Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/aR7PgjIXcYras_Sf7X7QUfOGtbs.roa
File: aR7PgjIXcYras_Sf7X7QUfOGtbs.roa (raw, json)
Hash identifier: keb8mWezIs69EFVqFGMaqdMVuvrn9Iutlyi63kBdMGE=
Subject key identifier: 69:1E:CF:82:32:17:71:8A:DA:B3:F4:9F:ED:7E:D0:51:F3:86:B5:BB
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 03653AE4
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/aR7PgjIXcYras_Sf7X7QUfOGtbs.roa
Signing time: Sat 01 Jan 2022 07:03:30 +0000
ROA not before: Sat 01 Jan 2022 07:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48614
IP address blocks: 195.93.180.0/23 maxlen: 23
193.106.92.0/22 maxlen: 22
185.185.56.0/22 maxlen: 22
2a0b:4880::/48 maxlen: 48
2a0b:4880:1::/48 maxlen: 48
2a0b:4880:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56965860 (0x3653ae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jan 1 07:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=691ecf823217718adab3f49fed7ed051f386b5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:71:ce:7d:28:1a:61:b6:f6:bf:be:24:d9:
0c:c4:74:b0:2b:e5:9e:41:d2:6c:49:18:14:d5:80:
6a:23:09:12:c9:3e:4c:48:27:80:a4:57:19:ab:b4:
8a:f6:47:32:cc:ef:5f:3c:26:59:77:4c:46:d3:4f:
a8:2a:42:89:20:13:5a:00:a8:d8:1d:7e:3e:61:6a:
d3:e8:08:92:d2:ba:a0:fa:bd:34:43:85:b8:72:22:
f5:58:10:8f:c5:a8:e3:5a:75:d5:82:f2:4e:3a:3f:
77:d9:94:42:24:23:12:48:7f:1e:c2:18:52:5f:5c:
ff:b9:de:60:d7:fc:f2:30:6c:a2:db:49:4c:2d:3c:
7e:0e:31:3f:27:e7:33:f9:6d:67:84:be:a7:00:46:
c5:c2:dd:0a:9a:5b:a1:5b:fb:6a:c0:1f:43:ca:02:
8b:80:09:8a:63:8c:3d:92:d1:7b:44:89:aa:68:ad:
ac:b0:92:05:37:60:ae:59:26:58:87:29:90:8b:bf:
96:42:7a:ba:1b:49:33:78:df:6a:c5:86:53:c5:3a:
fc:fe:72:9e:e9:2a:ce:95:ba:39:6d:00:55:10:e9:
cb:0f:77:66:1c:d9:72:02:26:a0:a2:d3:17:b9:95:
1d:5b:7a:01:34:3b:cc:51:48:0b:bb:9b:f8:4e:f7:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1E:CF:82:32:17:71:8A:DA:B3:F4:9F:ED:7E:D0:51:F3:86:B5:BB
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/aR7PgjIXcYras_Sf7X7QUfOGtbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.56.0/22
193.106.92.0/22
195.93.180.0/23
IPv6:
2a0b:4880::-2a0b:4880:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:bc:c6:c6:dd:1f:9a:75:4c:36:ef:07:78:c6:fe:e2:59:6c:
cc:38:09:ca:83:46:5d:58:ab:d3:c6:5e:01:ff:47:8c:91:26:
13:83:20:68:ef:e9:24:4c:61:51:12:a6:03:6f:65:4a:3c:a1:
9a:87:9f:6e:61:d6:b6:f7:52:25:18:fa:5d:71:5d:0c:e0:41:
06:91:6f:5c:38:04:35:05:ef:26:54:7e:86:94:f6:d7:97:29:
e0:91:9b:c9:ae:b3:01:3c:22:46:f7:bd:9b:2a:74:7a:54:b5:
32:bf:80:0f:47:56:24:32:95:4a:9d:9c:b2:93:0a:6f:5b:f6:
8c:41:ec:de:82:99:fa:27:61:66:e6:89:5a:0b:6f:7a:4e:a2:
60:73:dc:fe:6a:18:da:e2:86:49:7a:7e:7b:ec:03:06:88:98:
1f:fe:de:93:5c:42:4c:33:5f:83:14:47:9b:19:4d:73:60:85:
de:ad:f4:46:4f:cf:ae:b9:fd:f2:f6:b4:d7:e0:d7:6a:36:27:
59:7c:a5:76:64:a7:e8:3f:c5:af:ae:1a:a3:c8:84:e0:2c:03:
a7:90:9e:ec:cf:69:28:30:0b:05:a3:a4:fe:c6:77:ed:b4:68:
fb:eb:1f:6f:7c:b0:ed:79:4b:f3:25:03:3d:8b:d4:78:6e:3a:
48:69:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org