:85:d0:f1:aa:c0:85:3b:a8:cf:8b:be:92:e8:
fa:d4:06:71:eb:65:20:3d:92:04:af:98:c7:e0:bb:f4:65:52:
77:72:bd:4c:3e:04:9b:04:92:d2:c4:6a:a1:da:8b:bb:a0:49:
98:c1:49:e3:82:b3:97:fa:a6:72:a5:6d:66:66:b5:b9:4e:0b:
9e:21:38:53:03:ed:4d:79:bf:32:35:05:32:64:83:0e:63:dd:
2c:08:1c:e6:74:d6:8a:81:86:41:48:a6:d1:2d:0c:e4:33:0e:
01:1f:71:9d:74:db:25:4f:af:81:9f:4f:e7:24:d8:cf:cc:80:
06:64:6f:34:87:ba:77:fd:d4:fb:5b:81:4b:27:ab:33:0c:45:
aa:69:c7:fd:22:7d:4c:ac:aa:bc:07:9f:31:1e:42:52:8b:86:
99:a0:f1:75:90:ca:e7:0d:01:37:f6:47:22:72:62:8d:ac:37:
dc:f9:9b:66:cc:3b:95:f9:ef:21:5e:a6:66:7f:7f:e6:78:3f:
47:b1:e4:bc:54:40:47:70:30:19:1d:38:7e:52:95:f7:eb:46:
c8:00:e3:ed:5b:fc:bd:fc:9e:f1:f4:91:a1:8c:e9:d0:30:59:
5e:94:32:2b:c3:80:fd:4c:31:dd:27:13:0b:4c:94:16:41:e9:
2a:e6:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org