Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/4S4bBunMrnw3mkkBLk7BMJP2Csc.roa
File: 4S4bBunMrnw3mkkBLk7BMJP2Csc.roa (raw, json)
Hash identifier: pahTNqnamoryGgnrNEFZfw1qqqGSCwECeMZbDYC4VHA=
Subject key identifier: E1:2E:1B:06:E9:CC:AE:7C:37:9A:49:01:2E:4E:C1:30:93:F6:0A:C7
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 0CF6467C
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/4S4bBunMrnw3mkkBLk7BMJP2Csc.roa
Signing time: Sat 01 Jan 2022 02:58:29 +0000
ROA not before: Sat 01 Jan 2022 02:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198930
IP address blocks: 185.161.144.0/22 maxlen: 22
185.78.60.0/22 maxlen: 22
170.133.0.0/18 maxlen: 18
91.106.128.0/18 maxlen: 18
2a07:c540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217466492 (0xcf6467c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Jan 1 02:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e12e1b06e9ccae7c379a49012e4ec13093f60ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:e0:e8:bf:81:6a:85:a8:97:af:e2:a2:98:
75:a2:97:c1:d8:1f:d8:a3:4b:d2:09:a4:4a:64:1c:
c9:a9:80:6c:28:cc:35:80:e2:70:66:2a:6e:70:24:
81:d3:3c:11:27:9a:3f:30:fe:d9:58:bd:30:35:52:
63:e0:70:fc:dd:fc:7f:d5:a4:f3:14:da:38:57:98:
aa:95:88:88:77:f0:a8:f0:a2:a3:4a:b2:0b:e1:16:
bf:74:b0:89:6f:c6:7b:e8:4a:92:77:9e:b0:80:13:
52:c0:ab:0e:02:6a:6d:a9:a2:c5:54:58:29:e8:d3:
3a:6f:84:fb:38:37:c6:17:d6:ca:8e:94:4c:81:20:
05:07:e6:38:dd:7c:30:bc:f6:a5:2d:64:b1:3b:1d:
b0:43:f4:9c:70:2a:d0:09:bf:ae:ed:0d:c8:bd:e1:
8d:e3:cc:d5:dc:f4:45:cf:54:5f:4a:65:f2:cd:e6:
f5:dd:f2:24:eb:1e:13:be:09:86:af:cf:fb:fb:0e:
8f:89:e9:cc:19:aa:f4:99:c8:45:dc:84:07:fe:55:
fd:ae:6f:97:0b:2a:4c:ed:5a:24:bf:67:12:8c:99:
6a:6c:48:6e:a0:08:ea:41:8b:b3:f5:7f:40:b0:68:
ef:f4:ae:53:f1:8d:c7:36:4d:eb:d0:5c:24:15:4c:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:1B:06:E9:CC:AE:7C:37:9A:49:01:2E:4E:C1:30:93:F6:0A:C7
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/4S4bBunMrnw3mkkBLk7BMJP2Csc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.128.0/18
170.133.0.0/18
185.78.60.0/22
185.161.144.0/22
IPv6:
2a07:c540::/29
Signature Algorithm: sha256WithRSAEncryption
3f:a8:2b:b8:71:b5:a0:d4:35:7c:6b:8b:ff:aa:25:29:16:76:
ff:83:b0:62:e7:0f:4c:3c:af:e3:bd:e9:ff:77:de:e3:1c:04:
28:8b:3f:da:ff:8f:4c:5a:e0:a6:80:75:36:36:c0:28:34:24:
f6:a4:92:e0:f7:7e:bf:b0:12:d8:25:31:1c:50:a1:09:8b:e7:
2b:a9:d4:18:e6:dc:23:65:d8:db:a6:b7:07:ce:5f:9a:af:cd:
f6:36:e1:6e:1b:e7:44:bb:c3:34:ea:3a:f5:4b:7c:08:28:6c:
ee:42:9e:a7:70:69:ac:f8:9b:16:06:b3:a9:70:ee:77:50:ce:
5c:21:d7:d7:a4:5e:63:4a:12:ea:69:38:63:06:86:a6:d4:40:
b8:89:1c:ea:cb:70:41:1c:d6:59:36:8a:93:e1:4f:e6:fe:07:
62:9b:be:47:cc:85:71:6b:f0:ec:b3:81:28:6c:e0:f1:2c:fb:
88:e6:2d:a1:b6:c6:56:19:f2:ac:e8:85:b7:62:a8:0d:3d:09:
c8:ae:ac:63:65:0b:14:ec:7a:ed:ee:72:fe:5e:94:94:49:91:
5a:f6:20:fd:24:aa:d1:c3:04:cc:0d:1d:ed:cc:60:3d:71:80:
7d:8e:74:3d:1f:bc:11:21:83:6c:30:98:2f:20:84:65:17:4a:
ad:37:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:00 2023 by rpki-client on console-ams.rpki-client.org