Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6--w7MPLZasrlBCIQrV4YMEGIOc.roa
File: 6--w7MPLZasrlBCIQrV4YMEGIOc.roa (raw, json)
Hash identifier: iQNGAI/CeXhhkwMqaEXMZ0i0ULjudJlcNZxHRRjed+c=
Subject key identifier: EB:EF:B0:EC:C3:CB:65:AB:2B:94:10:88:42:B5:78:60:C1:06:20:E7
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01851A8B003466DC2FEB1BF4D0DD368F1521
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6--w7MPLZasrlBCIQrV4YMEGIOc.roa
Signing time: Fri 16 Dec 2022 10:46:35 +0000
ROA not before: Fri 16 Dec 2022 10:46:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.11.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
87.254.16.0/24 maxlen: 24
87.254.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:8b:00:34:66:dc:2f:eb:1b:f4:d0:dd:36:8f:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Dec 16 10:46:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebefb0ecc3cb65ab2b94108842b57860c10620e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:c6:a7:22:66:4a:9f:09:fd:e3:24:f5:b1:
19:63:a0:1d:b6:3b:33:db:9f:ed:cf:a0:63:04:7e:
7f:67:d6:bb:f9:e5:0c:8a:13:c5:20:e2:28:62:8b:
a7:b4:24:6e:97:cf:e5:a3:77:dd:e6:b7:2b:a2:4f:
3e:c2:6e:e5:da:b3:92:61:68:43:05:d0:72:c1:ee:
7f:1d:69:cc:49:02:43:70:05:e3:30:4d:21:56:91:
a0:21:4d:72:c6:d2:67:79:24:05:eb:ba:00:28:1c:
fd:94:84:3e:df:59:2b:10:9b:f9:5e:79:62:4c:51:
7a:1b:56:47:c6:b9:3d:cd:0c:a4:13:05:e9:17:c8:
ba:71:48:cc:4f:67:d8:9a:65:98:05:27:2d:5f:25:
9d:d2:e2:8b:db:d3:b9:0b:da:5d:fa:55:dd:6d:57:
09:57:34:dd:ce:16:a2:38:ee:ee:c1:20:83:bf:51:
73:0d:60:cf:b1:ec:97:03:3b:21:e5:13:2d:1a:99:
f3:b6:44:51:a6:c1:9c:71:c5:6a:4a:f0:ba:cf:bc:
08:99:56:0e:5a:76:6c:82:71:32:bc:ea:88:08:39:
e1:cd:d9:2b:a7:72:5e:da:0c:8f:bb:4e:56:5b:90:
36:e4:9f:fa:16:a2:1b:5d:12:00:67:7c:37:21:d1:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:B0:EC:C3:CB:65:AB:2B:94:10:88:42:B5:78:60:C1:06:20:E7
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/6--w7MPLZasrlBCIQrV4YMEGIOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.11.0/24
87.254.16.0/23
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
42:95:62:e5:6c:b4:7c:2b:aa:c5:80:70:f2:b5:77:83:a2:9a:
c6:b9:62:60:9c:8b:19:bc:f1:21:25:7b:31:3c:b4:a0:6b:a0:
e3:45:f9:4a:27:53:fd:94:4b:89:e7:63:aa:73:34:4f:b9:28:
67:18:cd:c8:9f:a1:2a:b1:ea:33:bd:32:aa:8f:03:c6:95:17:
e0:94:14:48:e4:12:15:9d:01:41:b4:65:99:dd:b9:36:18:02:
9d:21:49:52:fa:0e:17:15:43:20:ad:6c:05:41:0b:27:87:b2:
80:6a:35:e7:fe:04:df:a0:dd:02:e6:d8:17:9c:90:ad:23:cf:
65:b7:1f:7e:3e:3a:2e:13:cd:b0:1b:b8:eb:09:e4:93:3f:6c:
62:ea:29:f1:ef:fb:c6:02:b7:fb:3c:4d:43:89:7c:f7:ab:62:
c7:85:e3:17:ca:d9:cf:24:bb:21:01:7a:09:28:81:dd:ee:86:
66:3c:62:c6:e7:46:1d:75:7e:34:68:48:dc:c9:40:b1:33:43:
1d:32:eb:f8:62:6d:02:62:8e:7c:6b:8b:1e:7e:d7:8b:4e:17:
d2:eb:ba:05:fa:04:86:ca:c4:05:ff:ee:80:fc:fa:67:0b:2c:
ed:4c:bb:dd:89:95:73:99:bd:e0:8b:43:ab:a9:c4:d2:a2:1f:
92:6d:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org