Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/4tvOqyc37Xh9pPJub6ZmhDZc48w.roa
File: 4tvOqyc37Xh9pPJub6ZmhDZc48w.roa (raw, json)
Hash identifier: 7JJoFOWb03cXt1RZCMIw3oyJT9BtDbN2Oh/1jNjwjiA=
Subject key identifier: E2:DB:CE:AB:27:37:ED:78:7D:A4:F2:6E:6F:A6:66:84:36:5C:E3:CC
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 1CD57CCD
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/4tvOqyc37Xh9pPJub6ZmhDZc48w.roa
Signing time: Wed 09 Feb 2022 06:57:56 +0000
ROA not before: Wed 09 Feb 2022 06:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56803
IP address blocks: 185.195.71.0/24 maxlen: 24
91.201.56.252/32 maxlen: 32
2a05:ad00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483753165 (0x1cd57ccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Feb 9 06:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2dbceab2737ed787da4f26e6fa66684365ce3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:87:ef:02:23:79:46:a7:26:3f:46:18:c6:
e3:fd:2b:76:2a:87:9a:db:d7:5b:f5:ba:ee:40:9a:
01:8f:9a:a8:c2:ce:7d:bd:72:ac:ce:a5:fb:b9:bd:
87:48:ed:40:ad:8b:92:e5:d7:f1:62:4a:bc:20:57:
86:9f:03:35:b0:56:c5:68:eb:ab:bf:a4:aa:fe:08:
1b:3f:ce:c2:40:cd:a3:25:b9:d7:e8:5a:69:38:f1:
d5:80:24:87:71:3e:bd:f0:99:97:b1:af:75:b3:81:
12:5f:ec:24:ac:89:e3:5b:8d:e7:63:3a:a8:34:e9:
88:3f:81:3f:90:ed:15:3a:d6:df:a9:2e:01:38:37:
3e:ff:a8:a6:7a:0b:e7:54:69:4b:05:b2:f4:a0:73:
75:c1:e9:17:3f:1f:9b:44:32:04:d4:e4:b3:d3:a4:
a0:1d:4d:ab:c6:48:d3:55:1d:b4:c6:1e:ca:7e:65:
1f:ab:ee:6d:c1:85:b5:74:ca:e2:97:72:16:d1:f9:
12:04:94:0e:5e:4e:de:9c:62:83:3e:ee:74:b2:2a:
69:8f:da:30:e0:70:32:93:31:1d:2d:65:98:26:49:
73:09:43:da:fb:0b:61:e4:8d:6e:48:e7:20:30:23:
d7:42:f8:4f:72:91:a1:e9:90:33:e3:07:bf:eb:2c:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:CE:AB:27:37:ED:78:7D:A4:F2:6E:6F:A6:66:84:36:5C:E3:CC
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/4tvOqyc37Xh9pPJub6ZmhDZc48w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.56.252/32
185.195.71.0/24
IPv6:
2a05:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
5b:23:0f:10:d4:a8:42:d1:b9:a2:4c:1c:53:8b:0c:21:be:12:
3b:15:f4:67:91:d1:3a:19:21:5a:55:08:bb:1f:42:90:d7:79:
8a:42:eb:72:30:6a:f8:f7:63:d7:c3:0f:9f:f8:a2:35:ac:4c:
53:b4:00:e5:62:2b:d4:c9:e6:aa:1b:bd:f5:b0:7e:5b:76:f9:
ce:95:44:c5:d6:6d:12:c6:1c:47:6b:cb:15:77:98:02:76:66:
43:84:a5:09:24:e9:86:1d:59:6d:93:04:6d:5c:85:35:42:28:
72:9d:c7:87:f7:b1:e6:e0:86:ae:38:a5:3c:f6:f9:32:d1:51:
4b:b7:1f:11:8b:ba:f8:33:62:78:0d:5c:c1:2f:85:59:e8:e0:
e4:9e:d0:c5:59:96:5c:08:d5:e9:49:be:37:cf:2f:5d:72:64:
fd:ae:00:a2:10:8f:27:62:c4:4b:3e:e1:21:02:58:aa:21:45:
23:af:40:75:95:51:b6:94:95:58:d4:dd:20:b7:c3:da:a0:1e:
58:da:be:fe:10:e8:11:c5:30:10:a1:ae:56:5d:0c:7c:46:de:
21:15:cb:a8:72:2d:54:74:27:5e:67:19:af:b4:34:24:86:16:
c8:dc:f7:87:4a:4d:ed:cb:3f:cb:96:a7:19:be:d4:2e:3c:e9:
ee:f9:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-ams.rpki-client.org