Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/tS6mfT2_v_4_yzWKMgt1jolIK4o.roa
File: tS6mfT2_v_4_yzWKMgt1jolIK4o.roa (raw, json)
Hash identifier: UABofYF2gpigUJVnvLPg6h8TfBqH7P8YAYJexd5gElw=
Subject key identifier: B5:2E:A6:7D:3D:BF:BF:FE:3F:CB:35:8A:32:0B:75:8E:89:48:2B:8A
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 0DB47739
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/tS6mfT2_v_4_yzWKMgt1jolIK4o.roa
Signing time: Wed 09 Mar 2022 15:25:13 +0000
ROA not before: Wed 09 Mar 2022 15:25:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31167
IP address blocks: 109.74.80.0/20 maxlen: 20
85.14.153.0/24 maxlen: 24
217.171.16.0/20 maxlen: 20
217.119.176.0/20 maxlen: 20
217.171.27.0/24 maxlen: 24
85.14.128.0/18 maxlen: 18
2a00:1788::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229930809 (0xdb47739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Mar 9 15:25:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b52ea67d3dbfbffe3fcb358a320b758e89482b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:8b:f8:b7:73:9b:52:20:07:66:32:6b:04:
9d:ce:6c:8e:cf:48:89:16:bf:3f:51:69:93:7b:56:
a1:7d:76:58:f4:17:35:a5:a9:8a:f4:40:7a:30:81:
6e:8f:7a:07:60:ac:e3:3e:83:04:b5:45:13:31:e9:
4d:84:79:12:c2:f8:22:f6:b1:4f:20:82:1a:43:32:
b7:e1:14:6b:89:da:6d:0f:5e:e0:c1:4b:b4:d4:e5:
e3:02:0c:1d:3d:52:fd:a5:7a:12:3c:3c:05:c4:71:
65:b8:87:68:aa:5f:8b:95:4c:a0:30:67:18:0f:bf:
8d:31:e2:12:f2:f0:a1:a0:c5:04:1e:18:5f:b0:70:
86:05:de:42:74:16:9e:66:e1:d8:18:e3:1e:31:82:
62:50:d8:19:96:a9:76:36:c8:c1:51:cb:6b:2a:ee:
b1:89:ed:3c:9d:f0:bd:d0:4d:43:b6:06:8a:ba:cf:
00:ee:3e:a2:e3:db:3c:99:84:1a:0d:3b:f4:3c:2d:
31:a7:20:7c:b6:3e:82:4d:b7:5b:47:11:4d:19:1f:
d0:24:51:b6:dd:09:ce:1b:24:b4:f9:5a:84:9c:cc:
a3:9a:db:46:42:0e:f7:57:f5:0b:0a:37:2c:5b:8a:
f7:49:35:3e:e4:ed:c0:48:a1:4b:0f:02:26:3b:4e:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:A6:7D:3D:BF:BF:FE:3F:CB:35:8A:32:0B:75:8E:89:48:2B:8A
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/tS6mfT2_v_4_yzWKMgt1jolIK4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.128.0/18
109.74.80.0/20
217.119.176.0/20
217.171.16.0/20
IPv6:
2a00:1788::/32
Signature Algorithm: sha256WithRSAEncryption
9d:99:d4:7e:af:cc:48:49:a8:d4:6f:da:3b:9e:41:05:03:82:
f1:a3:07:3d:ca:a1:95:37:72:62:3c:f3:bd:34:bf:d8:06:64:
64:97:e8:a5:4c:50:6c:ad:3f:f5:05:8c:d9:9c:31:a6:34:e2:
2b:b7:58:91:87:97:97:b7:b2:04:0a:6f:cd:82:8d:36:40:6e:
88:5e:9c:fb:cb:ed:e3:8e:a6:62:6b:23:89:15:05:6c:6f:52:
6c:f1:13:3a:2d:6a:62:29:5b:96:54:f0:d9:a2:ec:c5:5d:f5:
08:25:e1:84:a9:de:14:28:b1:1a:db:ad:f5:09:15:1a:26:a5:
30:d3:a6:69:af:1f:da:4e:df:ec:69:66:37:48:e9:a1:de:95:
11:1f:70:5b:7b:d5:30:fd:e5:ee:dd:a5:f5:e8:db:0b:7f:32:
8f:c9:f9:17:62:ad:bc:11:a9:40:ac:b4:12:07:85:66:f6:ac:
db:26:9f:62:df:6c:2e:50:c0:51:e1:a2:b7:01:db:29:81:29:
48:89:b5:86:f4:6d:ea:01:21:4b:6c:a2:48:bc:04:8e:c5:f2:
15:bf:65:e2:9f:62:4a:a7:98:b8:7b:3c:2c:19:04:3f:97:5e:
9c:4a:45:0d:3a:a1:38:26:a1:54:96:e7:5c:31:14:60:1b:5a:
fe:7f:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:04 2024 by rpki-client on console-ams.rpki-client.org