Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/6lMsy4t7knbLG6y0jvNG71EzPoc.roa
File: 6lMsy4t7knbLG6y0jvNG71EzPoc.roa (raw, json)
Hash identifier: dPTGBaIWS5kNv+95q14nDFrfuTO5Khst0dVtKapr6QM=
Subject key identifier: EA:53:2C:CB:8B:7B:92:76:CB:1B:AC:B4:8E:F3:46:EF:51:33:3E:87
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 161BC604
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/6lMsy4t7knbLG6y0jvNG71EzPoc.roa
Signing time: Sat 01 Jan 2022 13:56:45 +0000
ROA not before: Sat 01 Jan 2022 13:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39319
IP address blocks: 94.199.224.0/21 maxlen: 21
185.47.72.0/22 maxlen: 22
2a00:ed8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370918916 (0x161bc604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Jan 1 13:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea532ccb8b7b9276cb1bacb48ef346ef51333e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:f6:bf:e0:53:c0:17:d0:d3:b6:27:7e:ce:
33:18:c0:05:3d:9d:71:74:95:26:27:30:69:e6:14:
d6:13:6b:a4:d3:d3:e4:d9:20:dc:25:30:ef:30:82:
64:b6:59:37:4d:d8:d2:fa:b2:31:ab:2d:6e:f9:cb:
91:3d:cf:87:ad:95:d5:5b:22:01:a6:ce:30:11:ab:
b1:ad:42:40:42:8f:18:db:68:03:8d:eb:57:b7:6e:
c7:e1:ca:a9:63:2a:91:b3:88:11:05:47:9c:bb:b4:
ba:55:0c:98:dc:bc:fd:ee:0b:b2:f7:e4:53:0d:ad:
e6:7c:87:8f:f9:0b:a0:61:79:ec:76:0f:72:77:d5:
5f:f7:2b:25:23:ef:a4:d0:a4:bb:2a:d1:bb:d8:ba:
66:28:38:e9:d1:18:8b:98:df:ff:36:33:a6:41:e3:
0d:55:5c:79:0b:68:f0:38:7d:d6:cf:f0:e3:4a:d0:
41:47:58:44:5c:c3:98:88:b5:df:ec:da:d9:92:3c:
9f:96:77:c1:13:01:27:c3:ce:af:e7:ef:4c:ad:e4:
85:6f:e7:8a:1f:7e:ab:07:8c:07:96:15:b4:d8:4f:
d9:a4:cf:89:6e:c2:c6:ce:14:b5:db:10:95:2b:6d:
ce:e8:66:ff:4a:40:1f:db:a4:21:a3:3e:f7:04:ae:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:53:2C:CB:8B:7B:92:76:CB:1B:AC:B4:8E:F3:46:EF:51:33:3E:87
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/6lMsy4t7knbLG6y0jvNG71EzPoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.224.0/21
185.47.72.0/22
IPv6:
2a00:ed8::/32
Signature Algorithm: sha256WithRSAEncryption
63:0f:f4:91:9c:6a:b9:d2:7c:f8:9f:11:36:32:96:fe:ae:cb:
df:0f:27:39:27:c9:c8:04:be:6d:ac:4c:b3:4d:b4:7a:2b:cf:
0a:12:6b:2b:91:4b:98:cf:a3:6a:f1:7b:0f:8e:33:2a:4e:ef:
95:ab:d4:e3:99:57:f6:bf:2b:bf:f3:61:b7:80:19:f5:5b:9d:
4a:82:44:d5:70:96:2a:f7:34:9d:64:fa:db:43:95:bc:34:77:
1e:cd:55:f7:12:d5:e8:3d:cb:8a:be:f2:1a:0a:55:e6:2a:ff:
21:b5:bf:a0:4c:3d:fd:03:f2:64:50:ed:9b:83:47:9b:9b:48:
55:ae:45:47:2b:37:1c:87:5a:7e:c1:eb:8a:3a:2b:5b:87:1a:
a0:3e:67:17:4c:96:a4:73:51:9f:c8:d5:cf:c5:be:84:f7:55:
32:75:cc:69:62:96:70:33:9e:61:89:d2:bd:c4:db:5a:a7:a4:
f9:ed:52:bb:83:dd:c5:fa:4d:37:e5:87:2f:45:86:c3:15:14:
d5:3c:15:46:7a:68:9b:6a:80:70:4b:37:49:ca:29:6e:65:68:
60:3e:b5:04:b6:ba:fd:f2:30:d9:74:74:20:f9:bd:3e:26:04:
38:b0:09:a0:8a:cd:f6:5e:cb:96:07:6e:d3:7c:8e:5a:16:7b:
3e:c1:94:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:39 2023 by rpki-client on console-ams.rpki-client.org