Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/d6vhExgOiu7xdn34YaHGdcpRlOY.roa
File: d6vhExgOiu7xdn34YaHGdcpRlOY.roa (raw, json)
Hash identifier: qP27vcvumkWIHB4wgHbFI+QI1jiVFZ26OLP3jEMjk1o=
Subject key identifier: 77:AB:E1:13:18:0E:8A:EE:F1:76:7D:F8:61:A1:C6:75:CA:51:94:E6
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 0C76850B
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/d6vhExgOiu7xdn34YaHGdcpRlOY.roa
Signing time: Sat 01 Jan 2022 14:58:45 +0000
ROA not before: Sat 01 Jan 2022 14:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51101
IP address blocks: 195.43.66.0/23 maxlen: 23
185.230.224.0/22 maxlen: 22
178.217.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209093899 (0xc76850b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Jan 1 14:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77abe113180e8aeef1767df861a1c675ca5194e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:c8:39:4b:7d:51:92:90:da:ef:8a:77:0a:
96:3c:2a:85:f2:9c:fe:af:8d:31:77:12:20:a0:84:
7d:e8:7e:0d:16:68:3e:60:13:6f:62:a0:3f:4a:f6:
24:74:fe:b3:6c:9e:c8:9e:d2:e1:00:39:ec:c0:00:
02:6b:a7:60:ac:1a:2e:95:65:bb:dd:65:60:ae:60:
76:73:90:d7:a3:e0:2e:20:0f:e7:04:c3:c1:17:37:
fb:e3:bc:99:c0:53:15:4a:25:ab:44:60:02:78:3e:
ef:91:dc:d0:cf:7e:2a:0a:fa:c7:30:0b:ea:56:b4:
25:bf:a9:1e:44:43:bd:42:74:dd:ea:13:78:98:ef:
0b:fc:e8:c2:dd:7f:12:40:90:d9:35:ba:d5:9c:aa:
7f:44:88:8f:ad:50:c9:62:a2:09:75:10:8e:ad:db:
26:a5:38:40:d3:5a:eb:e3:c2:eb:83:46:e7:32:1e:
29:e8:6c:b7:55:15:39:eb:7c:22:05:4a:e1:01:5f:
21:92:a1:97:d6:85:8f:42:fc:1a:85:46:43:6f:80:
cd:f3:6a:a9:32:08:39:c3:6a:de:98:da:ef:34:49:
df:ef:24:c7:fd:ab:8b:15:ae:23:99:ea:ac:61:c2:
e0:e5:f8:2f:17:6a:f9:d2:02:8f:c5:d8:bc:82:69:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AB:E1:13:18:0E:8A:EE:F1:76:7D:F8:61:A1:C6:75:CA:51:94:E6
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/d6vhExgOiu7xdn34YaHGdcpRlOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.112.0/21
185.230.224.0/22
195.43.66.0/23
Signature Algorithm: sha256WithRSAEncryption
65:af:b1:16:00:da:be:85:e2:af:02:e5:45:d5:9a:95:8a:3e:
1d:38:00:fa:33:19:0f:76:5b:78:15:77:e5:b0:c2:99:7f:05:
0b:53:6c:87:ef:87:c2:b5:21:f2:ac:37:c7:45:97:76:c0:49:
03:d5:e0:4f:31:21:f6:8c:71:60:28:98:77:b2:20:d8:c3:77:
af:ea:9d:e3:27:8e:c2:f7:6f:2d:25:1d:51:37:85:a0:18:6f:
33:15:51:eb:80:94:93:a6:94:92:82:fe:b4:cb:fe:5d:5d:b0:
6c:71:34:d8:df:c3:73:9f:7e:44:7e:f0:92:d1:b7:d9:e9:ac:
ed:d8:79:a1:c7:4c:2e:49:52:43:fd:a4:84:7a:d7:19:41:33:
98:97:08:ec:5a:26:af:8f:22:da:dd:24:7a:f3:77:27:35:e5:
21:09:1c:71:6b:6b:52:88:10:07:8d:52:57:36:5a:b0:06:80:
90:5d:aa:bf:ef:14:2b:3c:c4:0a:46:ed:2e:7c:63:f8:f8:18:
6f:d5:c0:7f:b1:32:2d:fd:86:78:f1:2d:09:ee:9d:6d:6b:51:
ee:1b:58:cb:9a:ba:5a:f5:5b:b3:de:c1:57:49:c8:ee:b1:f3:
ff:75:63:1e:3f:5c:13:1c:42:8c:6d:c7:02:d5:f9:1b:9f:4f:
0d:21:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:12 2024 by rpki-client on console-fra.rpki-client.org