Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/tQu6WimVFXDre2XLdD_e7gF-I6c.roa
File: tQu6WimVFXDre2XLdD_e7gF-I6c.roa (raw, json)
Hash identifier: sw3i7ExzkgUlbCPFMKjCiwCPMfkaPW/bANuFgWYBQhw=
Subject key identifier: B5:0B:BA:5A:29:95:15:70:EB:7B:65:CB:74:3F:DE:EE:01:7E:23:A7
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 16B8EC3E
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/tQu6WimVFXDre2XLdD_e7gF-I6c.roa
Signing time: Sat 01 Jan 2022 04:01:10 +0000
ROA not before: Sat 01 Jan 2022 04:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21385
IP address blocks: 185.55.120.0/22 maxlen: 22
86.110.64.0/19 maxlen: 19
81.92.160.0/20 maxlen: 20
212.82.160.0/19 maxlen: 19
217.151.80.0/20 maxlen: 20
193.110.24.0/22 maxlen: 22
2001:1b18::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381217854 (0x16b8ec3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Jan 1 04:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b50bba5a29951570eb7b65cb743fdeee017e23a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:81:c8:6e:d3:a4:85:13:e5:d8:3b:58:06:
f0:10:72:0d:e9:5d:8e:d9:72:4f:0b:32:80:62:42:
41:85:11:84:81:17:7c:7a:1f:21:84:10:d2:59:a8:
10:b4:4d:1a:9f:89:ee:2a:ed:e9:99:bc:43:c3:2e:
1f:e8:c7:a2:00:39:6a:61:9b:63:c3:e5:35:be:e7:
64:0f:9a:7c:12:1b:a0:83:c8:c2:17:7c:4f:49:3b:
b5:96:13:55:3d:38:1a:20:28:c6:b1:8e:33:f0:3a:
a2:69:ff:c0:d6:1f:30:93:20:fd:9b:88:a8:c1:4e:
42:62:4e:0f:76:e5:aa:19:db:cd:67:3d:84:80:c7:
36:16:ac:57:59:36:ff:14:f2:30:62:7b:35:9c:16:
5c:68:02:bb:69:7e:1f:5e:ff:79:57:ac:39:c3:b1:
04:36:96:d5:ba:b0:ac:b7:52:df:6c:7e:66:27:6a:
e9:80:b8:b7:c3:25:7e:db:45:3e:5e:8e:a4:0b:30:
a6:b2:5e:7c:24:22:c3:be:3c:ee:6c:4e:f7:df:2b:
cf:71:b8:65:6e:72:70:8c:20:a3:36:df:c6:0f:b5:
e0:9b:f0:b0:5d:00:46:b5:99:6b:c9:d5:66:bd:c2:
11:d9:7b:69:29:4c:ac:97:05:4a:7b:e3:5b:98:3e:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:BA:5A:29:95:15:70:EB:7B:65:CB:74:3F:DE:EE:01:7E:23:A7
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/tQu6WimVFXDre2XLdD_e7gF-I6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.160.0/20
86.110.64.0/19
185.55.120.0/22
193.110.24.0/22
212.82.160.0/19
217.151.80.0/20
IPv6:
2001:1b18::/32
Signature Algorithm: sha256WithRSAEncryption
67:79:9f:d8:35:6a:eb:2b:5d:f5:d5:3f:e6:99:28:77:9e:d4:
bd:80:02:53:eb:01:c1:dc:35:ca:3c:4e:00:9d:8b:a5:42:cd:
2e:e7:5c:38:9f:3f:67:ca:aa:e2:66:d8:1d:a4:2c:a3:ae:d5:
ed:3b:3a:94:1e:fd:df:35:23:13:fe:c4:16:c4:bf:6a:da:2f:
de:35:96:4e:1e:e2:a1:7b:ad:3a:1c:3a:3d:84:ac:70:f5:70:
58:62:7d:99:dc:d8:08:f2:a2:9d:74:8b:29:d5:86:8e:f2:85:
54:07:68:70:74:6b:5f:ce:df:f8:87:c9:e5:d6:ce:f8:77:3f:
d3:ca:be:38:66:a6:29:a1:1a:c4:a9:df:85:89:98:43:d7:c6:
e4:6e:d5:f1:13:9d:1d:fa:b8:88:2c:bd:b1:64:36:f5:26:1f:
1a:b1:8e:d7:95:bd:67:55:81:7b:d1:1f:44:a5:4f:37:c5:27:
f3:5b:0d:25:f6:93:9f:c7:c8:49:62:36:b5:ba:8c:8d:03:a5:
99:90:06:50:b0:df:ba:a5:a2:42:77:41:49:71:b3:1f:9a:f7:
3a:9d:80:5d:d6:b1:a2:3d:8a:f8:ef:91:05:53:d1:54:82:47:
35:1b:2c:30:30:19:f0:94:2f:60:50:d0:2e:5c:6f:f2:93:8a:
19:b3:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:36 2023 by rpki-client on console-fra.rpki-client.org