Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/rg0Dnh5Ps30fbkOjUC5t8UZb4hs.roa
File: rg0Dnh5Ps30fbkOjUC5t8UZb4hs.roa (raw, json)
Hash identifier: j3yvrQvnaLBp+vaIoVBCsrGRkipty+OACaLVuzjfX3Q=
Subject key identifier: AE:0D:03:9E:1E:4F:B3:7D:1F:6E:43:A3:50:2E:6D:F1:46:5B:E2:1B
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 1A65E053
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/rg0Dnh5Ps30fbkOjUC5t8UZb4hs.roa
Signing time: Sat 01 Jan 2022 15:56:31 +0000
ROA not before: Sat 01 Jan 2022 15:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48526
IP address blocks: 94.252.0.0/17 maxlen: 24
185.3.44.0/22 maxlen: 24
185.40.60.0/22 maxlen: 24
212.66.64.0/19 maxlen: 24
31.204.88.0/21 maxlen: 24
2a04:81c0::/29 maxlen: 48
2a00:4180::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442884179 (0x1a65e053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Jan 1 15:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae0d039e1e4fb37d1f6e43a3502e6df1465be21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:f2:12:46:b3:90:d7:f6:3f:75:e8:7d:19:
26:5c:06:55:e4:8b:db:d2:4c:e9:71:34:55:ef:01:
a2:7c:c8:3c:c7:5e:5b:41:e3:c6:a1:7b:3b:b4:60:
95:c4:bf:fa:93:58:11:b1:ea:57:9f:0c:b4:f5:7b:
74:d2:03:65:f3:6d:ad:1c:25:f0:fc:2d:2b:16:94:
65:dc:3b:1a:52:00:f1:18:49:7a:a4:84:b8:0c:93:
6b:e4:c2:fa:05:b8:49:b9:fa:e4:b1:0a:96:ad:c3:
77:65:7e:bb:e6:68:50:4a:c7:85:15:ca:29:18:72:
0f:79:49:49:9e:7a:f2:38:c2:1f:dd:38:eb:59:db:
f7:71:87:2f:62:1e:1d:8d:7e:65:17:98:4f:76:f0:
bb:5c:b1:4d:e2:07:09:9a:01:ae:14:fe:65:e6:89:
03:51:c5:d3:ec:63:aa:7c:a5:ec:fe:f4:d8:ed:70:
f1:e2:ea:e3:96:07:53:ab:2e:90:42:25:fa:0d:c5:
e3:7e:5c:72:6e:0b:c1:4a:d7:64:9d:cb:8f:af:7b:
0a:b3:4e:7e:a4:aa:5a:df:38:72:d7:e1:62:0d:51:
06:de:c1:34:5a:bf:bd:3a:3b:b6:70:51:23:d2:70:
f6:c5:db:12:11:55:82:28:b1:fc:1e:a3:32:3a:a6:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0D:03:9E:1E:4F:B3:7D:1F:6E:43:A3:50:2E:6D:F1:46:5B:E2:1B
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/rg0Dnh5Ps30fbkOjUC5t8UZb4hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.88.0/21
94.252.0.0/17
185.3.44.0/22
185.40.60.0/22
212.66.64.0/19
IPv6:
2a00:4180::/32
2a04:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
83:6e:39:f8:6d:02:7a:93:a7:92:4a:54:ed:42:03:f6:eb:ca:
9e:f1:32:9b:08:c1:b1:61:d5:9b:b5:37:8b:aa:47:7c:25:33:
93:1f:e5:3f:6d:c2:5c:07:e8:62:9c:fc:7e:0d:e1:bf:a8:7f:
1b:45:57:92:85:24:a5:ac:16:2b:12:d3:95:fa:d0:27:db:1f:
84:c1:fc:de:ed:d7:37:fe:8d:62:79:37:b3:a8:32:5a:b6:3d:
14:d8:06:13:ea:73:5f:33:cb:de:a6:49:a4:63:4b:ac:af:ce:
e5:fa:c6:76:5b:a1:9d:bc:09:7c:ae:5b:1d:d9:20:1f:e6:3a:
97:3d:bb:8b:6f:5d:e5:5f:e3:c7:a5:d5:4d:9e:fc:aa:81:c6:
74:60:f5:e0:ce:e7:4f:f8:e2:64:f9:c8:2e:44:74:56:5f:dd:
65:e7:48:4f:43:89:86:be:c2:7a:22:ac:7c:88:ff:a3:24:86:
27:72:49:35:2e:81:0c:07:de:53:37:bc:14:66:36:21:0c:0a:
1b:bf:73:05:51:94:2e:dd:75:ed:2e:c6:99:06:80:11:a2:38:
02:7f:bc:57:c5:af:7d:94:df:5b:5d:69:92:02:b2:4d:f7:2d:
a9:ad:95:c7:bb:62:a1:32:04:ed:0e:22:3d:cd:24:94:f3:ce:
46:4f:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:34 2024 by rpki-client on console-ams.rpki-client.org