Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6DxLifYjbMSHkGIx8t55VO1a-qc.roa
File: 6DxLifYjbMSHkGIx8t55VO1a-qc.roa (raw, json)
Hash identifier: g1tb/nQkI3Y8kn2UfRC8QxBvp6b5YGn8CSF3LLXAA9s=
Subject key identifier: E8:3C:4B:89:F6:23:6C:C4:87:90:62:31:F2:DE:79:54:ED:5A:FA:A7
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01838D59FDB228BE29D9F98CAD0A1A8266FE
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6DxLifYjbMSHkGIx8t55VO1a-qc.roa
Signing time: Fri 30 Sep 2022 07:43:48 +0000
ROA not before: Fri 30 Sep 2022 07:43:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47596
IP address blocks: 193.19.110.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:59:fd:b2:28:be:29:d9:f9:8c:ad:0a:1a:82:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Sep 30 07:43:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83c4b89f6236cc487906231f2de7954ed5afaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:87:a3:4e:03:9c:b2:3c:23:af:fe:78:1d:
cc:71:f0:aa:d1:37:c1:b5:b0:dd:60:d5:98:64:26:
9a:45:11:4d:b0:fc:60:36:60:cd:f7:38:d6:c9:7c:
2c:89:2b:7f:90:6f:d1:18:64:4b:e7:b6:f3:2c:7f:
c2:ad:2a:13:72:28:a6:40:97:71:d5:06:1e:21:2a:
8f:ac:81:77:6a:7d:45:5f:85:45:a2:20:a4:a0:ff:
a0:17:5c:b8:ea:9b:9f:3e:bd:8d:dc:48:93:b1:c6:
98:b2:e5:de:cb:c5:4c:7b:23:99:10:34:c0:22:cc:
b2:b8:93:fb:b6:0b:02:3e:12:4b:88:1a:0a:d6:58:
f6:e6:a2:ad:d1:46:bf:0b:af:af:4c:25:9b:21:04:
4e:f0:d4:6b:b5:23:dd:5c:30:94:49:c4:d1:20:7f:
7f:c3:18:3b:95:58:e2:29:0d:06:e8:6e:4c:bd:a8:
c3:f6:8f:21:23:37:dc:ae:9a:cd:77:86:da:d9:3e:
34:53:56:85:8a:4c:b1:8a:28:72:c2:60:fa:cb:80:
12:4d:a1:08:0a:29:a2:58:9f:9d:02:a9:cf:b7:14:
54:1e:d8:37:b3:60:ab:5e:b5:29:bb:32:68:df:45:
a0:5a:67:e5:16:82:b0:82:98:84:ab:44:f4:fa:3c:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:4B:89:F6:23:6C:C4:87:90:62:31:F2:DE:79:54:ED:5A:FA:A7
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/6DxLifYjbMSHkGIx8t55VO1a-qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.110.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8a:d7:4d:b6:08:28:ce:83:0b:ca:e3:c7:f8:35:80:bf:ce:
08:33:49:7f:10:be:19:80:32:a8:13:06:9c:b7:eb:20:fd:41:
1c:36:4c:64:e2:7a:71:e1:a2:66:66:f7:98:4b:34:6b:78:b6:
37:e9:e9:b9:88:3c:12:ab:c8:1f:12:cc:91:29:c7:1f:e0:b1:
79:fc:7e:4b:16:9a:f1:c8:16:48:85:9c:5e:56:96:05:52:26:
db:cd:99:f7:ad:c2:7d:55:69:b6:4b:a3:f8:3e:91:32:86:55:
94:5d:7a:28:f0:d7:81:1f:57:6e:69:e8:7c:f2:e0:0c:31:99:
e0:0f:0f:9d:47:66:cb:14:cd:1a:21:60:84:86:85:d4:b5:b3:
a0:60:42:4c:1d:1e:15:ee:07:87:cf:13:54:fd:80:fa:cb:07:
e9:7f:ef:bb:4c:85:51:9d:be:bb:2b:c3:ab:e7:86:11:fd:40:
50:ba:d4:5e:67:27:92:45:80:3e:fe:c3:3c:2c:ed:30:fe:f3:
6f:81:ea:49:f9:49:33:fd:8a:df:28:29:4f:2e:51:c3:f1:16:
bf:b3:a9:5f:48:eb:57:6e:e6:09:ae:fb:cc:89:c1:e4:38:53:
e5:19:50:5e:60:23:d3:cb:b3:83:18:da:d8:77:7a:6a:3c:d5:
20:42:cb:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYONWf2yKL4p2fmMrQoagmb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjIwOTMwMDc0MzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODNjNGI4OWY2MjM2Y2M0ODc5MDYyMzFmMmRlNzk1NGVkNWFmYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD6Ho04DnLI8I6/+eB3McfCq0TfB
tbDdYNWYZCaaRRFNsPxgNmDN9zjWyXwsiSt/kG/RGGRL57bzLH/CrSoTciimQJdx
1QYeISqPrIF3an1FX4VFoiCkoP+gF1y46pufPr2N3EiTscaYsuXey8VMeyOZEDTA
IsyyuJP7tgsCPhJLiBoK1lj25qKt0Ua/C6+vTCWbIQRO8NRrtSPdXDCUScTRIH9/
wxg7lVjiKQ0G6G5MvajD9o8hIzfcrprNd4ba2T40U1aFikyxiihywmD6y4ASTaEI
CimiWJ+dAqnPtxRUHtg3s2CrXrUpuzJo30WgWmflFoKwgpiEq0T0+jzUmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOg8S4n2I2zEh5BiMfLeeVTtWvqnMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvNkR4TGlmWWpiTVNIa0dJeDh0NTVWTzFhLXFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRNuAwQA
wSv4MA0GCSqGSIb3DQEBCwUAA4IBAQAZitdNtggozoMLyuPH+DWAv84IM0l/EL4Z
gDKoEwact+sg/UEcNkxk4npx4aJmZveYSzRreLY36em5iDwSq8gfEsyRKccf4LF5
/H5LFprxyBZIhZxeVpYFUibbzZn3rcJ9VWm2S6P4PpEyhlWUXXoo8NeBH1duaeh8
8uAMMZngDw+dR2bLFM0aIWCEhoXUtbOgYEJMHR4V7geHzxNU/YD6ywfpf++7TIVR
nb67K8Or54YR/UBQutReZyeSRYA+/sM8LO0w/vNvgepJ+Ukz/YrfKClPLlHD8Ra/
s6lfSOtXbuYJrvvMicHkOFPlGVBeYCPTy7ODGNrYd3pqPNUgQstV
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org