Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/6mvn1UskiUGeyUYnhwG3n_CDckY.roa
File: 6mvn1UskiUGeyUYnhwG3n_CDckY.roa (raw, json)
Hash identifier: 1TOIVuVGk3u4gUWohGNH0C2jyRlZ8v9XM7j9/X9ITcw=
Subject key identifier: EA:6B:E7:D5:4B:24:89:41:9E:C9:46:27:87:01:B7:9F:F0:83:72:46
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02BB41E9
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/6mvn1UskiUGeyUYnhwG3n_CDckY.roa
Signing time: Fri 14 Jan 2022 18:41:15 +0000
ROA not before: Fri 14 Jan 2022 18:41:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 84.247.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45826537 (0x2bb41e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 14 18:41:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea6be7d54b2489419ec946278701b79ff0837246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:0e:ed:57:1e:a2:e2:11:bd:7e:c2:0c:af:
5f:fe:dd:78:d5:31:6c:15:37:f2:51:1e:63:1c:2e:
f3:77:36:fc:b6:de:89:d3:f2:33:dc:e8:7b:fb:b8:
5c:12:7b:99:73:41:34:a8:6d:15:65:05:4b:e5:17:
34:85:7d:87:f3:50:8f:be:64:f6:38:c4:07:8c:d4:
61:fb:e4:82:ee:6a:c3:0a:05:b6:dc:ab:e6:76:e7:
4d:01:34:48:f6:93:2e:9f:39:67:d5:79:f4:a1:37:
a7:33:b1:e8:ef:36:95:75:70:b8:f1:09:ee:58:5d:
0f:87:81:cc:34:93:82:43:28:ea:3c:a5:e4:a9:d3:
93:ee:b0:6c:9a:03:15:90:f4:2b:85:62:97:7a:38:
8f:d0:73:3f:f3:4c:7b:fc:d6:ef:13:49:81:db:21:
bb:d8:f3:ad:ed:6a:62:42:d9:f7:6f:6e:48:bf:74:
38:ad:ca:36:df:60:e4:83:f5:2f:9b:cc:03:4f:87:
62:6f:9c:da:02:34:b8:48:55:fd:fa:b9:a1:29:2e:
60:2f:fa:9c:55:56:0f:44:c9:ca:6e:6a:59:c8:d4:
99:c8:e9:b5:a9:92:af:77:9f:de:bd:c6:7b:f2:3c:
a9:a2:06:8d:32:11:97:9e:31:91:78:f2:ff:1e:10:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:E7:D5:4B:24:89:41:9E:C9:46:27:87:01:B7:9F:F0:83:72:46
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/6mvn1UskiUGeyUYnhwG3n_CDckY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
Signature Algorithm: sha256WithRSAEncryption
95:eb:b6:2c:b2:17:4d:96:55:6a:28:b2:2f:8d:e2:21:c6:46:
7e:60:e5:5b:fa:7a:bc:1f:8d:2b:0e:28:04:20:5d:66:b1:25:
7b:a1:e3:0b:8a:b0:8c:77:4f:28:16:56:bb:35:aa:da:46:57:
21:6d:aa:e9:7f:5b:e8:71:58:0f:15:4d:99:c2:94:a2:9d:02:
5b:e0:c1:13:e9:ee:8f:1f:a9:24:dc:11:51:5a:c3:6f:83:77:
24:89:bd:9f:06:3a:65:cc:cb:1e:86:99:9b:14:80:bd:da:80:
3b:ab:a9:27:cd:b6:fc:58:99:45:9e:37:7f:b7:c5:4e:07:b2:
8c:13:37:8b:0d:74:9c:47:e3:eb:92:52:a5:2f:d4:5d:da:8b:
7e:ed:14:1d:b1:94:35:56:c0:b4:b8:78:88:27:5a:ec:cb:30:
bf:8b:6e:7a:63:07:ed:c5:47:41:e6:e9:51:00:4b:6f:05:ba:
82:03:d2:06:a5:55:61:56:23:78:f4:72:aa:9d:52:cc:b0:7d:
57:15:13:4b:17:bb:90:c8:53:cf:a2:91:ac:8d:c4:c7:bb:2a:
4f:95:65:4d:2c:4b:6c:28:1f:73:c8:7b:b5:94:f2:1d:b8:4a:
84:b5:a5:fd:ad:3c:bf:89:a6:56:c3:4f:b1:94:a2:a2:63:20:
0d:61:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org