Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/r6jFPJSEou_wjQ8NknP5GFzdS2M.roa
File: r6jFPJSEou_wjQ8NknP5GFzdS2M.roa (raw, json)
Hash identifier: KlNfZKmxNhoubWxrZMxxmillQ3qGQdklbhOhiCOzfQU=
Subject key identifier: AF:A8:C5:3C:94:84:A2:EF:F0:8D:0F:0D:92:73:F9:18:5C:DD:4B:63
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0184D345BBADE1DA95ACD5012581833EDF13
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/r6jFPJSEou_wjQ8NknP5GFzdS2M.roa
Signing time: Fri 02 Dec 2022 14:37:53 +0000
ROA not before: Fri 02 Dec 2022 14:37:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64080
IP address blocks: 155.254.32.0/19 maxlen: 24
45.43.64.0/19 maxlen: 24
107.181.128.0/19 maxlen: 24
198.105.96.0/19 maxlen: 24
89.33.6.0/23 maxlen: 24
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:45:bb:ad:e1:da:95:ac:d5:01:25:81:83:3e:df:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Dec 2 14:37:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afa8c53c9484a2eff08d0f0d9273f9185cdd4b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:69:6d:4e:42:ca:5b:2f:94:a8:2f:0f:68:
f3:9e:e9:7e:f8:fc:67:07:36:d8:90:d2:8a:8a:99:
dd:85:f5:52:32:6c:96:d2:f7:50:e1:03:dc:a0:a9:
98:4b:fa:6e:39:22:dd:14:bc:9e:f5:14:08:90:41:
c4:32:ee:f0:03:f8:66:51:b1:1f:ee:3b:9a:4a:a3:
88:7c:74:bb:6e:60:ac:71:c9:45:2c:87:46:c2:36:
5b:c3:9d:c5:b2:4d:dc:67:62:87:3a:f7:94:e7:b1:
44:63:b9:17:51:b4:b8:13:df:5e:71:37:3d:e9:78:
71:51:74:0a:e7:09:ce:b0:f0:23:8b:8e:7d:01:11:
a1:67:e3:91:ea:f2:d1:40:5c:f5:2a:43:1e:85:04:
b5:42:cd:23:ae:bb:05:d5:90:eb:7d:b0:96:89:57:
ad:da:3a:9b:86:d3:f1:cd:bf:46:b1:92:7b:0d:6f:
21:21:8d:34:d5:87:b7:b8:f6:5b:d1:b1:6f:58:56:
9d:bc:c3:42:85:c6:4b:9f:df:90:8e:44:a7:c4:31:
75:85:6f:fa:30:41:ce:4c:98:9d:32:80:7c:35:14:
45:44:b1:63:af:05:71:ca:be:fb:52:32:ff:09:07:
c5:0e:83:85:47:62:e8:bf:08:b9:77:10:27:41:e0:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:C5:3C:94:84:A2:EF:F0:8D:0F:0D:92:73:F9:18:5C:DD:4B:63
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/r6jFPJSEou_wjQ8NknP5GFzdS2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
89.33.6.0/23
107.181.128.0/19
155.254.32.0/19
198.105.96.0/19
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
Signature Algorithm: sha256WithRSAEncryption
8b:2d:e0:5b:3e:04:23:95:b1:e7:f6:cd:0b:32:df:4e:12:61:
e0:cf:7d:bc:e3:94:85:0d:c1:f0:53:c8:d3:20:83:10:b1:5d:
75:6d:fa:96:81:99:e1:cf:ff:18:1a:7e:23:00:9b:b4:ba:8e:
ea:cb:18:6d:bc:86:97:f2:95:d6:33:ce:bf:ec:32:17:1e:4e:
46:f5:d2:53:63:26:3e:88:b0:cc:25:01:a1:ea:7b:0a:70:21:
ba:ea:ad:bd:ea:a0:7d:9d:5d:ee:ae:e4:df:52:24:15:50:42:
07:10:90:73:74:e9:82:8e:f2:6b:ac:8d:bd:8e:1e:0d:67:0e:
1d:c8:bd:e0:c0:cf:3f:4a:d7:bf:f4:45:95:d8:fb:a2:19:6c:
b8:e7:3e:51:39:42:90:05:d6:06:70:aa:59:f4:b3:f0:4a:f2:
18:ce:a0:5e:0e:3a:cb:59:e0:ca:ed:9e:06:e4:1d:b7:2b:5b:
08:f7:fa:c4:c8:db:e9:47:97:67:a5:57:b4:6d:54:52:e1:cd:
f1:e0:50:03:90:38:36:3f:92:65:92:cc:8a:d9:b3:ea:1c:aa:
2f:0a:d1:b5:41:6e:6e:55:21:3f:dc:f8:52:3c:f8:a6:b4:ae:
f0:3d:8b:43:2e:3d:21:94:0a:e2:4e:f7:f5:35:96:86:5c:b8:
5e:75:2e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org