Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/E5teJwNthJ1s1WcJcu_VZXedOC8.roa
File: E5teJwNthJ1s1WcJcu_VZXedOC8.roa (raw, json)
Hash identifier: kTo1btRpw0ro3fGXdoNiefBWf/6/h7zWYJ5Hko9zlcU=
Subject key identifier: 13:9B:5E:27:03:6D:84:9D:6C:D5:67:09:72:EF:D5:65:77:9D:38:2F
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0DA8F1BB
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/E5teJwNthJ1s1WcJcu_VZXedOC8.roa
Signing time: Thu 16 Jun 2022 06:33:44 +0000
ROA not before: Thu 16 Jun 2022 06:33:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.163.71.0/24 maxlen: 24
194.233.49.0/24 maxlen: 24
212.224.6.0/24 maxlen: 24
195.180.176.0/24 maxlen: 24
195.180.188.0/24 maxlen: 24
195.180.189.0/24 maxlen: 24
194.233.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229175739 (0xda8f1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jun 16 06:33:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=139b5e27036d849d6cd5670972efd565779d382f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:67:a6:83:ce:db:37:5b:aa:80:fe:90:37:
17:94:58:ea:4a:bb:fe:36:b0:d9:f4:e1:6f:a6:53:
b8:dc:36:3f:ed:c0:ec:75:32:1e:05:8e:e4:b3:1a:
3d:d8:79:5c:ae:ea:78:0b:36:c6:94:46:9f:a1:71:
a3:fd:e9:e8:35:04:f6:1b:67:e2:cc:f4:5f:06:97:
d4:85:b6:85:57:8c:fc:2b:a9:7d:f7:7a:cc:f9:5e:
2f:f5:25:fc:01:25:53:df:42:a0:61:e1:be:07:16:
cb:61:c5:bf:4a:59:56:92:d4:0f:df:37:82:03:be:
5d:b4:48:05:b8:43:0c:6a:c8:44:6f:8c:67:19:6f:
5e:a2:c6:f8:af:aa:9c:bb:11:3e:d7:08:15:f4:e1:
ef:f4:9e:5f:0c:38:5b:8c:64:72:1d:0e:3a:42:de:
27:26:bc:27:3f:58:21:19:51:c9:3d:72:67:fe:c5:
1c:ec:04:c9:c1:cc:63:26:25:b2:82:d8:0b:6e:8f:
f8:f2:b8:17:a7:93:7a:fd:b2:af:54:a9:52:d5:21:
34:2a:ff:8a:4d:55:b4:bd:98:bb:02:68:16:ce:bd:
1b:2f:7d:a6:ea:18:9c:4b:bd:e7:f5:41:03:74:67:
57:87:29:87:77:25:d0:34:6e:d1:4d:be:30:49:75:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9B:5E:27:03:6D:84:9D:6C:D5:67:09:72:EF:D5:65:77:9D:38:2F
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/E5teJwNthJ1s1WcJcu_VZXedOC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.71.0/24
194.233.5.0/24
194.233.49.0/24
195.180.176.0/24
195.180.188.0/23
212.224.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:8b:e2:6e:65:0b:38:22:20:30:b1:59:62:3e:e8:e7:13:0c:
f6:b9:0e:6f:be:70:1d:19:bc:aa:68:cc:92:64:25:c5:3e:55:
59:c9:6b:7d:34:ff:29:68:f3:60:ad:19:a6:7d:7d:a3:43:9c:
6f:39:75:85:c2:10:0b:d6:e8:45:94:46:73:25:d5:8b:47:02:
5d:c1:5b:3e:96:ea:f3:67:2c:be:cd:2f:9e:b9:f2:19:8b:66:
0b:61:63:06:20:24:53:43:dd:fc:4c:8c:cb:c7:4d:da:9a:d8:
58:b8:f5:4f:8b:2d:89:41:00:4c:db:96:77:e8:da:5c:64:c2:
02:5d:12:06:7e:d4:74:1b:60:fd:15:1c:eb:8c:e6:99:42:dc:
e0:79:6a:5d:6d:58:07:49:4e:ba:9e:ce:4a:c9:74:1e:dc:dd:
43:b7:78:19:23:a4:f5:7c:7b:40:69:6e:c6:c5:dc:90:55:9d:
d0:45:19:5f:16:c6:ec:42:09:a1:24:12:da:64:b4:b1:57:4e:
19:f1:42:89:e3:a8:5e:40:a7:c1:9c:ab:23:3c:db:e9:e7:3c:
22:30:1e:92:19:c2:5e:32:f9:e2:96:99:dc:56:6c:82:64:30:
dd:72:e0:00:2c:cb:20:ca:03:3d:66:91:b2:58:f6:fb:64:27:
44:1c:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:41 2023 by rpki-client on console-fra.rpki-client.org