Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1-enC5McqCih9RZWo-MgHtJ1ihQA.roa
File: 1-enC5McqCih9RZWo-MgHtJ1ihQA.roa (raw, json)
Hash identifier: 0HWZZarUWhXK+OiP2Ya+NWraDkokpPjM7CpXUIm6nzY=
Subject key identifier: F9:E9:C2:E4:C7:2A:0A:28:7D:45:95:A8:F8:C8:07:B4:9D:62:85:00
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01848AA762308508758206F13FCB84EE4463
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1-enC5McqCih9RZWo-MgHtJ1ihQA.roa
Signing time: Fri 18 Nov 2022 12:12:16 +0000
ROA not before: Fri 18 Nov 2022 12:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 62.56.208.0/21 maxlen: 24
213.170.145.0/24 maxlen: 24
185.104.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:a7:62:30:85:08:75:82:06:f1:3f:cb:84:ee:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Nov 18 12:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9e9c2e4c72a0a287d4595a8f8c807b49d628500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:c1:0b:b1:9e:82:6c:b5:bd:ee:90:b9:04:
d5:52:d4:d8:19:3a:0f:97:58:17:8d:3f:b5:a4:6f:
2f:fa:11:b7:b1:41:b5:7f:e3:ec:81:1f:40:3e:ac:
41:46:67:9d:1e:29:91:cb:89:a5:a0:e6:6b:58:ef:
7f:5c:66:8b:1e:25:c4:ed:f2:21:dd:af:01:a9:92:
fc:48:29:49:32:65:76:d9:83:44:38:b6:17:c9:4b:
03:a0:1e:42:85:19:4c:30:c9:14:03:78:88:c2:34:
de:86:f1:be:a7:9a:89:41:e0:89:3e:08:fd:66:b9:
7e:57:25:7d:96:fb:6e:90:44:8d:22:59:72:fa:99:
88:fa:06:5b:cb:2c:4e:5c:d9:71:65:26:22:da:ba:
ac:27:0a:96:58:d0:78:61:83:24:25:08:a4:73:6f:
56:de:ac:1c:de:75:b4:e8:87:59:aa:7e:ab:c2:4e:
e9:58:89:05:e1:2e:e9:24:24:bd:08:7c:a9:c3:da:
4e:56:cb:ce:d7:70:8a:18:4d:ad:7d:c7:42:2e:5d:
43:78:e8:7b:f3:2a:11:72:4d:11:9a:45:8d:00:26:
68:be:45:83:15:19:fd:57:3b:1b:2e:23:3b:e8:00:
3e:f3:69:6d:3d:6a:f9:ce:76:a8:ae:3d:b4:66:40:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:C2:E4:C7:2A:0A:28:7D:45:95:A8:F8:C8:07:B4:9D:62:85:00
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/1-enC5McqCih9RZWo-MgHtJ1ihQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.208.0/21
185.104.12.0/22
213.170.145.0/24
Signature Algorithm: sha256WithRSAEncryption
51:13:f1:eb:d5:85:45:5c:c5:27:5c:57:7d:6c:c9:99:e8:95:
69:d7:d2:9e:67:06:6b:ea:13:2c:2c:51:dd:f9:1e:89:d7:e8:
f5:34:cd:41:93:8b:48:1e:5d:85:e7:fb:04:31:41:61:89:5e:
cf:3a:f3:6e:52:85:4b:42:a5:6f:11:7a:92:4b:a1:68:16:1e:
29:35:0a:46:57:9b:c1:da:2d:d0:b4:9f:4a:a9:72:a6:e5:cd:
8c:0c:de:58:78:40:4e:03:d0:ef:0c:76:d2:4e:bb:c8:7d:af:
86:96:b4:8b:ed:22:77:6e:e4:3d:74:0a:fc:e9:c2:b8:eb:c0:
81:cf:7c:a6:61:83:4a:bc:97:bb:1d:f5:2a:95:db:bb:7d:ea:
54:09:65:29:9b:82:52:2c:1e:d3:98:65:2a:f8:05:b4:31:87:
63:54:1b:72:85:c2:b8:d1:00:34:f2:b0:65:f3:bb:55:4d:68:
6e:7d:89:d8:34:0f:47:dd:d2:a2:08:c6:73:ef:ed:cb:25:52:
15:b2:1e:87:38:db:64:b1:33:45:50:9b:b3:40:b8:8c:6d:91:
98:42:3c:bd:a5:f0:cc:41:97:2a:ec:40:31:d7:42:43:14:b2:
64:3b:47:fa:85:25:5e:45:9c:01:5c:bb:4b:2b:a3:26:a7:8e:
89:b3:1e:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org