Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/bA8bO-7AKJ_zzSNJBKQ3Yy7NAkM.roa
File: bA8bO-7AKJ_zzSNJBKQ3Yy7NAkM.roa (raw, json)
Hash identifier: ec1olFFcc20nOoWLPzl/wOcH/d29sBXINRW9nAR3JwU=
Subject key identifier: 6C:0F:1B:3B:EE:C0:28:9F:F3:CD:23:49:04:A4:37:63:2E:CD:02:43
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 03C9B80C
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/bA8bO-7AKJ_zzSNJBKQ3Yy7NAkM.roa
Signing time: Sat 01 Jan 2022 06:02:10 +0000
ROA not before: Sat 01 Jan 2022 06:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39728
IP address blocks: 185.149.196.0/22 maxlen: 22
178.214.160.0/19 maxlen: 19
185.178.244.0/22 maxlen: 22
178.216.232.0/21 maxlen: 21
91.217.4.0/23 maxlen: 23
176.113.224.0/19 maxlen: 19
2a07:6900::/48 maxlen: 48
2a07:6900:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63551500 (0x3c9b80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jan 1 06:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c0f1b3beec0289ff3cd234904a437632ecd0243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:c3:b0:d9:ea:e5:01:7e:cb:0d:99:bf:f4:
d6:f0:e9:1e:b6:66:c9:31:e1:b6:d5:f0:56:ff:ad:
10:1b:a0:f3:af:93:e8:cb:14:8a:05:34:26:ac:e6:
50:80:25:43:a0:1d:89:e7:d0:a9:78:85:9c:33:38:
ce:a4:f2:21:cd:8c:a1:9e:25:99:54:1e:f1:7f:55:
bc:37:c1:97:28:38:b7:6f:19:ea:8c:b1:f7:c4:e4:
72:c9:b4:11:81:a3:1a:7a:c4:7e:c9:60:ee:25:53:
6e:fd:2c:74:37:18:80:86:a5:37:88:a0:5c:40:af:
a6:50:90:e4:c7:91:f8:ef:24:cb:64:6e:43:c8:fc:
58:2c:8f:02:2c:be:7f:b7:ae:0d:a9:56:53:a6:2b:
9c:97:7f:e4:c8:e5:8f:cc:e2:2e:dc:40:9f:4b:99:
15:b4:92:3f:60:e2:94:02:6c:03:8a:dc:12:0d:18:
2a:00:3e:0b:cd:a4:5f:a1:ab:fc:59:c0:6b:c0:70:
e3:30:ef:f6:1d:85:e0:6a:a5:0a:3e:19:4d:40:db:
93:b5:71:92:d7:21:f6:5c:ed:8a:97:51:c6:89:25:
95:7b:33:b5:4a:bb:a4:28:01:24:56:db:a9:11:f3:
1d:45:4c:90:7b:e9:a7:8a:64:b4:3a:ca:ca:f2:39:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:1B:3B:EE:C0:28:9F:F3:CD:23:49:04:A4:37:63:2E:CD:02:43
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/bA8bO-7AKJ_zzSNJBKQ3Yy7NAkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.4.0/23
176.113.224.0/19
178.214.160.0/19
178.216.232.0/21
185.149.196.0/22
185.178.244.0/22
IPv6:
2a07:6900::/47
Signature Algorithm: sha256WithRSAEncryption
31:c8:e6:00:92:d9:a9:b5:f8:92:88:46:95:4c:26:d6:83:d2:
28:54:d6:9f:28:47:6f:56:36:2e:e4:d3:7b:f4:98:a9:23:29:
9f:5f:84:83:eb:5d:c8:a4:ab:fe:62:d1:26:96:fd:7c:d1:39:
d1:78:dc:dd:6f:8b:f5:eb:48:24:a8:ee:aa:38:3f:d5:35:71:
0e:15:03:1c:2b:df:73:ff:a8:43:73:2d:d7:ad:6e:88:33:31:
e1:55:24:ca:cb:bc:d4:53:3b:24:7b:3a:f3:be:d5:18:e5:31:
b4:e7:86:65:aa:c1:8c:83:92:6d:f6:2a:9a:71:60:3c:af:04:
6c:5e:f0:1a:df:69:58:2f:85:df:44:a6:49:08:c4:ce:7e:85:
63:3c:17:f2:74:5a:c2:81:a8:b7:66:c8:d3:93:1e:67:7d:eb:
16:f4:e3:3e:47:3b:4f:c6:46:ee:f4:b9:b0:48:df:64:d4:19:
15:88:5a:be:35:54:60:c8:64:08:6a:04:66:76:27:6e:62:21:
81:7e:4d:6c:70:8b:02:b4:39:3f:09:46:21:39:25:45:b4:38:
b1:57:07:96:e9:b9:c6:19:4a:46:e4:ce:6e:48:18:2b:8d:6e:
b0:d2:47:73:fa:c4:4c:15:16:c1:1c:2f:5d:87:16:f1:55:68:
1a:da:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org