Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/E8CxVryDQcTp5CihXKJ5tuxdfF0.roa
File: E8CxVryDQcTp5CihXKJ5tuxdfF0.roa (raw, json)
Hash identifier: lGAmk2FeEYZfqrJIyinMA5w23SFVkhFMrx0F2M6+RH4=
Subject key identifier: 13:C0:B1:56:BC:83:41:C4:E9:E4:28:A1:5C:A2:79:B6:EC:5D:7C:5D
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 163D4738
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/E8CxVryDQcTp5CihXKJ5tuxdfF0.roa
Signing time: Sat 01 Jan 2022 00:55:38 +0000
ROA not before: Sat 01 Jan 2022 00:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24641
IP address blocks: 77.240.176.0/20 maxlen: 20
85.132.144.0/20 maxlen: 20
81.19.0.0/20 maxlen: 20
95.129.96.0/21 maxlen: 21
2a02:e98::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373114680 (0x163d4738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jan 1 00:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13c0b156bc8341c4e9e428a15ca279b6ec5d7c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:11:12:e3:ea:f7:60:10:1d:03:4d:c3:87:
18:9b:7f:9b:ae:7c:36:c7:dc:00:cf:72:34:c9:e2:
26:36:f7:eb:9a:d4:0a:fa:cb:e3:b5:2a:5f:47:bc:
8e:a2:33:d3:7f:5e:36:f9:09:26:2c:68:18:85:39:
94:85:d5:4a:b7:25:d5:2c:f5:c7:00:0a:bc:c2:91:
4d:42:97:aa:27:bd:bf:7a:d3:06:ee:9d:0d:d5:89:
de:b7:5b:35:07:7f:fc:93:ef:98:22:a8:c7:a5:86:
e0:d5:09:a4:54:02:70:59:85:91:2b:b1:32:c6:d3:
7d:35:38:fc:d1:6a:52:1a:35:40:b0:c3:30:1d:f9:
78:fb:27:53:97:fa:5d:a5:12:87:d7:cf:11:2a:74:
bd:2f:00:9c:d4:d8:64:f1:cb:11:56:27:d7:cf:de:
93:54:ca:76:ba:0d:5a:61:a8:69:b3:b1:22:71:1f:
c4:29:bc:77:cb:fc:9e:ca:ca:1d:e2:9b:9e:05:ad:
ad:59:01:57:da:cd:18:a6:a4:93:34:f5:fc:73:87:
f9:cb:1a:0d:df:51:47:0a:30:94:b0:de:73:e0:c1:
79:77:30:6f:0c:f7:54:a4:4a:cd:97:38:76:2a:37:
b9:ab:7f:65:11:19:24:9c:f9:7f:c4:22:0d:54:e9:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C0:B1:56:BC:83:41:C4:E9:E4:28:A1:5C:A2:79:B6:EC:5D:7C:5D
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/E8CxVryDQcTp5CihXKJ5tuxdfF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.176.0/20
81.19.0.0/20
85.132.144.0/20
95.129.96.0/21
IPv6:
2a02:e98::/32
Signature Algorithm: sha256WithRSAEncryption
6a:6f:5e:18:10:94:1a:98:00:eb:2b:21:43:68:0b:38:4d:05:
a2:1e:7b:1a:01:01:53:f6:27:72:e0:30:e1:55:35:10:52:fe:
06:89:cc:c5:fd:e9:7d:01:13:31:a4:ed:e0:b4:3f:68:21:69:
29:da:be:10:15:7f:05:c0:78:ef:83:d7:ac:fd:af:eb:84:f7:
1c:7e:8c:7d:35:11:7b:b9:65:28:f8:29:56:46:9e:44:37:09:
80:83:d2:a8:95:c7:51:c1:6d:c4:26:35:95:a6:87:2a:ab:a3:
7d:77:2a:45:ac:a4:ee:62:ff:d9:72:40:83:5d:95:b1:65:8a:
2a:ff:60:7b:cd:8c:2c:2b:f2:0a:95:15:5c:af:d3:b9:20:54:
63:36:ad:f5:a5:0f:61:39:15:3f:c9:3b:1b:c8:37:32:aa:07:
b8:bc:75:ba:b9:22:da:fe:cb:4f:7e:66:8f:01:40:2d:3f:18:
29:68:4c:ae:9f:c5:ef:1d:d7:ea:50:78:08:96:ad:95:fe:e2:
20:61:fa:59:63:f3:12:f4:62:35:bd:67:29:87:4f:97:3a:9c:
56:f9:7a:61:5a:1f:59:bf:17:cb:08:ea:a1:9a:c2:13:bd:4f:
12:89:d8:a9:61:ad:f0:34:a3:2c:fb:40:df:05:0e:9d:23:51:
8e:8b:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org