Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/HeuL4Pzk3qoWnbAKRgji77WEcrg.roa
File: HeuL4Pzk3qoWnbAKRgji77WEcrg.roa (raw, json)
Hash identifier: HkbFBHM4dMumNLlmaE7gXniM8aG53PZBrc2gsZmTzsw=
Subject key identifier: 1D:EB:8B:E0:FC:E4:DE:AA:16:9D:B0:0A:46:08:E2:EF:B5:84:72:B8
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 061BBCDF
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/HeuL4Pzk3qoWnbAKRgji77WEcrg.roa
Signing time: Sat 01 Jan 2022 14:57:55 +0000
ROA not before: Sat 01 Jan 2022 14:57:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201466
IP address blocks: 185.160.168.0/22 maxlen: 22
45.134.152.0/22 maxlen: 22
185.222.164.0/22 maxlen: 22
193.36.144.0/22 maxlen: 22
185.73.168.0/22 maxlen: 22
195.191.48.0/24 maxlen: 24
2.57.108.0/22 maxlen: 22
195.242.72.0/22 maxlen: 22
2a07:bec0::/29 maxlen: 29
2a03:4460::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102481119 (0x61bbcdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Jan 1 14:57:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1deb8be0fce4deaa169db00a4608e2efb58472b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:05:97:65:73:04:0f:b1:0c:d2:fd:87:97:
e3:a1:93:23:1b:fd:11:db:4c:bb:16:5e:be:f4:cf:
0f:09:7b:95:09:a9:a2:f9:42:79:bd:86:92:56:99:
40:c5:9b:82:53:a1:08:2c:76:62:0c:b0:76:32:c8:
82:84:19:b1:b1:8b:37:87:24:cf:12:40:90:8e:cd:
e1:8a:d8:88:e7:6d:f7:0e:ce:07:57:c5:31:0f:4d:
35:5a:81:3b:a1:c3:ec:1b:0c:c5:07:fe:40:b0:e7:
10:c9:6b:47:5f:29:6e:4b:a4:96:9e:91:69:10:6a:
3c:8f:cd:9a:51:86:14:a5:e3:9d:33:b0:cb:9e:bd:
df:1e:a4:7b:e9:c7:24:80:b0:53:68:f7:15:6f:db:
f5:76:68:19:5c:4e:cc:c1:5f:db:f3:ce:e0:50:3b:
3b:50:70:c1:7c:ff:44:89:85:9f:ae:f1:93:8c:bc:
e1:33:84:d3:c8:30:19:9d:b7:49:3c:91:f6:2a:99:
b1:17:e6:29:75:2c:0a:e6:6d:b7:97:71:5f:d3:cc:
58:ab:83:5b:48:d6:14:5d:c0:d3:78:f4:ed:04:5e:
27:36:cb:53:04:7a:ca:04:89:78:3a:1e:01:86:6d:
41:6e:5a:4b:8c:44:fd:a0:28:c3:3d:8d:f8:16:58:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:8B:E0:FC:E4:DE:AA:16:9D:B0:0A:46:08:E2:EF:B5:84:72:B8
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/HeuL4Pzk3qoWnbAKRgji77WEcrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.108.0/22
45.134.152.0/22
185.73.168.0/22
185.160.168.0/22
185.222.164.0/22
193.36.144.0/22
195.191.48.0/24
195.242.72.0/22
IPv6:
2a03:4460::/32
2a07:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
25:d7:57:83:57:eb:10:af:1f:a9:d7:08:c8:34:1d:c7:5f:91:
03:51:2e:2c:5b:9f:9f:f6:8b:77:80:16:41:0d:35:0f:bb:82:
d7:6a:88:20:3d:ad:0b:3e:50:45:7c:e7:7b:c1:d9:07:90:f6:
40:0b:13:7c:cb:09:b1:14:17:b8:08:67:6c:c7:70:44:f2:c1:
e0:a8:3a:8a:e4:2d:13:0e:ce:6c:1f:30:63:76:1a:a6:01:22:
0f:91:f5:6c:a0:68:5c:72:98:37:e1:31:d0:7c:52:98:e8:4f:
66:23:57:3c:57:19:64:ea:bd:32:55:5b:40:f1:c0:17:3d:93:
f6:d1:bf:41:c3:60:a3:68:93:2b:f6:d8:7a:f2:77:7d:22:d8:
22:b9:44:9a:14:1a:6a:4b:60:54:76:3d:1f:aa:68:d3:b2:49:
55:79:37:df:42:e0:a6:0a:09:f6:3f:c5:a8:f6:f1:dc:38:e1:
17:ef:f8:39:88:b0:3c:d0:68:29:c6:30:ae:99:1f:e0:67:d0:
90:81:cd:e0:34:59:e8:23:bb:da:b7:f3:0a:d7:e8:c8:25:fa:
e6:f5:40:35:a4:05:cc:44:cf:1a:73:ac:6f:fa:2c:e7:f1:45:
b7:98:51:22:cb:ef:4a:ea:62:2f:0f:3b:22:f6:aa:92:a2:80:
e8:a9:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:39 2024 by rpki-client on console-ams.rpki-client.org