Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/9L2p5RCjE_P5H4QsT4GZPMP--Uc.roa
File: 9L2p5RCjE_P5H4QsT4GZPMP--Uc.roa (raw, json)
Hash identifier: riU/j3bMnFiVpOOUnl7Ox/pFn/lkPKZ3rUd+JJH89Hc=
Subject key identifier: F4:BD:A9:E5:10:A3:13:F3:F9:1F:84:2C:4F:81:99:3C:C3:FE:F9:47
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01833B3581D57897FB0E8D8902D0504BEE1B
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/9L2p5RCjE_P5H4QsT4GZPMP--Uc.roa
Signing time: Wed 14 Sep 2022 08:55:05 +0000
ROA not before: Wed 14 Sep 2022 08:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35539
IP address blocks: 46.160.224.0/21 maxlen: 21
46.160.232.0/21 maxlen: 21
46.160.240.0/21 maxlen: 21
46.160.248.0/21 maxlen: 21
93.123.192.0/18 maxlen: 18
95.131.208.0/22 maxlen: 22
95.131.212.0/22 maxlen: 22
95.131.208.0/21 maxlen: 21
93.95.160.0/21 maxlen: 21
93.95.164.0/22 maxlen: 22
93.95.160.0/22 maxlen: 22
93.123.128.0/17 maxlen: 17
93.123.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:35:81:d5:78:97:fb:0e:8d:89:02:d0:50:4b:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Sep 14 08:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4bda9e510a313f3f91f842c4f81993cc3fef947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:bf:e5:bf:f6:cc:d6:a4:12:6f:69:a7:3b:
02:f1:d2:c0:5d:a7:e8:0e:5e:66:8f:6d:62:e3:05:
4f:56:b9:2c:06:4b:92:8d:3c:1c:5f:60:ca:7b:1f:
26:0c:d6:bf:6f:e7:92:de:54:ba:a2:08:30:3d:a9:
0d:68:68:8a:ab:91:b5:29:9a:6b:a6:98:a4:26:98:
5f:74:1d:c1:ac:9b:00:80:9d:95:c7:7e:01:d3:47:
1a:c7:5f:35:fa:ab:29:7c:27:cf:cb:8b:d0:1d:c3:
7d:e7:21:f7:f4:cc:a7:da:2d:20:31:9a:37:6c:ba:
9b:d1:82:5f:bf:37:26:49:f4:d5:4f:c3:a4:cb:35:
c0:57:7e:71:ac:ad:ad:6c:65:7c:b9:c4:ed:42:f4:
95:a3:fc:2c:b0:26:24:d8:28:5d:8e:53:77:18:88:
bf:22:83:2b:88:9e:0f:56:75:50:23:2a:dd:6b:ce:
06:0f:5e:b0:e0:65:bf:3a:f1:36:a1:cf:4d:30:76:
2a:1d:ff:a7:ed:bc:a7:69:0f:38:f7:00:fc:3d:1d:
7b:93:20:7b:46:75:72:53:fc:c8:12:34:ac:0a:61:
d1:8c:8d:77:aa:ef:5e:43:bc:19:82:ef:c6:e9:d1:
c0:2e:b6:b0:b7:80:16:cb:1c:f1:20:d3:9e:ca:b5:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:A9:E5:10:A3:13:F3:F9:1F:84:2C:4F:81:99:3C:C3:FE:F9:47
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/9L2p5RCjE_P5H4QsT4GZPMP--Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.160.224.0/19
93.95.160.0/21
93.123.128.0/17
95.131.208.0/21
Signature Algorithm: sha256WithRSAEncryption
46:a6:b2:ae:ed:29:04:45:17:37:01:e4:e9:60:a8:74:e8:48:
c1:a8:aa:81:c9:09:40:e2:4f:b9:19:a1:f7:d7:a7:da:ac:c2:
ff:fa:34:b9:41:94:df:77:ad:49:55:f5:0f:61:b2:b9:92:8e:
7c:eb:ef:95:5d:12:b4:e2:4e:da:b7:9a:4f:82:7f:a7:8b:10:
8b:47:64:95:ec:e2:46:b9:db:b9:be:04:b8:be:b5:80:da:63:
88:8a:04:d0:a2:8c:1e:9d:ef:ed:79:47:86:4e:a1:27:c7:74:
05:17:01:46:d3:df:7f:b3:a0:c1:17:dc:69:f8:3d:56:71:49:
14:9c:cf:19:b2:fb:cb:52:fa:31:9c:2a:fa:17:57:41:84:93:
32:9f:64:01:d6:26:e9:3d:d3:fb:5b:02:73:9b:b8:f1:a6:01:
98:b2:ad:d8:96:ed:25:9d:a0:56:43:c7:b7:05:46:dd:66:c9:
72:63:80:a2:5f:a9:4c:ca:92:f8:0f:b9:e3:c6:d2:36:9a:e0:
23:40:ab:c0:f7:89:72:42:f0:15:81:05:17:65:a7:74:94:45:
d6:74:72:72:a7:30:fe:78:28:d5:46:d1:c7:2b:a5:84:d9:ce:
3d:a7:e7:b6:6a:58:0f:be:51:d6:e4:4c:54:50:5b:b2:a2:fa:
d9:87:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:05 2023 by rpki-client on console-fra.rpki-client.org