Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/rkB7NrLq9CIU_EpTRbKT8sTs-Vg.roa
File: rkB7NrLq9CIU_EpTRbKT8sTs-Vg.roa (raw, json)
Hash identifier: qGvC0PdVnNuOngQcB4Z22FXuLBXPCXuJSt0cFhKvtuk=
Subject key identifier: AE:40:7B:36:B2:EA:F4:22:14:FC:4A:53:45:B2:93:F2:C4:EC:F9:58
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 07437A48
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/rkB7NrLq9CIU_EpTRbKT8sTs-Vg.roa
Signing time: Sat 01 Jan 2022 09:55:44 +0000
ROA not before: Sat 01 Jan 2022 09:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43128
IP address blocks: 212.44.112.0/24 maxlen: 24
212.44.113.0/24 maxlen: 24
212.44.118.0/24 maxlen: 24
212.44.120.0/24 maxlen: 24
212.44.119.0/24 maxlen: 24
212.44.126.0/23 maxlen: 24
146.247.24.0/22 maxlen: 24
185.148.72.0/22 maxlen: 24
212.44.96.0/20 maxlen: 24
2a02:e8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121862728 (0x7437a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 1 09:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae407b36b2eaf42214fc4a5345b293f2c4ecf958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:eb:db:27:26:a4:5d:d5:93:41:b8:1b:1b:
16:26:d7:bb:07:56:34:ec:4f:70:e8:bd:43:35:ab:
a8:24:67:bb:40:84:02:6b:0c:4e:b7:c5:fe:72:13:
df:e9:e5:44:6c:15:ce:88:5b:80:4c:9c:6e:40:93:
86:4e:49:e3:c7:f0:db:95:b9:6f:2f:56:dc:7e:79:
05:af:2d:41:bd:a5:90:73:6d:e5:d1:a6:21:34:08:
bd:61:d8:9e:44:87:fc:88:65:9a:f1:ac:ad:95:58:
b1:13:cc:6c:78:26:4a:7a:93:e6:97:ee:ea:02:fe:
5d:58:0a:2e:91:f1:bd:97:b5:5c:57:fc:25:bb:4c:
d3:a5:e3:ff:ec:21:b1:89:2a:6e:f3:ae:bb:c9:87:
b7:8f:80:27:6c:1b:36:fc:24:7a:22:3b:58:c4:67:
43:12:ea:05:82:01:81:f6:42:a9:f5:8c:f3:14:09:
eb:09:78:4e:c6:b9:0c:76:6b:c0:37:bc:c7:31:c2:
c9:22:81:af:d1:c9:eb:69:1e:43:86:e5:4b:f9:ea:
4a:57:d7:4e:81:7a:08:da:d0:01:f9:19:b8:9c:b8:
8d:ac:36:34:8c:28:25:2c:dd:af:41:ec:ab:f5:34:
d2:a3:6d:b7:30:12:87:54:ce:8c:e7:b5:a5:c3:c0:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:7B:36:B2:EA:F4:22:14:FC:4A:53:45:B2:93:F2:C4:EC:F9:58
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/rkB7NrLq9CIU_EpTRbKT8sTs-Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.24.0/22
185.148.72.0/22
212.44.96.0-212.44.113.255
212.44.118.0-212.44.120.255
212.44.126.0/23
IPv6:
2a02:e8::/32
Signature Algorithm: sha256WithRSAEncryption
0b:ce:94:2c:b3:e6:8c:36:fc:35:20:bf:7d:ca:76:dc:d1:ec:
1e:0d:4e:a7:8e:5b:70:94:a4:e4:fe:99:96:9d:75:83:bb:29:
c4:ad:f3:b9:6e:01:c0:ff:09:84:c6:39:db:1d:15:a8:16:87:
42:d5:71:92:a4:2c:1b:d0:de:cb:e6:9c:20:23:dc:36:6a:67:
10:99:09:95:22:df:36:fa:33:12:b3:d1:a5:81:7f:a2:6c:3c:
8d:5e:99:67:f6:df:ce:d6:5a:c9:76:11:69:71:4d:40:c3:a8:
5d:42:63:a9:8e:0a:32:84:d7:17:c3:6b:bf:0b:79:69:10:fa:
6d:a2:64:84:98:ab:1a:a6:49:f7:b1:90:46:dc:8a:25:66:59:
b4:86:36:df:94:9e:8b:bc:bb:46:80:eb:0b:e2:64:cd:ae:29:
83:16:d3:be:9c:73:b2:c5:3f:fa:06:71:2d:78:f0:35:4b:01:
83:26:2a:93:17:c5:07:c3:0c:6e:8f:ef:30:8c:d9:e1:90:1a:
4d:24:84:44:5a:6c:c1:17:e5:99:e9:e6:2c:32:ea:e5:ec:61:
83:47:21:44:5c:2a:33:fb:5a:11:8b:77:d8:c7:46:af:b8:70:
0b:17:48:48:76:13:b2:33:d7:81:31:de:84:b5:e8:65:61:d1:
f0:43:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:41 2024 by rpki-client on console-fra.rpki-client.org