Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6KCr4jil6tKziTMt2rdIOygFl2M.roa
File: 6KCr4jil6tKziTMt2rdIOygFl2M.roa (raw, json)
Hash identifier: GNaYELtssShUIqlcrx76ClyrwQj1mpIZk/8YvA6hLHE=
Subject key identifier: E8:A0:AB:E2:38:A5:EA:D2:B3:89:33:2D:DA:B7:48:3B:28:05:97:63
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 19BF3F94
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6KCr4jil6tKziTMt2rdIOygFl2M.roa
Signing time: Wed 13 Apr 2022 14:02:10 +0000
ROA not before: Wed 13 Apr 2022 14:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3598
IP address blocks: 194.69.96.0/22 maxlen: 22
194.69.96.0/19 maxlen: 19
194.69.100.0/22 maxlen: 24
2a01:110::/32 maxlen: 32
2a01:110:8020::/48 maxlen: 48
2a01:110:8068::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431964052 (0x19bf3f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Apr 13 14:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8a0abe238a5ead2b389332ddab7483b28059763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:e7:1c:88:0d:24:9b:78:3c:0b:c7:1e:46:
f6:9f:00:73:8b:30:bf:a8:99:1b:9f:a5:5a:73:5c:
8c:8f:a4:31:66:1d:46:31:b4:fe:c0:99:e5:22:fa:
b9:63:d7:18:ab:60:a3:f1:c0:8a:7f:4b:a0:cc:e1:
39:c8:a0:6c:0d:01:3c:a3:ae:9d:b7:12:2d:9b:a6:
01:d5:33:80:97:68:0b:7c:9b:b2:dd:2e:a5:57:4d:
85:d4:7a:c8:43:d4:2e:3e:93:bc:39:bd:8c:1a:de:
62:da:e3:97:51:05:fc:07:36:26:c7:9d:4f:22:25:
4b:37:65:7a:aa:dd:9a:4f:6a:f5:02:38:d8:e4:8f:
be:9f:f9:2a:f9:88:e4:5a:70:f4:64:f6:a0:c6:0b:
14:65:9b:61:d2:25:ba:c1:5c:2e:e0:c0:eb:d6:3e:
44:67:76:26:0a:c1:08:a3:52:32:52:19:e9:76:5d:
e5:39:d6:46:33:68:0c:a4:f9:1c:94:86:16:68:43:
94:10:de:8c:a1:9b:7d:ef:5e:71:80:51:dd:59:5e:
4d:1b:90:2a:b9:c2:ab:2a:ee:e7:52:67:ef:b5:c3:
16:e1:44:c4:18:82:83:80:a1:7e:d7:4a:0d:53:81:
77:ec:bd:5b:b6:34:b2:8b:bf:ff:a6:5c:15:c4:a0:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:AB:E2:38:A5:EA:D2:B3:89:33:2D:DA:B7:48:3B:28:05:97:63
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/6KCr4jil6tKziTMt2rdIOygFl2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.96.0/19
IPv6:
2a01:110::/32
Signature Algorithm: sha256WithRSAEncryption
85:b3:3f:2f:d2:0a:5d:26:02:5f:3f:40:c0:ac:db:93:6c:57:
df:d0:2e:db:04:d2:05:f0:a5:99:4f:77:84:0b:97:46:f6:8b:
8f:ca:a4:77:c2:fe:3d:84:40:c1:e4:39:5c:be:37:ce:4d:e9:
e4:08:0f:af:9d:e0:9a:27:ad:85:33:da:02:bd:25:d4:87:a4:
2e:6e:43:cd:32:45:3c:29:0a:90:80:ec:06:c3:8b:11:26:64:
e2:c6:00:b4:f7:3e:f0:b0:31:b3:03:7a:d0:00:2d:c1:49:01:
3c:6d:ae:31:46:01:58:db:d1:05:61:40:cc:15:98:81:52:bc:
bf:ba:fa:54:6a:5a:db:1c:76:b4:66:64:d1:ec:b6:00:e3:3d:
13:56:05:60:70:c9:89:ab:6e:07:8f:2c:3f:35:07:61:86:f7:
17:96:8f:a4:b4:56:c2:06:7d:9f:c6:89:04:57:8d:68:91:f5:
7d:ce:78:84:60:14:98:59:a4:b2:7f:64:d2:f7:97:d9:5c:53:
ec:cc:45:cb:d8:3e:dd:4e:b0:61:ab:92:2d:b0:de:5d:d7:cc:
81:c4:62:35:10:1d:c5:45:9d:25:3f:e4:cc:ba:54:1b:bf:9f:
19:58:0a:f7:ea:44:73:a4:76:9b:22:05:51:42:8c:07:4d:19:
b6:28:40:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org