Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5NLfZrPKzcQPhM3m75lrJG5v6TE.roa
File: 5NLfZrPKzcQPhM3m75lrJG5v6TE.roa (raw, json)
Hash identifier: F7FN+X2K3stRidK8AjXo3G1s5jen6MdsozYb9iUZ/ws=
Subject key identifier: E4:D2:DF:66:B3:CA:CD:C4:0F:84:CD:E6:EF:99:6B:24:6E:6F:E9:31
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 396140EF
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5NLfZrPKzcQPhM3m75lrJG5v6TE.roa
Signing time: Sat 26 Mar 2022 06:19:08 +0000
ROA not before: Sat 26 Mar 2022 06:19:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47814
IP address blocks: 80.81.44.0/24 maxlen: 24
83.223.139.0/24 maxlen: 24
46.19.204.251/32 maxlen: 32
46.19.205.0/24 maxlen: 24
46.19.206.0/24 maxlen: 24
83.223.149.0/24 maxlen: 24
94.101.238.0/24 maxlen: 24
185.176.116.0/22 maxlen: 22
94.101.233.206/32 maxlen: 32
2001:1bf8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962674927 (0x396140ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 26 06:19:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4d2df66b3cacdc40f84cde6ef996b246e6fe931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:08:2e:b0:d8:9c:44:1e:0e:fb:70:83:c5:
fb:6b:6b:b0:1a:45:3d:3d:73:b9:3c:41:59:6c:f6:
ff:21:47:2e:64:d5:8e:92:f9:5e:96:23:60:f1:b3:
53:e6:36:d5:60:3e:4e:5f:2a:ee:14:81:88:01:48:
29:ea:d7:6a:5b:48:24:d6:aa:74:f7:11:55:49:7b:
a5:d8:68:c7:10:06:7c:f1:e2:cb:88:02:21:cf:56:
4b:03:f0:81:cc:a6:17:fe:43:74:2f:94:6d:91:eb:
16:7b:af:b5:03:15:a8:ec:fa:73:a2:61:a3:8f:a7:
fd:d7:b1:a5:5e:3c:da:36:38:1e:c0:84:48:ec:97:
02:70:63:fc:e0:7a:51:ac:72:a3:55:39:a9:fb:d1:
2c:dd:9c:37:8b:ed:37:e4:43:0c:b9:6a:c5:72:af:
f2:a5:74:6d:89:52:87:fe:6d:7c:09:f6:78:01:74:
41:fa:09:e7:71:9c:6c:bb:c2:68:35:ac:16:99:f2:
99:46:15:8d:f6:01:58:42:88:27:28:a8:f5:78:63:
cb:5e:cd:38:1d:46:bb:e1:bf:00:d7:34:5c:e6:e1:
89:59:ec:b5:39:10:a3:f5:55:e8:b5:40:43:fe:da:
24:cf:51:7e:65:45:bb:22:27:3d:79:d8:c5:a0:d7:
d1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D2:DF:66:B3:CA:CD:C4:0F:84:CD:E6:EF:99:6B:24:6E:6F:E9:31
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/5NLfZrPKzcQPhM3m75lrJG5v6TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.204.251/32
46.19.205.0-46.19.206.255
80.81.44.0/24
83.223.139.0/24
83.223.149.0/24
94.101.233.206/32
94.101.238.0/24
185.176.116.0/22
IPv6:
2001:1bf8::/29
Signature Algorithm: sha256WithRSAEncryption
a0:f8:f6:6c:3f:05:ad:58:cc:a9:db:c3:f8:63:71:5c:cc:19:
c6:e1:72:f7:f1:20:9a:58:c5:c8:ed:38:ec:b1:99:b4:41:f2:
df:eb:c6:1f:ec:f9:bc:1c:48:2f:f4:72:cf:8b:79:e7:3e:1d:
73:57:ea:c7:7d:44:2e:22:e9:3d:28:f8:c1:da:84:92:0b:57:
d3:28:70:e8:d1:d8:06:d7:d4:d6:61:7c:27:85:2d:45:98:cc:
b5:62:ea:fe:fb:8a:82:f8:32:cc:5f:8c:28:99:a6:c1:d4:c0:
d4:a3:78:86:b7:c7:6a:43:7f:6f:09:65:1e:0c:30:d1:14:74:
f4:24:23:29:1e:dc:ca:18:b8:00:d1:2b:4f:72:58:14:53:03:
26:49:69:a2:5c:d1:66:a6:59:6b:43:ee:7c:2d:0b:cc:08:d3:
5b:b2:76:e2:58:89:c9:da:66:91:67:cd:3f:e6:ed:88:5d:74:
2e:01:f5:ae:29:bb:3b:de:bd:5c:44:fe:17:cc:85:92:1a:25:
7c:67:94:78:81:10:eb:dd:de:b8:8d:46:b1:06:24:51:7d:12:
6e:cb:ec:8d:d5:44:36:0e:95:4c:96:bd:94:4c:a3:26:85:0c:
0f:86:63:a9:16:21:70:f0:60:7e:27:8a:48:d2:f4:d7:5d:ff:
60:fc:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org