Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/1-YdGtDEeJoOtTw7GK2IpdWNp4cM.roa
File: 1-YdGtDEeJoOtTw7GK2IpdWNp4cM.roa (raw, json)
Hash identifier: hion6J6BCZCi80iJIdN25rQAp/dcU9bvuvKqxEH56hE=
Subject key identifier: F9:87:46:B4:31:1E:26:83:AD:4F:0E:C6:2B:62:29:75:63:69:E1:C3
Certificate issuer: /CN=7ab74b01307f9c3fa756196384173115e66e6c55
Certificate serial: 05AC06E7
Authority key identifier: 7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/1-YdGtDEeJoOtTw7GK2IpdWNp4cM.roa
Signing time: Sat 01 Jan 2022 03:59:17 +0000
ROA not before: Sat 01 Jan 2022 03:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25398
IP address blocks: 193.108.44.0/23 maxlen: 23
193.108.44.0/24 maxlen: 24
193.108.45.0/24 maxlen: 24
185.150.180.0/23 maxlen: 23
2a0d:7ec1::/32 maxlen: 32
2a0d:7ec0::/32 maxlen: 32
2a0d:7ec0::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95160039 (0x5ac06e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab74b01307f9c3fa756196384173115e66e6c55
Validity
Not Before: Jan 1 03:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f98746b4311e2683ad4f0ec62b6229756369e1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:5a:60:c1:3e:96:97:3f:ec:92:6f:f3:c8:
ac:0a:04:d2:81:4a:e0:46:0a:e4:68:1d:b5:13:86:
8a:03:23:e7:a2:b8:b5:65:6a:1c:0b:c9:a4:bd:1b:
47:32:67:be:67:56:01:2b:9e:88:46:4c:60:52:21:
b3:ae:91:fc:d2:9b:fb:01:57:49:f6:4e:b6:1a:76:
74:70:44:f1:a9:8e:af:7a:2c:96:c8:00:e7:97:32:
11:a1:0e:f2:78:08:e1:30:20:61:86:ea:c6:c3:ce:
79:53:90:3b:b6:03:12:29:6e:98:36:d2:a7:4d:eb:
49:ba:48:f1:86:65:67:ef:4e:ed:ed:b1:36:b5:28:
3b:5a:ec:37:3a:49:58:ad:52:b1:bb:a8:f2:11:f0:
2a:45:94:27:fd:81:a0:7f:11:5c:4f:0d:a4:ff:39:
f9:63:a9:39:fc:ff:14:45:04:5a:3b:ad:96:c9:67:
73:f0:68:ac:8a:f9:c6:45:6a:5e:f8:f3:ad:17:67:
fc:12:8a:5d:4b:70:4a:70:8c:7a:67:a4:d0:79:6e:
9b:7a:08:e5:99:69:b5:3f:1f:49:11:1d:2c:06:b3:
f6:3f:90:a7:7a:f1:72:57:de:7d:59:60:a1:20:9c:
d4:a7:8e:35:d4:c1:a9:38:35:5b:ed:b3:c3:90:62:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:46:B4:31:1E:26:83:AD:4F:0E:C6:2B:62:29:75:63:69:E1:C3
X509v3 Authority Key Identifier:
keyid:7A:B7:4B:01:30:7F:9C:3F:A7:56:19:63:84:17:31:15:E6:6E:6C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erdLATB_nD-nVhljhBcxFeZubFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/1-YdGtDEeJoOtTw7GK2IpdWNp4cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0c5f46-62b8-4af3-9b20-9f5f78352600/1/erdLATB_nD-nVhljhBcxFeZubFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.180.0/23
193.108.44.0/23
IPv6:
2a0d:7ec0::/31
Signature Algorithm: sha256WithRSAEncryption
3b:fc:cb:c4:d5:19:9d:3c:ad:af:6b:9d:f7:33:1b:f6:50:e3:
f5:6c:d8:d4:d7:7f:94:f2:ba:c9:75:2d:e0:15:88:f7:ee:2c:
2a:7d:8c:4f:96:5a:a7:aa:a4:ee:ce:8e:ae:ac:4a:bc:bb:9c:
23:48:49:a8:31:6e:25:be:3b:f7:94:41:1a:25:17:4a:1f:4e:
42:08:0c:4a:ef:3d:6b:3d:dd:a8:5a:9d:23:18:cf:4d:d1:fc:
4b:b3:0f:32:47:5b:77:67:c7:4c:4a:64:ae:54:fb:ae:bb:a5:
3e:3d:26:1b:30:ef:a9:78:c9:1b:29:44:60:3c:99:c5:22:30:
24:d9:42:7d:4d:71:e7:1a:b0:fb:6a:71:89:fb:fa:46:ce:52:
50:4e:f0:83:f7:c3:e7:e6:00:bf:61:31:86:72:30:9a:f5:2d:
85:32:3a:da:e8:df:81:37:81:93:64:5b:62:10:3f:94:84:82:
6d:92:84:7b:8a:6f:cb:00:22:d9:b0:95:22:0e:f6:55:5e:85:
f9:99:60:e0:91:10:38:48:8e:92:90:f2:86:cc:38:a6:b2:6a:
1f:4f:68:d3:a6:85:cd:ce:2d:06:17:ed:df:9e:a2:64:dd:b4:
c8:20:1a:ba:09:aa:52:45:fe:4b:f2:fe:84:d4:d8:c2:50:ed:
bc:b6:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:39 2024 by rpki-client on console-fra.rpki-client.org