Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/6_a4Pvd4gEwVrS6EmAZ74ZZuWLo.roa
File: 6_a4Pvd4gEwVrS6EmAZ74ZZuWLo.roa (raw, json)
Hash identifier: TerxUvP8Z4vpxBnCV+PGlj+Xv58cbadbBYtcrpI6+Xk=
Subject key identifier: EB:F6:B8:3E:F7:78:80:4C:15:AD:2E:84:98:06:7B:E1:96:6E:58:BA
Certificate issuer: /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial: 3265ABEB
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/6_a4Pvd4gEwVrS6EmAZ74ZZuWLo.roa
Signing time: Mon 31 Jan 2022 18:06:27 +0000
ROA not before: Mon 31 Jan 2022 18:06:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34173
IP address blocks: 195.64.164.0/23 maxlen: 23
193.105.43.0/24 maxlen: 24
185.7.75.0/24 maxlen: 24
185.7.74.0/24 maxlen: 24
185.7.73.0/24 maxlen: 24
185.7.72.0/24 maxlen: 24
185.7.72.0/22 maxlen: 24
2a03:1780::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845523947 (0x3265abeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
Validity
Not Before: Jan 31 18:06:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebf6b83ef778804c15ad2e8498067be1966e58ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:82:4b:66:c0:d9:07:c2:65:17:07:8a:cb:
43:d2:57:39:61:a3:43:93:ef:0a:52:9e:66:ad:65:
55:9c:a0:05:bc:8b:fa:2a:22:51:04:ed:ea:fa:6e:
fc:ef:5b:ef:f5:a4:27:08:40:96:14:0c:7c:75:8c:
91:a6:25:52:6f:ce:d7:1c:e9:b2:2f:ba:94:77:3a:
07:41:90:47:56:cc:39:41:36:d0:e1:98:ca:ac:25:
72:9d:28:65:e0:53:a1:10:4f:57:cd:61:63:bf:0f:
85:e2:e2:00:29:f3:6b:4f:58:ba:69:d3:03:8d:9e:
91:ba:1d:b6:d9:f6:3e:13:c4:46:7e:62:f9:c0:38:
27:c3:de:f6:b4:eb:b4:9b:f2:1c:01:5f:83:63:ea:
4f:de:a2:69:20:ea:a4:7b:34:87:93:3b:e1:6b:c0:
0c:0f:cd:5c:0c:0e:6d:1e:be:ee:00:2a:2f:42:7e:
87:6c:d2:06:c2:87:79:8f:d5:38:24:f6:cc:69:1f:
f1:be:61:de:0b:80:a1:62:85:93:b5:16:4b:43:e1:
1e:4e:ff:b6:02:26:66:53:96:af:cb:e5:31:50:62:
0a:ed:bb:92:8b:2c:b7:d9:1e:bb:2f:a7:e4:bc:27:
88:ad:f0:20:85:03:69:12:5f:d5:f5:11:f8:b1:12:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:B8:3E:F7:78:80:4C:15:AD:2E:84:98:06:7B:E1:96:6E:58:BA
X509v3 Authority Key Identifier:
keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/6_a4Pvd4gEwVrS6EmAZ74ZZuWLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.72.0/22
193.105.43.0/24
195.64.164.0/23
IPv6:
2a03:1780::/32
Signature Algorithm: sha256WithRSAEncryption
6c:f6:a0:5c:fa:47:54:c3:52:a8:97:21:ff:53:22:b2:8b:e0:
4f:52:29:0a:4d:7b:d4:3b:54:b1:a7:43:f2:11:6e:7b:c5:d4:
ba:ac:f2:5a:7d:d1:f6:95:5c:67:67:83:69:b2:bc:87:83:c1:
3b:16:e7:15:a2:b5:96:a8:32:82:4b:bf:be:8f:20:b4:61:6b:
26:9c:9f:9b:dd:e0:53:28:b4:8f:09:90:f7:8c:56:cd:ec:54:
cd:fa:a8:86:61:02:65:12:2c:15:da:61:b4:75:77:ec:b7:4c:
32:fc:62:2b:1a:f7:1b:57:50:d8:49:67:3e:b1:e3:21:f8:1d:
7d:24:29:18:1a:fc:cb:c8:54:23:f4:85:1e:a0:ae:58:cf:9c:
e4:5f:22:a4:f7:da:47:10:59:f9:2e:ea:ef:42:d2:86:ad:bb:
c1:bb:b9:b4:6d:69:fe:e6:91:f7:8b:a7:5d:fc:00:c3:2b:d6:
5a:7a:11:4f:53:90:78:12:64:a7:db:b1:b6:88:6e:f0:02:1f:
c5:be:00:52:7e:b2:59:87:74:ca:d2:52:18:a4:9f:65:7f:36:
8c:5f:a8:45:c8:6b:95:6f:f0:b3:06:0f:52:84:ba:b4:ea:c1:
c1:25:90:48:3e:bb:5e:00:70:07:31:48:71:38:f6:fd:60:0b:
ad:6b:d1:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:43 2024 by rpki-client on console-ams.rpki-client.org