Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/0AANPt0_8UQdZKGmvwlC8FtwZu0.roa
File: 0AANPt0_8UQdZKGmvwlC8FtwZu0.roa (raw, json)
Hash identifier: eE3akx260L9Zlq76YF9vXM5B4ZBPNZKM+dLOADbi9xI=
Subject key identifier: D0:00:0D:3E:DD:3F:F1:44:1D:64:A1:A6:BF:09:42:F0:5B:70:66:ED
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 40D8
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/0AANPt0_8UQdZKGmvwlC8FtwZu0.roa
Signing time: Wed 27 Apr 2022 06:49:01 +0000
ROA not before: Wed 27 Apr 2022 06:49:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21087
IP address blocks: 178.217.64.0/21 maxlen: 21
195.93.128.0/23 maxlen: 23
194.176.114.0/24 maxlen: 24
91.210.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16600 (0x40d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Apr 27 06:49:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0000d3edd3ff1441d64a1a6bf0942f05b7066ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fe:84:d8:b2:21:01:c9:1c:08:32:77:d1:f1:
9f:2d:20:26:62:75:df:fb:02:0d:35:49:69:a2:b8:
0e:4c:71:98:08:9e:8b:3c:31:d1:8d:f3:ed:7d:99:
2f:fd:30:a8:d7:e4:06:51:7a:4a:f7:80:35:cf:e3:
4d:11:a3:71:7f:bd:92:ca:b1:7a:80:65:18:6c:df:
d4:ad:69:fb:52:92:cb:9b:a0:ac:97:f9:3e:4f:f9:
52:e3:c1:a5:a4:15:e9:c5:c6:ca:fb:05:26:09:21:
4e:65:4a:8e:72:86:55:03:2d:a8:c8:a6:26:91:1b:
90:56:de:da:65:b5:54:3f:5e:65:02:82:d0:c5:fa:
d6:39:0b:3f:88:a2:13:10:c7:25:88:93:fa:ef:86:
5e:11:31:66:fc:d5:ed:01:8d:34:b8:1e:5f:92:f8:
00:c0:08:c3:a2:75:8d:30:5e:a3:f2:dc:c4:f0:d3:
73:54:7a:b8:3a:42:0c:bf:1d:ba:c0:05:d9:5c:a8:
a1:8c:d2:9d:4d:d3:6c:0c:a2:5c:fe:52:00:47:d0:
21:47:71:0f:17:c1:aa:cb:1b:8d:9f:9e:ef:4a:3d:
57:86:68:a8:29:85:86:ea:05:c7:40:3a:17:95:8f:
c3:9b:95:4b:ca:dd:c8:10:29:c6:12:20:a1:a3:46:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:0D:3E:DD:3F:F1:44:1D:64:A1:A6:BF:09:42:F0:5B:70:66:ED
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/0AANPt0_8UQdZKGmvwlC8FtwZu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.160.0/22
178.217.64.0/21
194.176.114.0/24
195.93.128.0/23
Signature Algorithm: sha256WithRSAEncryption
51:54:f7:58:7f:bf:65:67:84:ff:66:e9:ef:3c:e4:7d:1f:6b:
47:62:27:4b:cb:44:f7:8a:72:de:97:1c:02:48:dd:43:47:48:
67:52:02:5a:5b:3d:79:8e:9a:ed:77:bb:e7:6b:cb:bf:44:98:
54:a0:5e:ff:67:29:3b:55:36:c2:5d:10:69:ac:2c:30:93:4d:
e2:7f:eb:7f:35:c4:28:d5:db:01:7b:92:34:e8:ff:f4:a9:26:
37:e8:38:37:89:52:99:ed:89:77:7f:92:41:fa:48:1b:36:09:
35:3d:12:8b:0f:50:c9:c4:80:bc:32:d1:1a:cd:b8:45:ee:c9:
05:de:41:52:02:a0:c5:99:f3:61:12:e9:8c:c4:41:9a:e2:a7:
22:af:d5:08:f3:b9:f0:04:4c:ff:4a:ec:74:89:0d:c2:fa:a5:
b2:3d:48:9e:8c:6f:9a:55:e5:68:72:d9:15:6d:88:55:40:32:
d4:6c:ce:e1:ad:a3:64:ad:a1:b1:ab:83:08:bf:2f:36:67:d6:
f7:18:d0:a1:65:e2:61:c7:db:e1:0e:82:76:06:db:7e:1c:e2:
08:c9:1c:e1:e0:84:3b:13:51:4d:68:ae:00:b2:60:63:09:79:
20:3a:5b:7f:94:13:87:8b:1c:92:b4:f8:ce:70:9a:81:d3:0c:
ff:01:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:00 2024 by rpki-client on console-ams.rpki-client.org