Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/M6hvH6ZnZ9P5HiDI-Vyg0egIK7c.roa
File: M6hvH6ZnZ9P5HiDI-Vyg0egIK7c.roa (raw, json)
Hash identifier: lvfGU36Y5LOa77+ST7kbMV5LYIt46pUXVnU0/NHBh44=
Subject key identifier: 33:A8:6F:1F:A6:67:67:D3:F9:1E:20:C8:F9:5C:A0:D1:E8:08:2B:B7
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 018208F9E1306EC954A65DCBE3D0246DCC14
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/M6hvH6ZnZ9P5HiDI-Vyg0egIK7c.roa
Signing time: Sat 16 Jul 2022 21:46:09 +0000
ROA not before: Sat 16 Jul 2022 21:46:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 147.189.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:08:f9:e1:30:6e:c9:54:a6:5d:cb:e3:d0:24:6d:cc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Jul 16 21:46:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33a86f1fa66767d3f91e20c8f95ca0d1e8082bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:48:7a:a6:1f:44:2a:fd:7d:91:f5:f9:9b:
16:9b:ee:89:32:94:13:29:a1:2b:bb:c1:bc:35:87:
09:20:18:35:1d:20:68:27:e5:97:af:51:1e:7a:85:
1b:a0:6f:47:e8:8d:92:fe:5c:31:cb:d4:35:5a:e8:
6b:4b:99:54:03:85:cc:c7:94:70:bb:b9:c4:b1:38:
79:ab:72:a0:6b:cf:f5:62:53:a9:53:37:97:10:91:
2a:6b:be:bb:e6:1f:bb:ea:41:55:94:61:15:34:b8:
50:13:88:b4:2c:43:45:d4:c5:2c:71:c2:7e:1a:21:
34:62:95:e6:4d:34:fe:b1:a7:15:e2:bc:18:39:ac:
70:ff:bd:38:08:10:39:a5:9f:c2:af:83:58:8c:01:
c2:30:e6:6d:3e:0b:8c:c7:6d:43:64:b3:e5:5d:3c:
ee:bf:c4:39:72:17:8a:84:bc:ba:bb:08:96:9c:b1:
fb:89:ee:19:03:1f:fb:ce:5c:12:57:c4:a4:72:3a:
9f:a6:a2:1d:71:49:f0:1c:e3:ba:3b:e5:b9:76:24:
a0:73:43:5d:62:96:05:a6:ee:b8:ed:40:2f:52:03:
ab:38:76:48:14:6f:87:bd:2f:42:f1:ec:02:47:65:
ef:32:b3:27:36:c7:ec:73:54:b6:25:0d:8e:3d:30:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A8:6F:1F:A6:67:67:D3:F9:1E:20:C8:F9:5C:A0:D1:E8:08:2B:B7
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/M6hvH6ZnZ9P5HiDI-Vyg0egIK7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.162.0/24
Signature Algorithm: sha256WithRSAEncryption
70:37:ea:2b:ef:4d:f9:94:ad:16:12:60:a2:56:d2:af:86:e3:
03:fc:0b:68:f9:d6:c6:97:69:3d:5c:7e:c6:74:31:3b:fc:28:
23:96:81:e2:00:3e:61:33:18:bc:39:82:b5:bf:1f:a3:0d:b4:
b6:33:26:39:18:74:ca:7e:13:62:2e:25:09:c4:ac:20:e0:7b:
65:b1:96:d1:ac:26:86:e7:c5:69:3d:f8:60:f1:c4:5e:a6:fb:
bd:47:c0:28:43:11:b6:8a:a1:d0:cb:86:92:41:ff:a4:4f:8c:
71:d4:ad:2c:59:f0:fb:ca:e0:18:45:43:35:66:2d:1f:a6:f5:
95:ee:0c:27:8c:15:68:2d:33:9b:14:6c:f7:f9:88:15:13:f2:
64:59:f7:54:5c:a5:7b:33:3d:e2:6b:28:d8:57:38:62:86:41:
06:57:a3:bb:d2:79:f9:67:9e:57:65:b8:7e:f2:b6:9e:79:5b:
4d:22:20:a3:c7:5c:1e:96:db:68:32:e4:6d:ba:b6:81:9d:b1:
b3:16:ea:e3:98:4d:5a:04:0a:0b:70:bb:89:61:6b:de:7d:e8:
91:90:d0:d4:75:dc:b9:3f:1a:0d:58:8f:8f:99:65:f9:9a:12:
37:f7:9c:a0:59:14:8f:d0:85:02:4d:bf:8b:56:2b:d2:33:b5:
75:a6:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org