Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/fhgbR7J0sIeel3pqBEsgUA0Z2SQ.roa
File: fhgbR7J0sIeel3pqBEsgUA0Z2SQ.roa (raw, json)
Hash identifier: gy+A764D/mdpyeblAmk3e38FDOKGu9L2c3yDLVAy04I=
Subject key identifier: 7E:18:1B:47:B2:74:B0:87:9E:97:7A:6A:04:4B:20:50:0D:19:D9:24
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 1B4EDCE5
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/fhgbR7J0sIeel3pqBEsgUA0Z2SQ.roa
Signing time: Sat 01 Jan 2022 14:01:33 +0000
ROA not before: Sat 01 Jan 2022 14:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13039
IP address blocks: 212.20.160.0/19 maxlen: 19
193.228.188.0/22 maxlen: 22
217.14.112.0/20 maxlen: 24
2001:40b8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458153189 (0x1b4edce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Jan 1 14:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e181b47b274b0879e977a6a044b20500d19d924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:93:41:ce:ec:76:b8:4f:b9:2e:bb:c7:ad:
f4:6a:fb:c3:0d:ac:ca:09:55:bd:f7:5a:97:8a:39:
52:92:05:17:e3:ef:47:4d:fa:dd:69:52:36:e2:c3:
09:14:ea:e3:85:d6:5e:6b:45:d0:4a:a2:f0:49:70:
af:69:28:95:6c:95:d7:5b:73:d6:d4:de:45:f2:28:
74:46:2b:d0:74:86:00:9d:45:0f:e2:50:d1:57:fe:
50:19:fa:1f:38:c8:3b:ed:8e:a2:ca:42:a3:dc:f6:
ad:25:31:90:cb:c5:50:4e:1c:c7:f0:2d:06:b7:34:
31:8b:cf:45:3a:57:71:d8:9f:39:e3:70:32:d2:d9:
f7:2a:25:50:89:e4:b7:14:cb:6c:37:4a:aa:c9:2d:
97:09:57:1b:87:ac:fb:64:13:a8:a5:cd:73:5a:fa:
ce:77:b9:99:91:7e:f8:71:ed:a7:27:39:6d:98:d7:
41:e7:91:0c:29:eb:48:e5:e9:2e:8d:dd:f9:15:ad:
a3:61:5d:a4:3e:94:2f:6a:ad:7f:1f:74:ff:a7:c0:
39:a1:58:1e:d8:fe:19:ff:92:59:14:74:ab:0f:8e:
a3:c4:03:cf:42:57:aa:02:9e:5d:08:62:d2:60:0a:
64:5c:d7:37:c7:07:41:ae:fb:6d:5f:2d:17:c2:fc:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:18:1B:47:B2:74:B0:87:9E:97:7A:6A:04:4B:20:50:0D:19:D9:24
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/fhgbR7J0sIeel3pqBEsgUA0Z2SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.188.0/22
212.20.160.0/19
217.14.112.0/20
IPv6:
2001:40b8::/32
Signature Algorithm: sha256WithRSAEncryption
7a:d6:87:c1:32:3a:c9:17:5c:c2:6c:64:be:90:e5:d5:a1:e5:
27:c6:a3:30:7b:0f:70:3f:29:72:ea:6d:f8:83:a1:dd:a9:06:
46:09:af:1d:77:cb:7a:00:03:ef:b9:1f:c5:a7:e3:7c:35:bd:
2c:a0:91:75:02:84:f0:4c:79:ec:64:95:b2:6d:f8:b6:ac:53:
d9:16:bb:c7:2d:c3:26:c0:15:51:db:34:ea:de:dc:36:3d:1f:
7b:e6:8c:46:af:4a:ae:c0:2b:18:e3:0c:4a:e1:7a:3b:e6:21:
4d:e1:09:39:69:10:cf:c4:ec:24:a2:9a:21:30:2c:09:fa:2c:
b9:e3:ac:b4:e0:f4:1a:8b:eb:b4:26:11:6b:59:3e:dc:fc:c4:
fd:64:a5:23:06:67:5f:b2:74:16:3f:9e:1f:2d:c8:ab:6c:7b:
f1:28:94:e7:3e:08:92:73:02:6f:7e:cb:03:cf:af:8e:13:12:
e0:77:11:0e:b2:ac:ef:4e:f6:fe:97:55:ed:1c:cc:a8:54:b7:
3d:10:bc:9a:d3:4d:3d:36:2d:6d:8e:b2:e4:9d:d6:48:f6:f5:
1c:56:b7:04:5c:b2:b5:50:13:f0:a0:8d:f3:85:81:79:23:b1:
bf:13:4c:27:c3:4f:ba:57:94:9a:7a:82:c0:81:c4:2b:6e:9c:
dc:41:91:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:38 2024 by rpki-client on console-ams.rpki-client.org