Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D75Ue5Dnv-vP7CbfVxK7wuQSo2s.roa
File: D75Ue5Dnv-vP7CbfVxK7wuQSo2s.roa (raw, json)
Hash identifier: 5vTS4qsX3+EMqZmuk8NCidgyrXr+SjESXOMCypdgp4M=
Subject key identifier: 0F:BE:54:7B:90:E7:BF:EB:CF:EC:26:DF:57:12:BB:C2:E4:12:A3:6B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 1808E7D9
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D75Ue5Dnv-vP7CbfVxK7wuQSo2s.roa
Signing time: Sat 01 Jan 2022 04:00:34 +0000
ROA not before: Sat 01 Jan 2022 04:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200475
IP address blocks: 213.91.148.0/23 maxlen: 23
213.91.146.0/23 maxlen: 23
213.91.146.0/24 maxlen: 24
95.43.224.0/23 maxlen: 23
213.91.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403236825 (0x1808e7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fbe547b90e7bfebcfec26df5712bbc2e412a36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:68:b7:29:3e:53:92:f7:78:8c:0a:42:75:
46:42:12:e8:c6:fa:97:af:6a:7f:12:8a:93:f3:01:
81:25:45:68:4e:1c:d6:dd:e9:71:a1:14:79:05:01:
87:5b:fe:8f:5e:cb:6a:5a:9e:83:5b:4a:7f:d1:7c:
4b:4c:27:57:61:eb:0c:46:64:28:36:c4:f3:e6:aa:
43:bc:bb:98:42:7b:89:34:e5:7d:05:b2:62:51:df:
c6:c0:6a:5f:cd:cd:42:42:80:45:82:b5:d2:a6:8b:
94:5a:94:7e:ad:60:3f:13:20:d1:11:c4:b3:b6:de:
37:57:68:75:81:e5:5e:88:aa:1c:71:e0:e6:4c:cb:
9f:2e:90:8e:98:59:3a:6c:31:ff:54:f7:46:13:89:
85:66:cd:7d:e4:63:a4:ca:c8:bf:24:0d:79:c7:e4:
e6:05:6e:7b:ab:c3:b1:e4:41:72:4a:b9:86:73:22:
8f:74:01:33:33:fd:6e:94:88:b2:30:d2:b6:4e:ef:
69:87:c1:55:ed:8d:c9:fc:59:d7:c6:2c:7a:88:51:
aa:4f:51:3e:b7:7c:e6:64:f3:a4:9b:3b:99:be:37:
1d:aa:74:4d:21:3e:9f:0c:ee:86:9c:a9:b6:20:0e:
3b:01:82:9d:ed:0c:b2:a7:bd:19:35:70:28:09:98:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:54:7B:90:E7:BF:EB:CF:EC:26:DF:57:12:BB:C2:E4:12:A3:6B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/D75Ue5Dnv-vP7CbfVxK7wuQSo2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.224.0/23
213.91.140.0/24
213.91.146.0-213.91.149.255
Signature Algorithm: sha256WithRSAEncryption
82:cb:35:3b:b8:89:33:23:c8:35:42:a4:8f:81:98:b6:5a:6b:
34:92:a4:48:cd:f8:6c:ea:86:d2:72:e5:d8:0d:8c:aa:40:93:
3e:09:68:77:ba:a6:c2:c3:31:35:e7:57:6f:a2:01:c8:c3:c7:
6a:1c:8f:03:a1:c2:bb:d8:4f:a6:22:db:41:5e:d1:41:04:e4:
cf:0a:d1:b8:8f:84:62:48:7c:24:f3:41:f9:7a:f4:19:a5:97:
a2:0c:9e:e6:19:43:f1:29:10:a2:d2:2c:59:69:fe:6d:d5:77:
fe:ff:cc:e4:f9:52:8f:f3:f7:7f:5b:9b:76:6a:82:4d:54:04:
2b:f4:39:6c:1f:c8:95:65:29:53:4b:71:1c:69:a8:bf:f8:df:
89:2a:70:f7:1e:7a:4e:a1:11:29:2f:36:f7:f8:26:36:7e:75:
a6:c2:0c:df:2b:8f:41:cf:4d:2e:78:0d:3b:30:30:ff:c8:3e:
fe:5c:48:4b:82:2a:fb:b8:b8:82:f0:e3:47:c5:ec:9c:b5:1f:
10:bd:e1:28:2e:1b:37:92:14:67:91:e5:33:4a:59:33:39:e6:
d1:32:49:3a:79:1a:e7:4c:5d:8f:a1:c7:8f:a7:2b:83:cc:98:
9b:94:21:3d:12:ed:ee:b8:27:7b:af:58:a5:d8:63:d1:25:37:
38:0f:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org