Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/b-HQBq64unJQ4n3yiFk1HdyGp9k.roa
File: b-HQBq64unJQ4n3yiFk1HdyGp9k.roa (raw, json)
Hash identifier: Q1SKBBzA8bsf6ctFYkRj7HgMGgJfn++RVo/XmJ4Dmhs=
Subject key identifier: 6F:E1:D0:06:AE:B8:BA:72:50:E2:7D:F2:88:59:35:1D:DC:86:A7:D9
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 1BFCF0F9
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/b-HQBq64unJQ4n3yiFk1HdyGp9k.roa
Signing time: Sat 01 Jan 2022 04:51:36 +0000
ROA not before: Sat 01 Jan 2022 04:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5479
IP address blocks: 193.219.40.0/21 maxlen: 21
193.219.48.0/21 maxlen: 21
193.219.56.0/22 maxlen: 22
193.219.80.0/20 maxlen: 20
193.219.128.0/20 maxlen: 20
193.219.144.0/21 maxlen: 21
2001:77c::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469561593 (0x1bfcf0f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Jan 1 04:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fe1d006aeb8ba7250e27df28859351ddc86a7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:d1:b8:98:aa:f0:ae:92:37:b0:81:8e:07:
b5:cc:34:e8:44:2e:56:b2:cf:3c:bf:78:64:e9:69:
7e:65:6f:55:cd:6f:f1:10:d0:35:df:15:93:cb:8f:
17:06:6e:fe:19:54:0a:45:bb:3a:92:4d:dd:c4:2a:
73:16:de:31:41:db:86:7a:b7:e3:ee:b3:9c:db:f2:
85:dc:54:3e:2f:56:17:cc:be:c7:21:27:0d:36:0b:
ef:8b:34:89:50:3b:49:a8:7f:6a:cb:9d:ec:fe:89:
45:d3:5f:a0:12:59:34:1b:a1:9a:f0:88:4d:c9:22:
3e:03:2b:48:8e:d5:e7:de:51:54:b2:57:cb:30:1f:
3b:1d:82:61:d4:44:3d:82:77:ed:53:14:74:e5:de:
47:36:88:b0:d2:c0:83:a4:e6:c5:d3:5a:c6:76:59:
f0:b8:6c:16:18:f3:99:87:ee:01:a3:50:83:75:83:
69:14:d0:09:7c:53:d6:bf:0e:23:69:a8:a2:dd:2c:
3a:d6:5d:93:4e:fb:00:d0:9a:5f:cb:8c:e0:18:b6:
1b:b4:8b:7d:c0:74:d7:64:84:bb:9d:ca:78:5e:d4:
7c:bf:32:9f:f4:01:7a:0e:f6:fc:d8:b1:3a:d4:1b:
c1:5a:fb:fc:ca:63:b9:9e:ee:49:75:c9:76:64:d4:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E1:D0:06:AE:B8:BA:72:50:E2:7D:F2:88:59:35:1D:DC:86:A7:D9
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/b-HQBq64unJQ4n3yiFk1HdyGp9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.40.0-193.219.59.255
193.219.80.0/20
193.219.128.0-193.219.151.255
IPv6:
2001:77c::/32
Signature Algorithm: sha256WithRSAEncryption
08:31:60:71:ee:5f:21:e0:a8:69:d4:00:5f:90:4d:4b:2e:24:
f6:3e:f3:29:99:41:e5:1a:36:c0:1f:f4:1d:dd:41:db:1f:46:
cf:29:d1:0f:b6:91:f0:2d:43:18:22:77:6d:d4:98:bb:88:a3:
30:7a:76:83:75:b6:2d:7d:3f:bf:89:84:db:42:70:94:ca:de:
b7:60:82:f4:7c:04:13:37:03:48:dd:71:46:d4:dd:16:0e:00:
ad:fa:85:bb:ec:c5:33:56:5a:68:e1:95:a1:9a:1d:a2:5d:f0:
76:ca:e0:1a:31:a3:57:da:fb:78:c3:75:8d:f2:2a:bf:78:20:
7a:8e:24:4b:92:be:a1:b7:3d:09:ac:bd:c8:22:55:c3:ac:8a:
9c:f5:1a:e8:38:f6:54:27:fb:d4:ed:99:fd:b7:36:a6:ce:f2:
63:8a:73:52:2c:20:51:21:fe:23:fd:87:38:ba:a4:c5:bd:bc:
85:b8:3d:b9:7c:ef:02:7a:58:a3:75:a2:15:61:41:c0:26:49:
3a:4c:59:74:c7:c2:6f:ae:91:40:2c:1e:13:e2:dd:be:21:b2:
45:20:f1:e9:46:54:a5:55:07:10:94:32:57:ac:36:11:3f:0a:
5b:0d:89:5b:1b:c7:aa:3e:e3:63:a6:2e:2a:20:73:8f:b1:75:
5d:ab:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:41 2024 by rpki-client on console-fra.rpki-client.org