Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/v-EkUP-zvY_G0c6GPeD50QYuZFM.roa
File: v-EkUP-zvY_G0c6GPeD50QYuZFM.roa (raw, json)
Hash identifier: cAeX29BR431ipfckML1z+r8y39tS2qvLspbkrNuon74=
Subject key identifier: BF:E1:24:50:FF:B3:BD:8F:C6:D1:CE:86:3D:E0:F9:D1:06:2E:64:53
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 07F3513C
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/v-EkUP-zvY_G0c6GPeD50QYuZFM.roa
Signing time: Sat 01 Jan 2022 06:03:28 +0000
ROA not before: Sat 01 Jan 2022 06:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199907
IP address blocks: 185.42.172.0/24 maxlen: 24
185.42.174.0/24 maxlen: 24
185.42.175.0/24 maxlen: 24
185.42.173.0/24 maxlen: 24
2a01:63a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133386556 (0x7f3513c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Jan 1 06:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe12450ffb3bd8fc6d1ce863de0f9d1062e6453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:a4:13:96:bf:92:60:0c:a2:0b:cb:5d:da:
1d:ef:ce:50:65:5c:94:b3:9d:e0:2f:2f:35:f6:d9:
05:7e:16:f8:cc:0a:bd:1a:8c:66:87:c8:a4:05:b9:
11:cd:6a:b6:4e:5d:8f:54:1d:8b:77:31:6e:6e:2a:
38:09:f3:03:47:6d:1c:ca:ba:aa:e3:2c:ce:9b:8e:
21:9b:79:cb:fe:4c:e0:ad:64:c4:1d:48:38:07:e7:
a3:69:bc:b9:89:57:fc:c8:1c:41:5d:04:85:4a:a8:
0b:a2:8f:0f:4d:e1:39:ca:d5:fd:fb:13:db:9a:79:
c1:7f:c3:de:e6:44:92:2f:cc:2c:15:02:43:cc:db:
dd:41:e1:53:a1:7f:8b:82:ed:3c:d2:a9:1d:70:7d:
81:34:53:c4:8e:3f:68:8b:23:1e:8f:43:86:33:a8:
e0:22:92:70:3a:7f:11:38:0e:24:e6:27:f9:a3:3a:
a2:67:7d:a9:12:b7:4d:4e:ce:40:e4:eb:45:54:89:
80:7e:17:50:11:ce:4c:b7:28:b1:b2:d4:89:b4:fc:
ae:43:d3:0a:d1:9e:d4:68:d7:9c:42:84:f4:67:cd:
72:98:57:0e:2f:0e:5b:d5:09:f7:6e:a6:17:87:a2:
c9:76:75:f6:26:d4:8f:ad:79:eb:5c:cc:8d:31:f8:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E1:24:50:FF:B3:BD:8F:C6:D1:CE:86:3D:E0:F9:D1:06:2E:64:53
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/v-EkUP-zvY_G0c6GPeD50QYuZFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.172.0/22
IPv6:
2a01:63a0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:26:ef:a9:bd:42:79:4b:8d:d6:97:27:48:35:b0:dc:a6:5a:
f9:3b:b6:4d:d6:fb:ae:82:84:2a:7f:68:7f:94:b6:dc:f0:03:
6e:a9:3e:02:4c:9c:64:72:d6:ab:f9:3a:70:f6:45:d3:9b:1d:
2f:a4:f2:04:c4:47:b6:3c:80:f3:76:8e:32:e1:b8:c0:8a:4f:
26:c5:d4:af:e8:20:18:b9:56:29:7f:43:e7:e5:ca:8d:3c:79:
9e:3d:a7:ed:15:59:2b:da:3f:f2:4e:35:35:18:24:29:9d:b8:
83:f6:96:fb:5b:63:12:67:55:64:b5:95:e4:b5:60:c7:cf:35:
3b:31:ea:94:8b:74:cb:7d:d0:5f:cc:4c:ad:c0:f2:c4:95:97:
73:f0:c8:4c:87:82:a2:65:91:20:02:26:96:4c:c0:8f:a1:de:
73:d4:4a:05:95:bd:eb:81:71:5c:0c:1b:40:2a:f9:bb:fb:25:
be:e2:c9:bd:ce:e1:7f:d8:bb:61:f2:fe:02:87:40:84:15:f9:
2e:86:61:a2:89:63:84:b6:3c:ce:19:dd:c6:ba:a6:5d:72:d2:
ca:db:83:1b:53:ea:19:c7:bb:9a:c7:0c:34:84:ab:20:a8:b3:
1d:9f:0e:de:f1:96:2d:8f:b0:ac:35:19:f2:bb:6d:64:cb:ac:
e5:7c:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:51 2024 by rpki-client on console-fra.rpki-client.org