Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/x1Fs6b-lZEvyDzaUh_EkzC-evGM.roa
File: x1Fs6b-lZEvyDzaUh_EkzC-evGM.roa (raw, json)
Hash identifier: hmNa/QKNwMrZO61rUFAZfGzgsXjX5xAoOrnvmx3O8Cc=
Subject key identifier: C7:51:6C:E9:BF:A5:64:4B:F2:0F:36:94:87:F1:24:CC:2F:9E:BC:63
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 0260A108
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/x1Fs6b-lZEvyDzaUh_EkzC-evGM.roa
Signing time: Fri 20 May 2022 11:25:30 +0000
ROA not before: Fri 20 May 2022 11:25:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207088
IP address blocks: 195.210.96.0/22 maxlen: 22
195.210.104.0/22 maxlen: 22
195.210.100.0/22 maxlen: 22
195.210.116.0/22 maxlen: 22
195.210.120.0/22 maxlen: 22
2a0a:a200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39887112 (0x260a108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: May 20 11:25:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7516ce9bfa5644bf20f369487f124cc2f9ebc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:1f:82:5e:cf:a0:ae:ce:d4:b0:e0:10:70:
96:c5:7a:35:b2:e7:b6:e1:c5:7d:d8:40:52:8b:bd:
bf:fd:57:ad:4b:0b:9e:c4:d8:ba:dd:b5:ee:5c:93:
ff:e9:a6:1c:dd:1d:ec:26:92:45:e6:87:6c:bc:f7:
02:13:da:06:df:d1:1a:45:92:60:27:04:f1:e3:6d:
c9:3b:0b:5c:f9:0f:92:63:6d:31:23:37:38:d9:56:
96:b2:a6:e3:6b:ff:13:5d:54:05:e5:d4:90:29:4b:
cb:9f:d9:c6:b9:31:cb:a3:3f:00:b1:55:61:be:0d:
46:47:0e:01:c1:45:27:66:b1:68:59:b0:d3:37:b7:
48:64:3e:8e:ff:4a:54:27:28:aa:3e:49:6a:3c:a7:
69:2c:08:3b:88:d9:e2:d6:27:47:1a:c5:b3:ef:9e:
c4:6c:1f:7f:10:30:ec:41:3b:8f:ab:3a:54:40:34:
a7:ed:41:45:9e:f4:21:88:03:36:f8:f5:f2:7c:7e:
17:c3:bb:59:53:04:0d:f1:0b:bd:ff:aa:f6:a0:f7:
6e:62:5b:4f:3f:8c:13:46:ad:da:72:f5:be:b2:2a:
36:d7:f3:82:89:25:82:36:7f:c8:75:6d:a6:5c:68:
4c:a8:29:16:5e:03:65:95:cc:51:26:ef:56:cf:82:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:6C:E9:BF:A5:64:4B:F2:0F:36:94:87:F1:24:CC:2F:9E:BC:63
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/x1Fs6b-lZEvyDzaUh_EkzC-evGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.96.0-195.210.107.255
195.210.116.0-195.210.123.255
IPv6:
2a0a:a200::/29
Signature Algorithm: sha256WithRSAEncryption
ce:ea:94:d8:f8:be:14:c9:28:15:63:0c:3a:bb:49:d7:84:a6:
bf:b8:09:a9:c2:ae:33:86:e4:ee:fb:9e:bf:08:32:9c:b6:98:
2c:69:be:60:01:28:f1:f6:28:b7:b8:21:cc:7f:e2:c2:f1:20:
c5:5d:af:4a:b9:42:ca:a6:e3:39:cd:cf:4a:8d:ec:a4:48:55:
0f:5b:8f:fa:24:f4:7b:0b:39:01:60:34:45:be:7b:75:f1:86:
ef:b0:eb:41:e6:0a:a9:4f:64:66:75:6a:d1:27:fb:2e:c7:8e:
2f:5a:e0:5f:4f:ef:56:f8:2f:45:36:bf:a8:40:53:2b:76:00:
73:b8:1f:85:76:30:3f:a1:c7:e7:30:0c:99:77:4a:b2:1a:c7:
d8:69:2c:ac:81:8c:6c:e1:fc:04:74:15:3d:48:3c:d2:bc:ae:
2d:82:f7:72:2c:3d:83:a4:16:1c:2c:dc:c5:c8:5c:05:39:72:
e8:f6:35:46:31:6b:a0:31:aa:1c:dc:81:2d:a1:86:48:97:2b:
80:55:f8:8b:d7:6c:9f:d4:2c:6c:56:25:21:68:a9:2a:02:29:
d9:b1:ce:f9:24:b1:55:35:3e:e3:d2:1d:cd:62:34:c6:b3:c9:
4f:f7:36:ee:f5:27:05:82:a7:15:33:40:b3:91:43:7e:e1:d8:
08:13:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org