Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/76VetNhC28FjdgPRSTWCYFx7cBE.roa
File: 76VetNhC28FjdgPRSTWCYFx7cBE.roa (raw, json)
Hash identifier: K/PUpKFnXtPmtHMB5UqsFGudAWxY9EgOHw0quXe6IFI=
Subject key identifier: EF:A5:5E:B4:D8:42:DB:C1:63:76:03:D1:49:35:82:60:5C:7B:70:11
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 12746AE5
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/76VetNhC28FjdgPRSTWCYFx7cBE.roa
Signing time: Sat 01 Jan 2022 14:04:08 +0000
ROA not before: Sat 01 Jan 2022 14:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12926
IP address blocks: 213.63.0.0/17 maxlen: 17
185.113.156.0/22 maxlen: 22
213.63.128.0/17 maxlen: 17
213.141.0.0/19 maxlen: 19
2a00:fa00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309619429 (0x12746ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Jan 1 14:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efa55eb4d842dbc1637603d1493582605c7b7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:b2:34:64:53:ce:f8:68:e9:0c:a6:97:18:
9e:15:68:50:5a:59:18:26:6a:d3:17:9c:49:de:36:
6b:bb:f2:f4:2e:3b:94:1b:04:aa:e9:4b:6c:26:f3:
6a:29:c4:e7:e8:a5:59:be:1a:5b:0b:79:59:c5:33:
b5:8d:70:5b:d0:b1:a3:50:45:9f:d4:fb:30:dd:69:
5f:76:b6:13:96:db:18:3c:70:e0:b2:22:19:67:41:
24:bd:75:49:dc:72:c5:9f:f6:ca:3e:47:b7:8c:93:
e9:3d:ac:b3:26:ef:da:d2:72:25:1f:5f:6c:97:44:
5d:09:30:de:26:3d:69:8e:7b:b5:d0:cb:5c:95:08:
c8:96:53:1c:18:19:16:4f:6e:42:83:1a:07:e0:68:
03:cc:53:b4:48:01:cf:50:a8:5c:d0:6a:d4:b9:f3:
e4:39:c3:fd:de:63:b6:58:a4:f7:37:16:f4:7c:d7:
f3:53:8e:39:7f:c5:cb:b6:ac:21:d0:51:57:4e:15:
4d:7f:e8:24:11:19:45:b7:fc:e4:21:f2:d3:16:40:
c2:5f:85:45:d6:ed:e5:21:08:c1:20:67:7d:81:99:
cf:c7:f2:ab:40:bb:e2:50:10:ce:0e:18:9f:5a:84:
05:03:de:19:e1:a2:e0:e4:5a:29:2a:33:fd:53:ca:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:5E:B4:D8:42:DB:C1:63:76:03:D1:49:35:82:60:5C:7B:70:11
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/76VetNhC28FjdgPRSTWCYFx7cBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.156.0/22
213.63.0.0/16
213.141.0.0/19
IPv6:
2a00:fa00::/32
Signature Algorithm: sha256WithRSAEncryption
15:e4:6c:ee:7b:e4:65:d7:34:5e:27:00:3c:79:27:71:57:16:
3e:19:f6:58:1a:11:43:65:78:50:d7:66:43:2c:af:cb:94:8a:
8c:d3:de:28:1d:a6:ba:07:b2:65:4b:ba:e4:6a:0a:1d:e5:96:
2b:80:e5:54:b3:6e:b3:24:21:7f:cd:6e:2f:e7:0f:29:0d:97:
28:b2:c9:7c:e3:37:cd:63:d7:87:e4:58:d6:a8:cd:25:7b:e0:
37:43:9d:12:71:5e:d8:27:fd:8e:43:99:53:fd:05:9a:74:05:
92:49:09:d9:90:ff:e6:47:4d:98:58:66:08:f7:72:d3:12:5d:
d8:0b:69:fb:e2:d7:e9:5a:9a:ba:7d:95:25:15:86:92:44:f4:
a8:31:91:45:4a:10:1f:7d:44:e8:01:90:53:a7:c7:53:cd:d5:
ed:b7:d1:ed:57:18:4a:95:e5:87:79:33:27:99:2d:4a:77:9f:
76:12:0e:b1:69:58:c1:ab:98:f4:6b:ce:bf:9e:99:ea:79:a2:
1a:d4:0a:7c:d9:1e:6e:1a:eb:c7:53:b6:f1:89:5f:a1:72:69:
2f:c7:3f:9d:e7:66:27:6c:45:f2:d6:39:cb:73:60:2a:16:ee:
63:7c:ae:7a:9b:64:04:a3:83:01:f4:f1:ed:20:e6:5d:96:3a:
78:88:b8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:03 2023 by rpki-client on console-ams.rpki-client.org