Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/2kHPEkrb4ntM0V1ZbI1byQvQvGI.roa
File: 2kHPEkrb4ntM0V1ZbI1byQvQvGI.roa (raw, json)
Hash identifier: /ZwWc1ZnglhPaYwbfVe4RODde4X1jRmWoBXHGf353Fo=
Subject key identifier: DA:41:CF:12:4A:DB:E2:7B:4C:D1:5D:59:6C:8D:5B:C9:0B:D0:BC:62
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 08A37504
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/2kHPEkrb4ntM0V1ZbI1byQvQvGI.roa
Signing time: Sat 01 Jan 2022 02:54:47 +0000
ROA not before: Sat 01 Jan 2022 02:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47544
IP address blocks: 46.248.160.0/19 maxlen: 19
185.110.50.0/24 maxlen: 24
193.106.104.0/22 maxlen: 22
185.110.49.0/24 maxlen: 24
185.110.51.0/24 maxlen: 24
86.111.240.0/21 maxlen: 21
2a01:7400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144930052 (0x8a37504)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Jan 1 02:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da41cf124adbe27b4cd15d596c8d5bc90bd0bc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:01:d0:6a:e2:d6:fd:2f:01:e3:2f:74:21:
8b:0d:59:a2:bf:1e:aa:d6:60:41:0c:bf:56:f2:b5:
bd:73:0d:60:00:43:61:60:6f:fa:b8:4f:42:ec:34:
d1:07:07:1f:b6:4f:35:b8:3f:25:03:86:2f:44:1a:
e5:7d:a6:c3:c9:4f:0f:78:08:f7:cd:79:df:a0:45:
07:36:67:7f:02:40:de:6c:28:07:a6:40:52:eb:f2:
6a:36:81:fc:c4:e6:70:44:b0:a8:19:f8:97:49:9f:
a2:aa:14:3d:c7:90:72:76:66:22:a7:57:31:b2:28:
b4:f0:e3:67:86:94:0e:04:dd:d6:42:75:88:1d:40:
eb:b0:d4:68:40:1c:d5:33:8e:11:7c:45:71:22:9d:
82:36:44:40:c5:29:63:1f:04:be:1b:a8:b8:6f:4e:
8c:da:a6:af:05:f1:94:dd:4d:60:67:84:cb:fc:2b:
4b:37:c7:f9:86:2c:e3:97:35:5c:42:e7:f0:6e:be:
5c:f4:85:89:c9:55:31:89:3c:dd:cf:2b:3e:19:f5:
c5:ed:b9:84:c4:5a:af:85:00:3f:dd:66:e1:41:40:
03:0f:60:f5:4d:43:15:23:23:58:5c:86:4c:05:fc:
09:64:4c:23:77:61:2b:1b:c1:6f:84:b5:be:64:c1:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:CF:12:4A:DB:E2:7B:4C:D1:5D:59:6C:8D:5B:C9:0B:D0:BC:62
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/2kHPEkrb4ntM0V1ZbI1byQvQvGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.160.0/19
86.111.240.0/21
185.110.49.0-185.110.51.255
193.106.104.0/22
IPv6:
2a01:7400::/32
Signature Algorithm: sha256WithRSAEncryption
28:4e:d7:4c:62:6a:29:b2:e2:7f:27:3c:75:14:94:95:45:e5:
54:c3:32:5e:99:50:06:f0:5b:8d:e6:67:53:67:04:53:80:f2:
bf:b9:73:2e:e5:99:3b:18:13:ed:2e:a8:7e:74:85:82:46:e3:
fd:27:b3:42:7c:a4:a5:18:95:6b:8c:dd:0d:ee:5d:c4:86:53:
c2:62:42:43:e7:ea:6a:99:16:d1:78:ca:9a:19:29:1f:a5:8c:
1a:16:79:b8:4c:21:bc:06:1b:85:6f:c7:86:3d:83:fb:25:ee:
87:00:92:60:0d:ee:aa:5a:1c:7a:04:20:e8:c1:5c:d3:46:fa:
8e:2d:a1:41:3c:92:3c:ae:ff:4a:dc:ae:65:83:82:43:2b:d9:
60:34:5e:0a:10:f1:73:78:ef:59:65:49:29:b2:46:67:84:a4:
ee:74:1b:bd:eb:a9:40:f9:32:4a:89:20:e1:2c:c1:8a:23:74:
15:cb:c2:a1:3c:8e:a9:70:1f:5f:ad:f7:a1:35:6b:b8:1b:12:
44:3e:c5:03:4b:e5:23:28:9f:51:24:2e:98:71:21:e7:ef:89:
69:95:d7:f5:f8:13:9c:92:70:9c:1a:7f:8a:68:8a:0f:d7:9f:
24:06:7d:93:f8:2f:c4:ec:af:c1:fc:c4:a7:18:9a:ac:2b:30:
90:1c:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org