Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/7XpMYW8VPpw-yPVSneIozCYcu0A.roa
File: 7XpMYW8VPpw-yPVSneIozCYcu0A.roa (raw, json)
Hash identifier: dhVDgtzc8xkbx8EB78ezZVfh+6n2pxkbgOZUwmehdes=
Subject key identifier: ED:7A:4C:61:6F:15:3E:9C:3E:C8:F5:52:9D:E2:28:CC:26:1C:BB:40
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 03931F3B
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/7XpMYW8VPpw-yPVSneIozCYcu0A.roa
Signing time: Wed 23 Mar 2022 14:58:28 +0000
ROA not before: Wed 23 Mar 2022 14:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203714
IP address blocks: 176.53.180.0/23 maxlen: 23
176.53.182.0/23 maxlen: 23
185.207.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59973435 (0x3931f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Mar 23 14:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed7a4c616f153e9c3ec8f5529de228cc261cbb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:2f:b0:6b:c2:27:11:7c:06:8b:5b:90:91:
99:49:1e:6f:0a:73:ca:d9:95:63:db:5f:40:47:29:
fc:67:11:71:8d:9e:57:43:91:be:0a:ee:a3:f3:6a:
7b:63:a4:03:4a:4a:be:56:e5:70:62:a2:21:86:76:
7c:2e:12:e9:a0:ae:bb:c0:6c:4e:f8:f9:bd:e0:81:
a7:ba:e6:06:16:f0:28:ae:54:b8:09:95:b8:e1:e1:
69:41:01:04:a3:84:fe:81:e9:58:e1:a2:8b:c5:95:
eb:92:e7:f2:2f:14:b7:b9:89:2a:ff:d4:5e:1b:6d:
6e:8c:96:be:cc:20:38:44:57:ce:09:ea:ac:5f:29:
d7:7a:db:1a:6a:fc:99:56:05:2b:ca:da:0a:5b:9a:
eb:96:e1:61:aa:de:88:3b:bb:fc:fe:32:62:7e:70:
a2:89:08:ea:8f:24:e1:70:8e:0e:79:b2:4c:52:e0:
b5:86:54:04:7b:d0:74:67:2b:31:0d:bc:79:f4:67:
80:21:d2:ab:a3:c1:0b:b9:3b:d8:a1:e5:63:39:27:
c0:12:8d:bc:f2:a7:70:c8:b5:e6:11:d3:f3:64:bb:
74:93:6d:f7:ca:96:94:2f:66:f3:2d:6d:ee:72:1b:
dc:bd:46:04:8c:47:75:1c:7d:92:3c:d6:bf:13:85:
60:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:4C:61:6F:15:3E:9C:3E:C8:F5:52:9D:E2:28:CC:26:1C:BB:40
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/7XpMYW8VPpw-yPVSneIozCYcu0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.180.0/22
185.207.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:89:d4:cd:d8:ce:4d:0d:d6:2e:1d:80:6b:62:03:b3:e9:54:
d3:d5:68:c7:b7:9d:a9:eb:08:76:75:49:93:f7:66:1e:61:3d:
8a:8d:76:39:a5:db:c9:7d:3b:28:fe:b2:80:fa:3d:d2:a8:27:
ab:61:1d:d8:34:bb:96:f2:b0:2d:29:8b:bc:2f:3f:13:f8:5a:
d4:3f:04:85:2d:33:bd:fe:ed:01:3d:6b:b5:d3:2d:92:35:8a:
0c:cd:d5:0b:30:77:d4:6d:29:5c:34:cd:ef:eb:2c:04:82:bc:
2f:4f:9c:e1:ad:70:6b:86:4d:d2:64:3f:ba:93:44:e7:69:5c:
0d:f3:4b:17:09:b2:6d:0d:a4:12:1e:55:e5:63:a1:c3:74:5a:
e4:92:b4:93:f3:8b:49:b9:27:4d:43:93:d4:20:f8:02:ce:41:
08:b1:67:1e:e8:be:b6:a4:68:83:07:4a:6c:86:d8:2a:21:c6:
3e:55:19:90:7e:eb:c1:3f:f0:c5:7b:9c:18:dd:41:1f:92:d1:
76:11:f3:63:0d:34:00:09:88:a5:d9:5f:ba:f5:71:c8:ae:56:
54:b5:17:e4:9d:dc:5a:1e:1e:40:ad:3f:8a:09:4b:17:3a:3f:
41:ad:41:6a:a6:82:8e:9b:2b:36:d1:90:5c:d2:d5:4c:d0:72:
9b:89:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:51 2023 by rpki-client on console-ams.rpki-client.org