Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6R15Q6buts6IfEIiOZIhkYhthuU.roa
File: 6R15Q6buts6IfEIiOZIhkYhthuU.roa (raw, json)
Hash identifier: QUHLowwHlft/G1wAK4+G/4RRTDq+hZBw3t4oc07EQcM=
Subject key identifier: E9:1D:79:43:A6:EE:B6:CE:88:7C:42:22:39:92:21:91:88:6D:86:E5
Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial: 32775748
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6R15Q6buts6IfEIiOZIhkYhthuU.roa
Signing time: Sat 01 Jan 2022 15:59:03 +0000
ROA not before: Sat 01 Jan 2022 15:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12731
IP address blocks: 62.201.160.0/19 maxlen: 24
185.53.220.0/22 maxlen: 24
213.128.128.0/19 maxlen: 24
185.34.67.0/24 maxlen: 24
2001:868::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846681928 (0x32775748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Validity
Not Before: Jan 1 15:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e91d7943a6eeb6ce887c422239922191886d86e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:4d:e7:c2:13:62:29:0e:3e:e4:d7:7d:f4:
73:ea:5b:af:a2:d9:93:cd:fe:87:3e:21:28:03:6d:
08:86:00:86:77:77:84:33:12:37:59:aa:e1:ca:ce:
33:d3:6d:74:fe:80:d1:0f:69:4d:f9:f9:38:ac:4b:
68:95:84:47:3f:a9:34:4f:1e:79:f5:99:b1:11:d8:
f5:1f:5b:52:e9:a7:c9:dc:53:e4:19:3d:1b:63:47:
69:2d:c8:ea:e1:24:d2:cd:0a:33:ff:cf:36:9a:f2:
21:72:49:72:b4:8b:47:fa:d7:07:25:ed:5c:52:5e:
d2:6d:a1:de:40:68:72:9a:4d:f2:11:ab:eb:72:1a:
93:59:b0:93:09:ad:28:15:09:45:7b:5d:88:c3:49:
7f:c6:a1:d4:27:67:f0:8a:77:71:a1:b7:5e:85:20:
fc:84:b2:72:e3:25:6d:0d:31:eb:2d:f3:43:27:e0:
2e:86:98:4a:86:ff:51:ef:2a:e9:71:86:4a:91:a6:
34:aa:f9:ce:29:3b:81:fb:cd:23:58:fb:14:b0:a7:
ea:5a:d3:37:cf:fb:b9:8a:de:40:8d:c5:cf:49:a3:
b3:91:be:39:f1:df:a2:3a:4e:ef:a7:67:fd:55:2f:
70:49:7a:07:92:b1:e2:ec:bd:ee:7f:48:df:2d:f2:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:79:43:A6:EE:B6:CE:88:7C:42:22:39:92:21:91:88:6D:86:E5
X509v3 Authority Key Identifier:
keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6R15Q6buts6IfEIiOZIhkYhthuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.160.0/19
185.34.67.0/24
185.53.220.0/22
213.128.128.0/19
IPv6:
2001:868::/29
Signature Algorithm: sha256WithRSAEncryption
42:65:f8:e0:1d:32:6e:22:81:cd:e8:48:cc:04:cd:a0:b7:50:
86:da:4b:32:ae:ca:6b:aa:3b:42:84:22:a7:22:10:42:66:2b:
f0:e7:7a:cf:79:91:12:1d:0f:bd:80:17:56:4d:4e:21:90:90:
b8:36:76:24:09:40:c8:12:82:eb:f1:27:0a:dd:d8:4d:8d:b3:
25:2d:82:3d:62:50:01:03:44:26:cb:d4:e7:20:35:e9:30:e5:
fe:52:6a:d4:d5:3e:d0:e6:4f:5f:7d:9b:f8:7a:c7:86:5a:fd:
dc:45:ef:8b:40:fc:c7:ff:a9:b6:68:6b:3d:cc:c9:bf:4d:9e:
2d:0c:e2:9a:8a:58:e5:97:48:ad:fd:a9:4b:2a:dd:df:e4:96:
8d:52:b4:1d:9c:f4:d3:9d:ef:fa:71:c9:86:14:04:c7:29:5e:
c7:5e:75:60:ea:70:53:fc:57:10:3b:b4:78:e3:60:14:2e:1e:
a0:31:66:bb:4b:1d:f3:47:23:cd:66:cc:f9:18:4b:99:3e:cc:
8a:10:7d:22:d3:39:94:e3:24:32:f5:44:a1:a4:fb:0d:31:b0:
99:c1:e6:61:08:36:b2:55:5c:e1:f5:6e:90:ed:ef:83:25:cf:
7c:76:ac:60:61:3b:24:c1:14:9a:a6:cf:e8:f5:94:a0:69:d1:
4d:22:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:59 2023 by rpki-client on console-fra.rpki-client.org