Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/d0nIU5Q18TQaG1XaTLXrJFYCMCg.roa
File: d0nIU5Q18TQaG1XaTLXrJFYCMCg.roa (raw, json)
Hash identifier: XIG5zbDF4NauMAFKqbV3FCKiwzYhuENIPlJ5H7Q4yLU=
Subject key identifier: 77:49:C8:53:94:35:F1:34:1A:1B:55:DA:4C:B5:EB:24:56:02:30:28
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 018265F3F603E33925AAD8D775A587BC0DB9
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/d0nIU5Q18TQaG1XaTLXrJFYCMCg.roa
Signing time: Wed 03 Aug 2022 23:04:23 +0000
ROA not before: Wed 03 Aug 2022 23:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15755
IP address blocks: 185.96.171.0/24 maxlen: 24
94.103.40.0/24 maxlen: 24
185.35.21.0/24 maxlen: 24
185.203.34.0/24 maxlen: 24
2a0a:e0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:65:f3:f6:03:e3:39:25:aa:d8:d7:75:a5:87:bc:0d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Aug 3 23:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7749c8539435f1341a1b55da4cb5eb2456023028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:b3:7c:07:68:8b:10:dd:4e:d1:c1:15:9e:
b5:13:f6:ef:f3:8d:ef:29:00:6d:df:3c:2c:55:02:
74:d5:13:8d:60:1d:e9:f3:5b:59:7b:b9:34:45:e2:
a9:42:79:45:2e:70:4a:7a:72:bb:40:a7:7d:30:b1:
43:42:eb:79:7f:47:73:bc:7c:50:4b:e2:ca:c2:09:
e6:2e:1e:36:37:5e:8a:ba:95:91:ef:c5:9a:12:2a:
8a:72:0a:97:ec:dc:7f:49:b1:03:5e:f1:97:ad:cd:
17:4c:e3:80:6e:72:3e:ca:72:2c:57:79:cc:af:91:
ce:78:74:3c:27:54:c1:57:f1:f3:6a:3e:33:da:2a:
d3:c6:06:6d:3a:59:df:b7:ee:c6:7c:a3:b2:af:7f:
59:f3:40:ed:bb:34:90:e7:4e:80:20:ab:6a:fe:95:
68:03:94:bc:73:9c:0b:84:b3:8c:f9:e5:97:52:e2:
5c:d0:63:69:02:e2:3b:6e:e6:ea:d7:0b:c0:ab:c9:
e8:3e:c9:8e:76:03:5b:28:cf:f1:e8:f9:ff:15:d4:
04:40:90:f4:73:09:a7:8e:cf:09:3d:47:ad:e5:6b:
3a:bd:32:d1:27:e9:3b:fd:76:f4:a9:cd:78:a4:d7:
88:ed:70:f5:43:c2:34:b7:51:da:6c:cb:28:18:dd:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:49:C8:53:94:35:F1:34:1A:1B:55:DA:4C:B5:EB:24:56:02:30:28
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/d0nIU5Q18TQaG1XaTLXrJFYCMCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.40.0/24
185.35.21.0/24
185.96.171.0/24
185.203.34.0/24
IPv6:
2a0a:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:fd:1b:98:d2:60:04:cd:48:10:e3:e2:b4:a1:6b:b6:6a:61:
ce:32:4b:9b:cb:19:1f:cc:a2:05:76:68:2d:e2:6f:54:5c:90:
16:20:1e:5d:0f:89:7e:e2:08:e7:e6:9b:3b:c9:02:47:6c:47:
27:20:bd:ca:3f:e5:59:27:f1:c9:dc:5d:e6:2b:1d:9a:62:6f:
eb:7e:1a:a9:32:ad:cd:57:e4:70:34:e0:64:a0:3e:03:a6:e0:
8e:10:6b:b8:30:25:0f:1f:53:e7:30:09:d4:d1:23:58:1c:a6:
ab:6d:3e:16:4c:e0:e8:ce:77:72:ab:a4:69:fe:36:21:64:f5:
2c:69:55:1d:c8:df:89:fc:4d:03:91:70:03:58:86:6a:b3:b0:
09:7f:29:6d:b6:8f:02:0f:b8:6b:f6:46:82:69:62:0c:60:e8:
3e:99:e2:dd:7f:01:92:a9:53:6c:2a:1c:04:cb:51:0f:2d:55:
59:4b:bc:70:08:0a:26:5d:6c:fc:8c:e7:6c:5e:33:ea:86:cc:
a4:2e:83:e1:92:c9:fa:79:14:ad:48:b1:45:55:27:10:55:51:
38:a4:e7:24:7e:e8:a4:8a:be:59:28:f4:4f:43:06:a4:c5:98:
78:91:5b:00:96:5a:03:98:b0:48:25:51:72:60:21:32:41:29:
68:81:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:57 2023 by rpki-client on console-fra.rpki-client.org