Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hXceZkVbrnmPERZoT2Qf7chFGsk.roa
File: hXceZkVbrnmPERZoT2Qf7chFGsk.roa (raw, json)
Hash identifier: B7TwG5jkbXKdvv9mGpWoYMdcLMeXrd2tXm4o2SCpnSA=
Subject key identifier: 85:77:1E:66:45:5B:AE:79:8F:11:16:68:4F:64:1F:ED:C8:45:1A:C9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 398C9F9A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hXceZkVbrnmPERZoT2Qf7chFGsk.roa
Signing time: Tue 12 Apr 2022 05:51:43 +0000
ROA not before: Tue 12 Apr 2022 05:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47814
IP address blocks: 80.81.44.0/24 maxlen: 24
80.81.46.0/23 maxlen: 23
83.223.139.0/24 maxlen: 24
46.19.204.251/32 maxlen: 32
46.19.205.0/24 maxlen: 24
46.19.206.0/24 maxlen: 24
83.223.149.0/24 maxlen: 24
94.101.238.0/24 maxlen: 24
185.176.116.0/22 maxlen: 22
94.101.233.206/32 maxlen: 32
2001:1bf8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 965517210 (0x398c9f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 12 05:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85771e66455bae798f1116684f641fedc8451ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:8e:ce:26:5e:21:b9:9e:f6:9b:2c:67:76:
f3:49:5a:71:c7:24:90:d9:a9:22:40:77:14:0e:eb:
8c:e6:25:88:02:37:2f:85:5b:f4:34:bd:d1:d5:2b:
3d:b4:36:1e:5b:a6:dc:98:d6:c2:73:79:7f:d7:09:
8a:a3:62:c7:cb:87:6f:d6:88:09:ac:25:22:f2:ac:
91:64:84:3a:82:d1:2a:8d:61:2d:a1:c6:e8:46:2a:
f1:24:0e:c1:e1:f0:e2:90:86:40:98:c8:ec:d7:a0:
4f:81:ab:30:e9:e7:d3:63:43:25:88:55:d6:f3:c4:
5f:44:88:b0:c0:a6:e7:cf:88:1c:74:d3:b8:1a:88:
3f:db:50:d0:5e:40:65:e0:b0:6b:59:cb:36:e9:fd:
c0:29:a1:39:9f:07:ef:1e:df:a9:87:a6:ef:4c:06:
87:ca:0b:ae:13:0c:e4:2e:09:a7:44:dc:de:8c:de:
73:8e:4d:f4:18:57:da:81:3e:6c:9b:dd:93:ba:74:
42:fa:d5:f4:f0:7a:0e:ba:50:1e:69:07:13:07:b0:
8c:21:31:79:e4:77:c7:8d:33:52:5a:72:81:11:e1:
bd:75:33:86:4d:43:f2:15:d5:5f:13:17:4c:38:1a:
dc:18:09:8a:04:c4:7a:99:e5:66:59:ea:19:bd:37:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:1E:66:45:5B:AE:79:8F:11:16:68:4F:64:1F:ED:C8:45:1A:C9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hXceZkVbrnmPERZoT2Qf7chFGsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.204.251/32
46.19.205.0-46.19.206.255
80.81.44.0/24
80.81.46.0/23
83.223.139.0/24
83.223.149.0/24
94.101.233.206/32
94.101.238.0/24
185.176.116.0/22
IPv6:
2001:1bf8::/29
Signature Algorithm: sha256WithRSAEncryption
47:30:da:81:52:e1:05:1a:8b:2d:fb:19:c6:67:70:01:e5:d7:
e9:23:5b:0e:73:29:de:6d:04:c2:90:31:11:c1:4a:72:57:94:
bb:8c:7c:f1:bd:90:f9:79:fd:17:b2:8e:ae:49:8c:d7:ca:31:
56:9b:1e:28:7f:2c:29:5a:f0:c3:53:cd:71:aa:78:5a:a5:2b:
ee:1a:1c:b1:9e:0f:86:c9:ec:ef:01:50:bd:f2:2e:0e:49:ca:
44:54:f6:05:69:06:e2:e7:38:c5:e0:1d:5c:07:2e:cb:36:3e:
50:ae:0f:60:9f:19:ee:cb:31:ca:43:17:4f:03:12:84:10:a8:
15:00:a3:2e:b4:4e:ea:0a:9d:37:98:dd:c2:62:85:13:a0:5f:
2c:64:92:96:eb:56:43:29:55:55:06:0d:38:f7:46:6a:a9:2c:
fb:d5:3b:91:d7:cf:ed:d8:38:4f:30:27:56:35:7e:ab:6a:a1:
58:81:c2:43:cd:03:41:c2:16:6e:2d:dc:5e:33:24:d4:51:7b:
c0:f9:cd:36:d0:d6:ae:98:1d:6e:b6:9f:2f:21:80:61:20:d2:
ca:8b:94:e2:9c:db:6d:86:b5:b8:20:22:83:ac:0c:0e:b0:2a:
0d:9a:1b:11:d1:b6:05:c8:6e:f3:48:60:24:ce:17:9a:c2:8b:
10:49:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:46 2023 by rpki-client on console-fra.rpki-client.org