Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/S-VEuDK_tOZWf1cVtg5vmlNUXjw.roa
File: S-VEuDK_tOZWf1cVtg5vmlNUXjw.roa (raw, json)
Hash identifier: +eii69KDhloSSuNVITsLgTnzte8Ws8BdWF4CyglCYns=
Subject key identifier: 4B:E5:44:B8:32:BF:B4:E6:56:7F:57:15:B6:0E:6F:9A:53:54:5E:3C
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 026FAB80
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/S-VEuDK_tOZWf1cVtg5vmlNUXjw.roa
Signing time: Sat 01 Jan 2022 02:59:18 +0000
ROA not before: Sat 01 Jan 2022 02:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202316
IP address blocks: 195.69.231.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
195.69.229.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
2a09:2883::/48 maxlen: 48
2a09:2881::/48 maxlen: 48
2a09:2885::/48 maxlen: 48
2a09:2884::/48 maxlen: 48
2a09:2882::/48 maxlen: 48
2a09:2880::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40872832 (0x26fab80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jan 1 02:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4be544b832bfb4e6567f5715b60e6f9a53545e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:ae:10:56:9a:e4:e5:72:52:8f:95:8e:d6:
91:37:c6:0c:90:5a:c8:ff:d7:51:7a:09:b2:e3:c4:
92:a4:36:22:bb:17:fe:eb:10:0b:b5:d9:17:f4:45:
55:57:e1:2c:88:c2:b3:0d:41:2f:5f:87:4f:6b:e6:
a9:8a:8b:4a:8f:73:13:52:ef:30:0c:7a:ee:44:dc:
2c:61:76:98:f3:22:1c:6d:3f:82:d0:a6:13:a2:23:
ec:05:7e:99:fb:16:d8:71:55:5f:3e:ae:6b:8e:53:
94:9d:f2:d3:81:c9:a5:79:63:72:7f:bd:e4:3d:3e:
d7:01:15:a0:ca:c0:6c:53:46:12:7d:70:cd:a0:f7:
54:09:9a:a6:a1:f4:5e:5d:61:e7:41:cf:05:90:2c:
95:7e:38:a5:00:0d:3e:13:30:1f:98:1b:83:7b:67:
bc:14:f9:9d:07:39:ac:32:32:59:fd:08:5f:a6:72:
da:f0:fe:d0:89:10:de:36:9b:4f:f6:95:4c:74:30:
b0:0d:ad:cb:2b:38:5c:e0:3d:8f:2a:9f:c5:2a:16:
bd:92:89:f6:79:6b:6f:fc:7a:0a:16:a6:3c:07:a5:
39:1a:a4:65:f1:88:ab:95:a2:a2:2c:4d:fe:26:fa:
d7:49:a8:fb:0a:10:b2:cf:d7:8f:26:e5:de:77:c9:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E5:44:B8:32:BF:B4:E6:56:7F:57:15:B6:0E:6F:9A:53:54:5E:3C
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/S-VEuDK_tOZWf1cVtg5vmlNUXjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.228.0/22
IPv6:
2a09:2880::/48
2a09:2881::/48
2a09:2882::/48
2a09:2883::/48
2a09:2884::/48
2a09:2885::/48
Signature Algorithm: sha256WithRSAEncryption
86:2f:0c:3d:66:95:ec:9a:d1:c9:0c:3e:b9:d0:f0:bc:89:a5:
5d:1e:5e:47:ea:9c:57:f5:6a:de:57:2d:d5:65:45:8f:8b:e4:
63:11:04:b6:f2:16:ae:91:f7:3d:f7:09:a9:63:0f:8c:7a:60:
e3:2e:80:3b:47:55:5c:bf:e3:20:a9:17:6f:28:a8:bc:52:cb:
de:d0:ab:f0:df:54:81:88:fb:be:b0:1b:0c:32:0e:58:e9:f1:
3c:1d:84:12:32:99:0d:9c:a8:15:85:56:2b:ff:57:0f:f7:50:
c2:20:ea:e6:d7:b5:62:b1:38:56:5f:5e:4c:7f:b7:13:f6:b8:
b1:10:18:40:53:a0:18:20:23:a2:e3:9e:9b:bc:c9:5b:ec:75:
98:8e:d7:75:eb:57:33:e6:6a:19:d5:30:7f:0f:c6:47:97:10:
ef:eb:16:12:a9:6e:ae:a5:e9:e4:60:0d:cf:5f:6b:6e:2b:47:
e2:9e:61:51:4c:f5:5b:0c:51:c6:c9:9a:7e:80:e3:76:57:7b:
52:1a:8d:b7:e6:28:4f:73:e3:f4:f8:e4:8a:9a:5f:f8:c7:67:
8f:22:78:36:a0:c2:e5:11:7c:33:f9:ae:b7:a4:9e:c3:d8:2d:
5d:00:49:63:9b:26:95:af:b4:4a:51:fb:88:68:ed:11:05:db:
7f:4f:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:32 2024 by rpki-client on console-ams.rpki-client.org