Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/oc0QkFf9y8d_epglavewbE1UxpY.roa
File: oc0QkFf9y8d_epglavewbE1UxpY.roa (raw, json)
Hash identifier: 5wl9TvepKs5tS6KqsFJrOL3y3SmW0Sh+fAYTL7SqmyU=
Subject key identifier: A1:CD:10:90:57:FD:CB:C7:7F:7A:98:25:6A:F7:B0:6C:4D:54:C6:96
Certificate issuer: /CN=7b827acc680aa29ddac823889d87863e414b2411
Certificate serial: 0184E28D67AD6E88E535EC1956FDDE97F49E
Authority key identifier: 7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/oc0QkFf9y8d_epglavewbE1UxpY.roa
Signing time: Mon 05 Dec 2022 13:50:28 +0000
ROA not before: Mon 05 Dec 2022 13:50:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59752
IP address blocks: 185.95.128.0/22 maxlen: 24
164.177.168.0/21 maxlen: 24
2a03:2500::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:8d:67:ad:6e:88:e5:35:ec:19:56:fd:de:97:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b827acc680aa29ddac823889d87863e414b2411
Validity
Not Before: Dec 5 13:50:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1cd109057fdcbc77f7a98256af7b06c4d54c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:4f:a9:3d:22:b4:ff:c2:5a:8d:e2:eb:ec:
ef:af:08:78:b2:ec:90:15:c0:9c:89:37:87:70:d3:
06:cf:96:7d:c5:81:ba:00:7c:c1:30:ab:f2:52:a5:
ff:6a:7c:e2:86:50:7f:21:e1:bb:75:4d:ba:53:8a:
e9:1f:04:fe:0d:08:c8:1f:62:57:3d:20:5a:ab:71:
45:16:f3:59:25:a1:94:8f:c1:24:13:1c:c1:59:73:
37:21:03:13:91:1f:b1:2f:95:d5:49:8d:e4:f2:95:
39:91:38:74:c9:af:2f:dd:ff:be:65:72:82:66:1d:
e3:d8:00:90:aa:28:80:2c:66:88:b0:c9:6b:22:10:
72:06:1d:25:19:95:be:54:57:15:68:24:ba:c8:1e:
03:b2:87:6d:1c:e7:a2:3d:e3:eb:f0:ed:72:74:83:
aa:e5:f9:11:84:3f:59:8f:e0:85:f2:97:40:52:99:
9b:cc:cf:73:f5:c2:4d:2e:df:e6:2e:09:b1:50:05:
a6:82:0e:7b:1b:a4:51:46:fc:51:45:11:81:1f:d2:
54:d4:04:e1:3a:b9:73:66:93:b1:2a:a9:b3:82:88:
3e:1f:cf:1a:c1:c5:22:80:a1:5f:09:0d:7a:6e:f9:
57:b4:5d:25:9f:05:71:fb:ec:e3:f2:28:b7:09:ee:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:10:90:57:FD:CB:C7:7F:7A:98:25:6A:F7:B0:6C:4D:54:C6:96
X509v3 Authority Key Identifier:
keyid:7B:82:7A:CC:68:0A:A2:9D:DA:C8:23:88:9D:87:86:3E:41:4B:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4J6zGgKop3ayCOInYeGPkFLJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/oc0QkFf9y8d_epglavewbE1UxpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ecb197-e0f5-438d-8fc5-e4d45971b13d/1/e4J6zGgKop3ayCOInYeGPkFLJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.177.168.0/21
185.95.128.0/22
IPv6:
2a03:2500::/32
Signature Algorithm: sha256WithRSAEncryption
56:c2:3a:51:b2:c0:65:e6:28:a8:9f:71:5d:ee:6c:cb:fd:6a:
27:32:4b:d0:a5:01:8a:42:49:61:38:27:fd:10:3b:a3:c6:6d:
12:da:1d:91:d2:e5:9d:a2:f1:a3:2a:72:3d:e8:10:38:e6:44:
22:bc:3b:7c:87:75:0c:fd:88:d5:d7:56:c1:49:f2:77:03:b5:
cf:05:1f:d2:65:79:92:b5:c9:59:76:52:73:2b:64:5a:41:7c:
22:61:e9:12:a7:53:16:5a:32:32:25:ab:81:00:04:e1:83:a8:
f5:58:5f:7c:15:45:27:a0:2a:c4:76:bd:37:c6:3a:ee:20:86:
eb:31:ff:cc:6c:65:33:f6:fa:c0:55:bb:07:e7:7b:17:ff:f4:
b6:09:28:f8:49:27:1a:82:3f:ad:51:93:a7:8f:a3:45:0f:a3:
3c:36:85:cf:e6:ec:13:b5:fa:3b:a8:17:8e:67:90:2f:1c:fa:
22:e5:e9:c1:5b:09:68:91:05:6b:c5:ad:3a:e3:39:39:e4:73:
bd:a6:dc:3c:7e:f7:ef:7f:73:1b:95:dc:85:5d:aa:24:a3:b3:
aa:b1:ee:a5:70:8c:cd:32:ff:a3:8d:55:b6:da:d5:49:ff:a8:
6e:f6:87:d1:90:6b:fa:ce:9c:e1:d8:bf:bf:fb:c6:a2:15:41:
5d:cb:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:34 2023 by rpki-client on console-fra.rpki-client.org