Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/4Wq33Uz5ArxJ8PB9Jhep9nJVLrQ.roa
File: 4Wq33Uz5ArxJ8PB9Jhep9nJVLrQ.roa (raw, json)
Hash identifier: rGItEoJI+SgEGcJbF98Qfc4eA0vzkrnGAeD2QkmTJjs=
Subject key identifier: E1:6A:B7:DD:4C:F9:02:BC:49:F0:F0:7D:26:17:A9:F6:72:55:2E:B4
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 091DF3E7
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/4Wq33Uz5ArxJ8PB9Jhep9nJVLrQ.roa
Signing time: Sat 01 Jan 2022 06:55:18 +0000
ROA not before: Sat 01 Jan 2022 06:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50919
IP address blocks: 178.23.72.0/21 maxlen: 21
194.62.224.0/22 maxlen: 22
188.164.200.0/21 maxlen: 21
2a00:1f68::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152957927 (0x91df3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Jan 1 06:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e16ab7dd4cf902bc49f0f07d2617a9f672552eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:b9:2a:be:f6:c0:c3:c3:5d:00:b7:bd:0f:
d1:dd:61:90:1d:65:5f:eb:e7:b9:54:06:20:39:44:
cd:47:c8:7b:63:d4:2b:71:2d:d4:47:c7:d4:21:59:
e7:25:f7:39:c0:a2:eb:99:9e:45:f7:d6:25:af:c8:
ac:2a:83:b4:97:c3:47:ab:1d:dc:fa:8c:3c:0f:02:
a8:76:4f:8a:de:7e:e3:36:14:b6:47:01:97:fe:29:
6a:76:3e:20:89:1a:21:bc:c5:c5:7f:46:16:e6:88:
44:49:11:75:c3:a9:03:02:a2:5d:9e:28:e9:e9:8e:
f3:11:0c:6c:29:6e:a2:c4:8e:6f:6b:4d:cf:8f:03:
f9:18:27:77:55:88:e4:46:e0:9e:ea:3f:c4:a7:c2:
d9:aa:d7:28:50:fb:30:b4:cf:05:ea:7b:f9:cb:82:
ea:f2:8b:68:25:d4:ae:2f:54:df:f1:7a:a9:5f:4d:
30:ec:03:6b:09:4f:00:a0:99:26:f2:16:17:cb:66:
89:aa:bf:05:ee:ee:fe:be:3d:3a:3d:3b:69:69:e5:
4d:3d:40:67:91:00:9e:3b:fe:a4:3e:95:b9:8f:0f:
9a:56:e7:53:ec:23:24:a9:5f:fc:3e:56:1c:b3:82:
f5:5a:fd:df:4f:5b:7d:23:4c:ef:43:28:5b:ad:07:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:B7:DD:4C:F9:02:BC:49:F0:F0:7D:26:17:A9:F6:72:55:2E:B4
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/4Wq33Uz5ArxJ8PB9Jhep9nJVLrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.72.0/21
188.164.200.0/21
194.62.224.0/22
IPv6:
2a00:1f68::/32
Signature Algorithm: sha256WithRSAEncryption
66:f8:3b:71:27:0f:4b:6e:d6:2a:fc:5b:fd:7f:01:59:d1:62:
9b:82:d0:59:11:88:33:82:b0:98:f7:a5:fd:23:51:3f:67:ed:
71:ff:a1:53:3a:ae:89:11:17:20:94:c6:20:e4:8e:12:19:9d:
b5:7c:66:65:39:07:f7:6c:1a:7a:fd:d5:cd:14:04:72:27:b6:
c1:bf:8b:4a:51:6c:36:33:d5:c6:50:b3:79:bd:d3:ea:00:40:
73:74:8e:64:fd:88:39:20:ca:7d:3f:ab:0d:b4:30:cc:70:9e:
2f:a1:5b:48:7f:c4:51:a9:3d:15:21:98:37:8e:d3:e0:4a:86:
87:10:6b:21:61:43:a8:60:c3:12:8e:f0:c7:bb:a7:b6:0e:06:
a9:08:a0:bb:9b:87:53:76:f0:6d:93:cb:62:81:29:c0:58:88:
f9:0f:b3:1c:fd:b2:c6:ae:c5:cc:a0:a1:8c:bc:f5:c3:bc:c2:
d8:2e:bf:87:45:d1:25:cc:08:83:eb:83:dc:1a:80:cd:2b:f9:
9c:1c:aa:fc:1f:e5:5c:b0:75:4a:7b:96:e6:f6:5e:2c:32:78:
8a:2e:90:db:42:26:df:17:17:b5:8b:33:c6:76:5a:d8:5f:12:
91:64:66:52:8c:46:63:fe:b5:fb:ad:3a:83:c7:9f:b5:ca:d7:
52:69:69:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:34 2023 by rpki-client on console-ams.rpki-client.org