Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/6lSspVkSY_r1oRtyAxCsuPbkxwg.roa
File: 6lSspVkSY_r1oRtyAxCsuPbkxwg.roa (raw, json)
Hash identifier: O62stww/XeAuqn+HeX2gzkAW6dhnPxb/3XlpmYZXNAo=
Subject key identifier: EA:54:AC:A5:59:12:63:FA:F5:A1:1B:72:03:10:AC:B8:F6:E4:C7:08
Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial: 08E55C1A
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/6lSspVkSY_r1oRtyAxCsuPbkxwg.roa
Signing time: Sat 01 Jan 2022 09:06:40 +0000
ROA not before: Sat 01 Jan 2022 09:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 378
IP address blocks: 132.68.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149249050 (0x8e55c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Validity
Not Before: Jan 1 09:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea54aca5591263faf5a11b720310acb8f6e4c708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:3e:7e:89:d0:11:5b:25:e0:94:b0:7a:52:
85:99:3f:0e:e0:39:6d:4b:8b:4d:a6:c5:07:dd:fd:
be:60:26:03:42:1f:c5:f3:04:8d:ac:6c:b7:af:21:
81:7c:33:bf:0a:98:9b:3a:23:13:92:60:50:da:50:
fa:4e:20:68:73:15:a5:3f:92:8f:bb:63:ef:c4:3e:
89:91:f5:73:4d:39:c8:73:e2:41:bc:cc:b8:1a:18:
72:a3:7d:f9:f6:0f:14:06:bd:74:eb:b1:5f:57:f5:
46:46:66:ac:e3:4e:85:66:da:87:5c:c9:b1:19:eb:
db:83:c0:82:25:bc:07:96:75:4a:cc:b6:e9:73:d7:
54:ab:b9:e1:1e:40:5d:15:6a:f4:9b:b2:60:5b:f8:
11:f9:4f:ff:88:89:23:e7:73:84:92:8e:86:84:8f:
36:dd:b3:40:3a:ae:ef:ce:7a:51:15:86:86:6f:c4:
a1:ef:11:98:c4:da:9f:83:40:07:df:b9:62:69:3e:
1c:9c:90:15:de:8d:d0:95:6f:07:1e:b0:42:65:1b:
00:31:37:a2:ac:b8:1e:9c:9e:b1:fb:2d:44:74:e3:
67:24:61:f6:9c:24:d5:b0:21:ea:a7:84:c6:a7:e1:
b0:09:83:1d:47:f8:45:35:8f:b8:7c:8a:b1:f1:08:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:AC:A5:59:12:63:FA:F5:A1:1B:72:03:10:AC:B8:F6:E4:C7:08
X509v3 Authority Key Identifier:
keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/6lSspVkSY_r1oRtyAxCsuPbkxwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.68.0.0/15
Signature Algorithm: sha256WithRSAEncryption
82:c7:92:00:be:08:60:eb:a3:15:c7:96:a1:06:5d:2e:4d:88:
7a:73:50:d6:62:cf:11:79:3a:9f:e8:d8:54:d7:a9:3b:02:f4:
9d:7e:0a:07:2c:4f:ab:44:c4:64:66:57:da:f1:55:84:01:ce:
03:f9:f6:3d:1d:6e:77:71:4a:40:f1:98:9e:64:2c:b9:25:b7:
b6:aa:36:15:d0:1d:d1:6d:ba:be:83:4d:9f:44:75:e9:7e:f3:
9e:94:7a:2a:96:13:5d:38:2d:e0:ef:7e:f6:05:09:82:78:c3:
1d:db:62:6d:c7:73:e5:15:33:43:22:4e:57:f4:b4:fa:b4:cf:
44:a4:f7:f7:f9:9b:af:cb:d1:d3:a5:7d:f1:76:04:b5:7f:77:
30:72:b8:39:e1:4e:d8:2b:17:a9:02:d4:31:44:32:ef:f9:25:
01:bc:bb:ae:72:be:22:d3:b3:53:96:be:47:31:fb:d0:aa:6f:
54:83:ff:80:ff:7b:39:55:34:92:db:1a:f9:33:42:96:dc:d5:
a8:5b:44:d8:a9:c0:4c:3b:06:36:6b:3d:95:fa:c9:38:2a:b1:
16:f9:4b:25:8a:a5:82:95:aa:67:5d:cb:9c:b5:2e:f0:d5:e3:
74:95:17:5b:32:e3:e7:f4:18:44:1c:6c:13:6c:c9:52:ef:92:
59:bf:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:56 2024 by rpki-client on console-fra.rpki-client.org