Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/7BdeacqKutDE_ODBFUNoBFeLg4s.roa
File: 7BdeacqKutDE_ODBFUNoBFeLg4s.roa (raw, json)
Hash identifier: WJY+wl9smUARtM7HCWncTL4Y7krZAcTO2uEU0bxVwO8=
Subject key identifier: EC:17:5E:69:CA:8A:BA:D0:C4:FC:E0:C1:15:43:68:04:57:8B:83:8B
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 3896198E
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/7BdeacqKutDE_ODBFUNoBFeLg4s.roa
Signing time: Sat 01 Jan 2022 13:04:44 +0000
ROA not before: Sat 01 Jan 2022 13:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15451
IP address blocks: 46.182.144.0/21 maxlen: 21
193.27.48.0/21 maxlen: 21
79.140.48.0/20 maxlen: 21
91.190.200.0/21 maxlen: 21
185.26.76.0/22 maxlen: 22
80.94.128.0/20 maxlen: 20
2a00:e50::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949361038 (0x3896198e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Jan 1 13:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec175e69ca8abad0c4fce0c115436804578b838b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:09:24:c7:65:5e:fe:ed:88:f5:ca:aa:f4:
f2:67:f8:c5:cf:64:d3:f1:6e:07:56:7a:eb:bd:73:
c4:dc:5d:dd:e7:cc:78:7b:2e:4e:89:d7:0b:85:36:
57:1c:a9:11:b6:18:e6:ee:ba:3a:3b:61:d0:29:d4:
b4:fd:ef:11:63:7b:e1:3f:ce:f7:b0:29:56:f5:85:
38:6f:60:64:eb:6f:aa:18:12:b0:32:2f:53:cd:c0:
79:16:2c:2b:24:f2:5e:64:58:10:f3:d7:43:d3:da:
2c:85:46:79:52:a0:52:ff:ee:ab:fe:ff:47:32:ff:
ed:9e:33:e2:5b:65:47:2b:5c:56:b6:49:6e:dd:78:
fe:07:35:fa:9b:20:b4:ba:56:6e:72:e2:36:62:23:
ad:eb:4b:aa:13:84:1f:0c:d2:a8:65:db:89:78:26:
5b:fd:d8:58:98:ee:e1:b3:16:27:b9:66:74:88:82:
2d:d5:f4:fc:5d:b6:27:e6:51:dc:3a:90:f6:ad:30:
dd:00:82:26:d1:10:b6:12:b8:2e:02:45:67:88:2d:
c0:2c:ce:11:38:fc:d2:d2:7f:4c:de:93:eb:66:be:
e6:91:30:3b:8f:41:c1:ae:bb:70:8c:f4:68:7a:d5:
4f:9e:8c:e3:f2:b7:92:56:21:e2:9d:be:1a:dd:91:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:5E:69:CA:8A:BA:D0:C4:FC:E0:C1:15:43:68:04:57:8B:83:8B
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/7BdeacqKutDE_ODBFUNoBFeLg4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.144.0/21
79.140.48.0/20
80.94.128.0/20
91.190.200.0/21
185.26.76.0/22
193.27.48.0/21
IPv6:
2a00:e50::/29
Signature Algorithm: sha256WithRSAEncryption
b2:54:11:48:53:99:e5:c6:4d:7a:64:f8:93:f2:e0:74:da:47:
b0:3d:69:f4:87:85:8b:86:a2:f4:3e:ec:ce:e3:86:bf:06:8a:
5c:01:00:89:6a:70:f8:7a:7e:0d:83:84:16:d7:29:f7:90:eb:
dd:ab:c0:90:a6:bd:81:d3:15:48:e6:d4:11:e2:3b:38:bf:68:
63:b9:b8:84:76:79:4a:42:1c:0b:5a:2a:64:d9:af:c7:23:8f:
1d:3c:1d:81:a5:8b:38:61:a6:72:7c:21:46:db:e8:81:ee:14:
91:de:5b:77:f2:c4:2f:67:fa:40:94:02:f4:f6:0b:04:99:92:
d1:f2:86:bc:9c:d0:e4:62:19:10:c6:9c:6f:67:48:35:fd:90:
86:08:86:50:32:f9:82:27:f9:fb:b5:85:a1:94:35:60:61:3d:
43:52:34:37:8e:5f:32:10:0f:2d:59:c4:59:0c:cc:1b:b3:2e:
dc:3d:f5:33:a3:e9:78:1a:0a:6a:28:31:3a:7a:fa:10:fd:1d:
b0:df:86:61:ca:bf:66:12:22:b7:62:69:39:74:99:62:21:af:
22:58:64:ef:ea:41:3f:b2:7c:4f:ba:c7:65:d1:7a:a5:b9:0b:
6a:93:bb:69:3e:06:18:02:88:f9:12:28:60:7c:68:4b:07:d0:
8d:1c:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:53 2023 by rpki-client on console-fra.rpki-client.org