Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/7lc2EmpXLAs3e6fSi558mnTKKTc.roa
File: 7lc2EmpXLAs3e6fSi558mnTKKTc.roa (raw, json)
Hash identifier: bBsIM0GXJYHC3ExR+MrR/IJ2ndUj5rD/FJS+J5zVgx0=
Subject key identifier: EE:57:36:12:6A:57:2C:0B:37:7B:A7:D2:8B:9E:7C:9A:74:CA:29:37
Certificate issuer: /CN=e9bf904f418bfc7b49b85f3abdac417cca5e3759
Certificate serial: 14E3A16D
Authority key identifier: E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b-QT0GL_HtJuF86vaxBfMpeN1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/7lc2EmpXLAs3e6fSi558mnTKKTc.roa
Signing time: Sat 01 Jan 2022 05:05:36 +0000
ROA not before: Sat 01 Jan 2022 05:05:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8896
IP address blocks: 185.126.184.0/22 maxlen: 22
212.33.128.0/19 maxlen: 19
212.33.133.0/24 maxlen: 24
185.15.216.0/24 maxlen: 24
185.15.216.0/22 maxlen: 22
89.221.96.0/20 maxlen: 20
185.92.52.0/22 maxlen: 22
77.241.96.0/20 maxlen: 20
2a00:1e18::/29 maxlen: 29
2a00:1e18::/32 maxlen: 32
2a00:1e19::/32 maxlen: 32
2a00:1e1c:3000::/36 maxlen: 36
2a00:1e1c:2000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350462317 (0x14e3a16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bf904f418bfc7b49b85f3abdac417cca5e3759
Validity
Not Before: Jan 1 05:05:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee5736126a572c0b377ba7d28b9e7c9a74ca2937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:9b:7a:12:e9:a6:70:5f:4c:2c:24:ef:b5:
59:0e:96:25:39:6c:e2:9f:05:34:53:7d:d2:f9:bc:
35:d2:33:dc:a1:db:a7:99:64:77:7f:62:25:ac:d6:
1e:f8:58:d4:3d:7c:38:2c:d7:e5:26:b6:36:15:f5:
6f:6a:5c:cd:64:03:e7:5c:4d:a6:fa:d7:f3:ef:e7:
ba:6b:bb:02:7f:0d:7b:cb:3d:76:ef:d5:64:92:a7:
5b:05:f3:11:33:23:80:7e:ba:9f:e4:92:61:e4:53:
a5:53:b5:d2:c0:39:b3:36:a0:55:56:4e:af:93:90:
78:61:2e:b5:61:fd:0c:5c:c4:24:ba:d2:10:c0:31:
89:88:c6:d8:fc:71:b3:81:d4:d7:71:1f:1c:e1:7f:
06:1e:80:1c:3b:3f:9b:a0:e8:e9:cf:b1:a8:64:af:
cc:75:5f:65:9b:4e:93:00:af:b6:87:2d:9e:19:8a:
7b:ad:9b:6a:cb:c9:0f:1e:ef:cc:12:23:c0:a8:a1:
d9:ff:43:a5:c6:06:a2:35:a6:d2:a5:3b:b1:36:41:
a4:50:0c:0f:16:38:c4:aa:8e:9c:16:f2:bd:c5:94:
ea:8d:ec:8e:e5:f0:ab:26:74:89:7a:da:67:dc:44:
51:70:17:61:72:07:24:18:b5:46:de:ce:8b:30:e8:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:36:12:6A:57:2C:0B:37:7B:A7:D2:8B:9E:7C:9A:74:CA:29:37
X509v3 Authority Key Identifier:
keyid:E9:BF:90:4F:41:8B:FC:7B:49:B8:5F:3A:BD:AC:41:7C:CA:5E:37:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b-QT0GL_HtJuF86vaxBfMpeN1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/7lc2EmpXLAs3e6fSi558mnTKKTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35ffbf-485d-4906-8654-8ac7e036eb81/1/6b-QT0GL_HtJuF86vaxBfMpeN1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.96.0/20
89.221.96.0/20
185.15.216.0/22
185.92.52.0/22
185.126.184.0/22
212.33.128.0/19
IPv6:
2a00:1e18::/29
Signature Algorithm: sha256WithRSAEncryption
4e:07:be:7f:0f:14:26:67:9b:b1:29:95:7a:0c:6a:a8:8e:90:
86:bb:38:dc:fe:b2:70:d1:bd:e9:04:a3:90:eb:55:f4:a2:a0:
3a:60:26:3a:1d:f9:88:06:13:80:bb:61:76:43:87:7b:a8:75:
62:00:7b:16:02:80:4a:a6:69:dd:53:d5:99:93:42:ac:24:ae:
cf:68:2b:99:ee:d9:75:95:8a:44:77:33:f2:1d:12:c3:7e:94:
06:a7:01:5c:3b:75:37:38:2b:69:8c:a5:ca:85:f7:98:5f:68:
e3:7e:0d:6f:d3:03:a4:23:40:1f:fb:0f:7c:ae:b0:ad:cb:c9:
51:fd:3d:55:35:fa:25:e6:33:c0:52:9d:b9:e0:ff:88:43:db:
29:9c:18:f5:1f:cc:3b:b8:bb:64:7a:31:5a:b8:25:85:19:d9:
ff:d4:2f:29:f8:af:e8:71:11:84:dc:0a:77:5c:15:9e:7f:af:
56:87:98:2a:6a:cd:d6:0e:e7:82:32:c2:51:6a:24:b1:f0:5e:
1a:6f:48:72:1c:4f:2a:f8:af:f7:2c:19:7f:b2:70:ee:76:13:
58:76:7c:65:a3:ac:34:fc:3e:dc:2e:e5:3c:91:c2:89:40:83:
f9:3b:82:f6:f0:0f:11:57:2b:66:10:b3:4a:59:4a:77:fa:5f:
ae:5c:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-fra.rpki-client.org