Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/f-EUdK3FxxiNcqMCQVrsZMcbcq4.roa
File: f-EUdK3FxxiNcqMCQVrsZMcbcq4.roa (raw, json)
Hash identifier: 81DpYuSQyVGmB/6/Pm+IgtgiVqb/F3o1bEAE/Dc7nAo=
Subject key identifier: 7F:E1:14:74:AD:C5:C7:18:8D:72:A3:02:41:5A:EC:64:C7:1B:72:AE
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 059D9767
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/f-EUdK3FxxiNcqMCQVrsZMcbcq4.roa
Signing time: Fri 24 Jun 2022 09:58:48 +0000
ROA not before: Fri 24 Jun 2022 09:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48504
IP address blocks: 176.53.128.0/22 maxlen: 24
46.247.160.0/19 maxlen: 24
94.247.160.0/21 maxlen: 24
185.12.96.0/22 maxlen: 24
37.26.176.0/21 maxlen: 24
94.143.80.0/21 maxlen: 24
185.50.76.0/22 maxlen: 24
185.48.48.0/22 maxlen: 24
2a01:9720::/32 maxlen: 48
2a03:bd00::/32 maxlen: 48
2a01:aa60::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94213991 (0x59d9767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Jun 24 09:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe11474adc5c7188d72a302415aec64c71b72ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:bc:0d:02:08:d2:55:38:1a:d0:5a:5e:97:
f4:32:75:57:c9:b5:35:ae:6a:10:69:c2:9d:aa:18:
76:05:7e:70:14:77:59:60:34:26:55:c6:d0:c8:a8:
1a:70:68:25:e2:1c:b3:7d:b4:78:a6:2f:d4:63:08:
53:5b:0f:78:5f:d0:24:af:a7:d6:12:62:ce:a0:3e:
b3:1c:24:c1:cb:0f:c6:16:e9:ba:94:96:d2:7f:7a:
6f:c2:31:8f:3d:aa:c7:6c:4d:61:ed:90:46:da:be:
d5:81:b3:d9:60:fb:e4:69:d6:94:40:41:79:42:44:
49:e7:48:9a:8c:5a:c8:db:fb:bd:dd:d0:9e:4c:ac:
4b:44:58:a3:bf:36:26:ea:8f:4b:7b:8d:55:64:56:
cc:25:fc:68:c2:07:af:b5:5f:fb:09:04:52:1f:fb:
65:5c:c4:1e:82:8e:b0:a2:30:03:e6:0d:67:96:a1:
bd:fb:67:20:21:37:27:d3:d0:54:ae:64:7c:55:a5:
30:e4:0d:db:24:a2:27:d7:90:20:47:56:88:8f:53:
2c:00:61:f9:d8:d6:2c:05:e6:17:20:f9:9b:38:1e:
d1:48:8e:6b:a2:59:09:43:06:f0:dd:33:f9:a9:0d:
5e:20:af:0c:e0:57:60:c6:ff:e9:9a:f0:fa:02:a1:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:14:74:AD:C5:C7:18:8D:72:A3:02:41:5A:EC:64:C7:1B:72:AE
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/f-EUdK3FxxiNcqMCQVrsZMcbcq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.176.0/21
46.247.160.0/19
94.143.80.0/21
94.247.160.0/21
176.53.128.0/22
185.12.96.0/22
185.48.48.0/22
185.50.76.0/22
IPv6:
2a01:9720::/32
2a01:aa60::/32
2a03:bd00::/32
Signature Algorithm: sha256WithRSAEncryption
05:ae:ee:63:fa:f9:31:fc:ca:33:eb:73:f8:c6:b4:46:ed:50:
cf:d3:a8:ea:0c:7a:b7:f8:2a:f1:66:f7:21:c2:93:66:73:07:
38:4d:bd:91:a6:25:25:19:6d:33:d0:85:97:c2:a8:c6:04:fa:
b2:69:21:84:a8:fc:a5:48:8c:a6:f8:38:a9:d6:75:52:2f:6f:
ce:9d:ff:cf:c6:5a:83:cf:a6:d5:b2:06:e4:0b:00:ba:0a:88:
9d:d1:e3:a3:e1:61:6d:a0:ae:7f:d4:14:9d:91:74:10:11:b9:
e3:a1:66:7e:65:bf:55:0a:b4:f1:2d:1b:49:a7:b0:83:3d:39:
44:4f:99:ee:0f:b8:a0:0a:92:2b:88:10:a5:9f:d9:7f:48:94:
27:55:5c:3f:c6:d0:0f:18:35:f2:4f:2d:3f:a2:99:70:e1:46:
85:d1:7a:1c:95:8a:19:6e:64:ee:4f:1f:a4:46:d4:83:65:1f:
b9:ba:aa:4d:f2:fd:79:9d:fe:c7:2c:bf:68:38:92:51:3c:d5:
e0:c4:b4:8e:07:c7:8c:a0:01:b5:36:0b:8b:28:aa:ec:85:f2:
1a:19:ab:d6:22:7b:65:4b:8f:6a:b1:ff:13:46:e0:55:1a:a4:
8b:2f:79:d6:fc:b5:60:3c:1f:2d:f6:4d:b6:74:65:ef:5f:06:
f0:88:61:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:19 2024 by rpki-client on console-fra.rpki-client.org