Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/etprwrMcFnaBNsP6VkYdrSvtZwU.roa
File: etprwrMcFnaBNsP6VkYdrSvtZwU.roa (raw, json)
Hash identifier: YsxsILS1BEH1JSZAvRZeNxoz+7swHsADVutRuwR4XjQ=
Subject key identifier: 7A:DA:6B:C2:B3:1C:16:76:81:36:C3:FA:56:46:1D:AD:2B:ED:67:05
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0E882D28
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/etprwrMcFnaBNsP6VkYdrSvtZwU.roa
Signing time: Sat 01 Jan 2022 04:55:14 +0000
ROA not before: Sat 01 Jan 2022 04:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39179
IP address blocks: 89.28.232.0/21 maxlen: 21
95.130.96.0/22 maxlen: 22
95.130.96.0/21 maxlen: 21
158.255.8.0/21 maxlen: 21
95.130.102.0/24 maxlen: 24
95.130.100.0/23 maxlen: 23
193.27.212.0/23 maxlen: 23
77.93.128.0/19 maxlen: 19
185.101.44.0/22 maxlen: 22
79.99.144.0/22 maxlen: 22
2a00:1c40::/32 maxlen: 32
2a02:6f80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243805480 (0xe882d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jan 1 04:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ada6bc2b31c16768136c3fa56461dad2bed6705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:03:e5:7d:a4:f9:a7:bb:ef:72:b6:86:fc:
18:45:24:e3:cf:64:0d:f4:17:7a:3b:b7:94:b6:d3:
dd:eb:e8:56:47:d2:b7:26:77:60:d5:8b:30:7a:6b:
71:2b:93:73:ea:13:6e:32:94:e1:3e:67:5c:a1:65:
9b:76:d4:b7:e6:24:e9:ba:f0:76:78:f5:e2:77:e3:
df:66:e5:70:12:33:a8:33:a2:d9:3a:7f:73:74:3c:
e7:3d:11:f0:c8:70:ad:8a:87:68:c9:2e:3a:47:43:
82:26:73:47:1e:77:ca:cf:4e:67:7f:63:25:77:19:
b3:c9:59:40:85:fd:f1:9c:64:32:a8:c2:4b:91:1a:
7d:f3:c4:7f:ac:4b:74:8e:08:a8:e5:f3:68:c5:ed:
a9:75:f6:40:1f:3c:a8:61:16:30:2a:27:7b:af:2a:
d3:b9:89:ed:fe:35:d6:ba:0d:41:c3:a4:0c:56:20:
0b:b1:48:57:18:c8:87:12:8f:ff:96:fa:d3:9c:3d:
61:0a:3b:ae:da:89:4b:40:d7:07:18:93:28:91:0e:
2c:d0:5e:33:2d:ef:fe:51:c3:80:95:50:ef:dd:57:
2b:e2:6d:cb:a1:17:ad:62:97:29:f9:bd:60:a1:80:
47:3b:04:8f:84:a2:74:f6:77:90:91:25:92:36:37:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:6B:C2:B3:1C:16:76:81:36:C3:FA:56:46:1D:AD:2B:ED:67:05
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/etprwrMcFnaBNsP6VkYdrSvtZwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.128.0/19
79.99.144.0/22
89.28.232.0/21
95.130.96.0/21
158.255.8.0/21
185.101.44.0/22
193.27.212.0/23
IPv6:
2a00:1c40::/32
2a02:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
11:8b:fd:45:40:65:11:1a:e5:7d:db:2b:29:38:1d:9a:11:b2:
2e:bc:20:ac:4a:97:ed:14:30:aa:77:6c:03:ee:55:d9:ea:ef:
54:36:74:a9:63:bc:07:c1:68:16:57:f9:0f:7a:28:b3:13:a8:
5d:9a:fb:c8:c8:3a:91:9c:46:40:30:48:f7:82:d1:98:e7:75:
f4:eb:97:5a:87:1e:2f:8c:ca:e8:bf:50:ad:bd:5e:58:c0:57:
b9:fc:00:17:fc:e8:80:71:7f:2a:de:9f:67:4e:db:65:69:02:
b3:8d:d2:93:2b:07:7d:5f:59:df:1d:76:ca:0b:22:e5:b5:45:
27:a1:00:79:4f:45:69:13:c9:3d:42:1e:dd:0a:3a:41:2b:1c:
82:79:7b:a5:28:ce:ad:b4:27:52:b5:2f:3e:3c:20:94:13:0f:
0f:c1:5f:47:c9:bf:23:71:4b:66:c5:65:2d:9a:28:98:aa:48:
a8:7f:4d:63:39:d7:36:58:62:d1:db:40:25:9c:2c:ce:da:40:
c4:0c:54:38:a5:48:78:9f:c0:a3:49:60:50:3c:28:dc:a0:10:
19:e6:b8:a8:54:aa:5e:4b:22:89:d1:83:37:80:f7:18:ce:20:
c8:e0:2a:6f:e8:cb:33:cd:03:b5:27:bf:e2:6d:2a:45:8d:ec:
32:cb:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org