Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Z6mCUViAv4IwKPVjRebdPRgGnqY.roa
File: Z6mCUViAv4IwKPVjRebdPRgGnqY.roa (raw, json)
Hash identifier: UcArN7MWOntkY5ew4mtbjyqnIUk+Q82JVlmVDoj4Z7A=
Subject key identifier: 67:A9:82:51:58:80:BF:82:30:28:F5:63:45:E6:DD:3D:18:06:9E:A6
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 09278E02
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Z6mCUViAv4IwKPVjRebdPRgGnqY.roa
Signing time: Sat 01 Jan 2022 03:56:39 +0000
ROA not before: Sat 01 Jan 2022 03:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42894
IP address blocks: 145.31.0.0/16 maxlen: 24
145.50.0.0/16 maxlen: 24
145.45.0.0/17 maxlen: 24
131.237.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153587202 (0x9278e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 1 03:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67a982515880bf823028f56345e6dd3d18069ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:19:46:44:9f:d6:94:39:be:be:1c:70:15:
7f:f7:ce:34:e8:67:54:27:de:86:41:b3:b7:bc:f1:
dd:8e:5e:29:e0:2e:fc:14:37:74:8b:4f:de:c7:ce:
47:a8:24:6a:af:48:25:7e:67:32:da:11:df:cf:4a:
bb:57:07:19:ca:1f:b5:7d:4b:29:6f:17:0b:eb:3c:
64:5d:9a:4c:fc:71:d0:03:89:eb:d4:dc:0e:6c:93:
64:6b:24:89:9e:7f:9a:bf:1b:e3:d4:0c:19:91:1d:
b7:b9:b7:43:27:85:d5:dd:8a:53:01:2e:01:85:9d:
73:4c:70:ca:17:ee:cf:f0:8c:57:c8:dd:eb:10:74:
1d:2e:46:49:f1:ab:52:46:08:9c:1a:2b:0b:92:10:
46:8e:95:90:cd:38:fe:cf:20:31:56:b7:d2:23:64:
6b:56:63:79:4b:1d:e3:bd:78:87:1e:dc:06:29:58:
6b:62:9f:6c:7c:bc:06:33:9e:d6:43:0b:70:ac:cf:
29:e7:80:ad:f4:15:e0:0e:7e:1f:d8:21:90:8f:2e:
78:76:2a:62:00:c3:7d:4e:d4:88:c2:0b:61:17:ef:
35:da:ca:b0:ad:ca:9c:3a:8e:8d:1f:d1:6b:98:0d:
a8:37:09:c5:af:64:04:c2:72:fc:ae:9d:8b:4b:ab:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A9:82:51:58:80:BF:82:30:28:F5:63:45:E6:DD:3D:18:06:9E:A6
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Z6mCUViAv4IwKPVjRebdPRgGnqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.237.0.0/16
145.31.0.0/16
145.45.0.0/17
145.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:b6:e6:9f:8a:52:f4:4a:cf:55:09:f9:d0:c6:07:1f:93:60:
ab:2f:1f:42:2a:6f:c6:6e:e9:1f:b8:af:b8:ca:b9:94:76:b5:
07:ba:06:d3:bf:37:43:96:86:5b:24:d2:32:c4:35:cd:2f:53:
cd:88:7f:f7:cc:7c:dc:db:22:59:fe:87:1c:cf:5e:d6:08:e1:
85:cc:2f:49:85:0a:e4:98:ac:f9:de:3a:c2:d6:51:2d:ac:18:
96:50:41:27:e0:8f:4b:b5:86:6d:9d:76:9e:41:bc:42:d8:47:
d7:bd:45:3f:8e:69:e4:b3:6c:1a:f7:d0:3c:c4:34:90:55:09:
01:a1:fa:14:d4:36:0e:db:1f:3a:3e:c3:39:be:56:b6:d5:ce:
57:ca:9c:8c:2b:e9:b5:ba:3a:64:7d:c2:9c:3f:8b:86:1f:ab:
92:2c:e0:84:85:8c:83:03:72:d0:a8:60:dc:7e:aa:1f:8b:c9:
05:27:55:d0:5c:ba:a2:9c:41:d4:10:35:2a:5a:7f:26:e3:a5:
b6:ee:47:82:60:c2:30:62:06:16:2f:32:77:c0:c2:88:14:9a:
65:12:5d:81:08:dc:54:16:9c:15:0c:f9:cc:dc:c6:a0:72:7f:
e0:47:40:69:6e:cb:ea:fc:46:8e:42:a8:9d:df:20:15:81:60:
90:97:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:02 2024 by rpki-client on console-ams.rpki-client.org