Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/ETZWnoPcM5OYMXjh1MzKACuH_VI.roa
File: ETZWnoPcM5OYMXjh1MzKACuH_VI.roa (raw, json)
Hash identifier: x4/JrUH7EDkC+dVA4Ln/j7S16enT2m6rFR2BOZ0P7aw=
Subject key identifier: 11:36:56:9E:83:DC:33:93:98:31:78:E1:D4:CC:CA:00:2B:87:FD:52
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 301C10C6
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/ETZWnoPcM5OYMXjh1MzKACuH_VI.roa
Signing time: Sat 01 Jan 2022 10:56:43 +0000
ROA not before: Sat 01 Jan 2022 10:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9051
IP address blocks: 212.28.224.0/19 maxlen: 24
80.81.144.0/20 maxlen: 24
195.112.192.0/19 maxlen: 24
92.62.160.0/20 maxlen: 24
141.105.80.0/20 maxlen: 24
185.3.20.0/22 maxlen: 24
2a00:16e8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807145670 (0x301c10c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 1 10:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1136569e83dc3393983178e1d4ccca002b87fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:4e:48:c2:c1:4d:9e:fc:4c:33:44:ff:a9:
bd:b7:51:6f:08:b4:c3:49:ed:1a:49:72:5f:e7:8c:
07:09:14:6d:61:d9:ed:51:1d:82:1a:14:8f:76:bb:
9f:8e:ae:96:c3:30:1a:45:69:c0:15:14:b5:b2:47:
11:10:ec:5b:7e:6c:51:80:ff:f5:b4:6c:9e:d0:d9:
54:45:8a:7c:7b:b5:f2:28:df:60:fc:c3:1e:6e:46:
1a:50:2f:9e:8d:1b:11:44:10:47:25:11:1d:25:cf:
8b:28:72:b9:0f:8b:03:d6:3e:9f:0a:a4:18:50:85:
f2:61:ae:d4:a7:a3:47:88:ad:ee:79:19:62:65:0f:
be:1f:7b:ca:22:b3:31:01:22:ac:2c:0a:13:3f:cd:
b4:90:38:90:9f:7b:5b:12:5d:c5:10:ed:48:f0:6e:
4a:cb:74:52:57:95:f0:02:38:bd:a2:3c:e1:8d:18:
48:69:90:c0:d6:e1:57:bd:34:89:07:87:72:c6:4a:
07:28:75:a9:e8:77:61:2a:48:51:3f:32:5a:41:aa:
67:62:a0:57:10:65:6a:ac:7d:52:98:7f:2c:72:09:
ac:02:49:07:ee:89:82:e4:b8:19:30:3b:82:5a:d9:
03:4a:05:1d:58:35:04:0c:91:9d:1e:2f:ba:1b:c0:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:56:9E:83:DC:33:93:98:31:78:E1:D4:CC:CA:00:2B:87:FD:52
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/ETZWnoPcM5OYMXjh1MzKACuH_VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.144.0/20
92.62.160.0/20
141.105.80.0/20
185.3.20.0/22
195.112.192.0/19
212.28.224.0/19
IPv6:
2a00:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
66:dc:5b:58:b6:cd:5a:3e:dc:71:2e:00:ea:0f:8b:9f:aa:8d:
6d:c4:f3:10:24:b3:3c:80:e7:86:79:48:ab:13:63:5f:4a:ab:
16:c5:0d:56:dd:66:aa:cc:66:88:cd:a6:7f:e8:0b:17:d9:e0:
ec:a1:f6:55:2a:d7:ed:4e:9b:95:e6:85:8f:96:cb:71:a0:26:
b6:22:ef:b9:b8:09:83:6a:b9:b4:43:fc:40:1c:bb:bf:9d:6d:
7f:f8:60:49:40:5b:9b:9b:4c:40:b3:e5:f9:d5:a7:a2:58:1f:
88:13:47:f2:b8:45:23:86:2b:a8:b2:46:60:dd:82:d2:db:30:
e3:1b:a8:82:88:ce:82:a3:55:ae:17:12:a9:19:62:ad:c1:22:
36:56:ea:59:70:e6:f0:0c:2b:1c:d9:fd:f1:da:f9:f1:21:40:
b0:3a:62:25:0a:0a:79:11:3b:6f:32:8a:02:94:2c:fa:f3:d5:
90:a6:15:d2:b8:f1:45:97:06:11:8f:89:e6:32:01:6e:ed:c0:
f3:e1:48:40:86:c4:31:63:25:ad:e2:bf:f8:8e:87:69:d6:71:
19:d1:c3:97:c7:3f:6d:83:ee:98:7b:44:8c:69:68:3f:41:0a:
87:5a:83:20:f6:c9:bb:60:70:5f:ae:e8:77:98:b7:f5:db:54:
be:2c:98:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:30 2024 by rpki-client on console-ams.rpki-client.org