Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bCRl6ivS0rmtCJvOJSIskYILde4.roa
File: bCRl6ivS0rmtCJvOJSIskYILde4.roa (raw, json)
Hash identifier: 8/AyL33W3hJyjNtTC+aM/asZN7tCdE+Ii/BvPQ5iLRI=
Subject key identifier: 6C:24:65:EA:2B:D2:D2:B9:AD:08:9B:CE:25:22:2C:91:82:0B:75:EE
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 04943D3F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bCRl6ivS0rmtCJvOJSIskYILde4.roa
Signing time: Wed 02 Mar 2022 11:50:46 +0000
ROA not before: Wed 02 Mar 2022 11:50:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8308
IP address blocks: 195.164.0.0/16 maxlen: 16
217.9.160.0/20 maxlen: 20
217.9.160.0/24 maxlen: 24
217.9.165.0/24 maxlen: 24
194.181.0.0/16 maxlen: 16
195.187.101.0/24 maxlen: 24
195.187.0.0/18 maxlen: 18
193.59.0.0/16 maxlen: 16
195.187.128.0/17 maxlen: 17
2001:a10::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76823871 (0x4943d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 11:50:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c2465ea2bd2d2b9ad089bce25222c91820b75ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b6:94:d9:aa:2f:ad:7c:f5:3f:0a:5e:10:e8:
3f:3c:11:eb:50:c3:86:ed:80:5f:c8:84:49:c8:20:
f8:81:08:a4:e5:c7:49:21:66:81:bd:84:bd:35:f7:
f5:c4:3f:56:4a:55:6d:b8:01:2c:02:08:5f:bc:f7:
88:ee:97:37:45:66:36:2c:f7:3c:26:b0:a1:24:52:
6c:ae:63:ec:83:c6:4f:91:bb:65:3f:c7:d0:e3:73:
48:a6:9c:06:8c:90:ff:07:de:f4:f6:f1:1b:b1:a0:
be:5e:22:c9:8d:5d:6b:36:5d:03:99:eb:16:36:73:
5c:f9:a8:5b:09:4d:be:9d:f5:34:2d:75:8f:41:61:
a8:a7:2a:34:f7:ac:fc:e9:69:9a:85:ba:d3:85:10:
23:94:74:23:48:ec:1e:43:c9:87:ee:cf:39:1c:58:
b3:4c:f3:a7:d3:9b:41:64:0e:be:8b:1b:a4:25:b9:
ab:a1:50:c9:ce:13:a9:92:c6:f2:6d:09:8b:6d:32:
15:f7:6f:e8:b1:ae:24:a9:90:38:2b:94:0e:4c:94:
94:cb:16:28:8f:78:ec:8a:01:81:b7:d8:ab:8b:55:
6e:c2:dd:bd:b3:67:55:94:69:5e:8b:46:c6:f8:15:
7e:9c:3b:b4:08:28:2b:65:e3:09:44:5a:2d:9d:85:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:65:EA:2B:D2:D2:B9:AD:08:9B:CE:25:22:2C:91:82:0B:75:EE
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bCRl6ivS0rmtCJvOJSIskYILde4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.0.0/16
194.181.0.0/16
195.164.0.0/16
195.187.0.0/18
195.187.101.0/24
195.187.128.0/17
217.9.160.0/20
IPv6:
2001:a10::/32
Signature Algorithm: sha256WithRSAEncryption
4e:82:af:88:27:72:85:17:72:1b:0a:6f:55:33:77:e7:21:f8:
92:00:80:fa:d8:a7:6f:82:aa:15:10:60:43:37:f7:9c:2d:17:
db:be:f3:61:0a:aa:b2:8b:d6:76:da:d8:d6:d0:d4:22:5d:78:
59:78:e2:2a:f0:34:3f:a1:72:ed:bc:df:2c:a0:56:f3:bc:1a:
53:5f:25:b8:0b:7a:8f:b1:ea:6d:29:7c:24:56:dc:2c:b2:5c:
8c:bf:db:90:50:96:ce:bc:f2:3a:fc:63:0d:49:1d:3b:ba:99:
b7:fb:3d:48:c8:16:90:a3:fa:e8:cc:cf:8a:89:89:34:46:dd:
75:9e:dc:da:cb:1f:fb:fe:ac:52:ba:07:78:02:f1:61:db:34:
23:e9:5f:83:ea:08:73:f6:c2:a2:26:86:d0:27:32:91:9a:99:
a7:59:f0:6c:84:c0:b3:b8:28:52:c8:3a:24:11:1e:57:89:71:
09:a9:6c:dc:80:76:d4:b0:b0:55:4f:29:88:56:f5:03:8e:5e:
ad:03:5d:01:14:69:68:84:35:44:10:14:86:4a:e4:b7:24:34:
71:2b:0b:88:e0:70:6f:03:36:51:72:42:2e:81:10:b5:15:b1:
91:d6:44:a8:7a:01:da:64:f0:f5:41:27:89:b6:a6:f1:b5:04:
92:1d:1f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org