Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/6awnf7obAHeMkEPiLuVjvMuh7sQ.roa
File: 6awnf7obAHeMkEPiLuVjvMuh7sQ.roa (raw, json)
Hash identifier: nSgis0+oRfW9fjRc3tM4JXrHT/b3nn5CwPtUAhTxd9s=
Subject key identifier: E9:AC:27:7F:BA:1B:00:77:8C:90:43:E2:2E:E5:63:BC:CB:A1:EE:C4
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 0475174F
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/6awnf7obAHeMkEPiLuVjvMuh7sQ.roa
Signing time: Sat 01 Jan 2022 15:01:52 +0000
ROA not before: Sat 01 Jan 2022 15:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49628
IP address blocks: 193.176.215.0/24 maxlen: 24
78.40.106.0/24 maxlen: 24
78.40.107.0/24 maxlen: 24
193.176.214.0/24 maxlen: 24
193.176.212.0/24 maxlen: 24
78.40.104.0/24 maxlen: 24
193.176.212.0/22 maxlen: 22
78.40.104.0/22 maxlen: 22
193.176.213.0/24 maxlen: 24
78.40.105.0/24 maxlen: 24
185.168.224.0/24 maxlen: 24
185.168.224.0/22 maxlen: 22
185.168.225.0/24 maxlen: 24
185.168.226.0/24 maxlen: 24
185.168.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74782543 (0x475174f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Jan 1 15:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9ac277fba1b00778c9043e22ee563bccba1eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5b:44:c2:f0:23:fd:e4:ae:92:ed:5e:e2:82:
2f:36:28:dc:15:c0:15:85:1c:fd:fb:2b:4f:7c:95:
02:28:cf:ec:81:87:60:56:97:45:08:87:e5:9d:b5:
f9:14:21:a8:1e:90:de:3d:d1:5a:68:ff:bd:e9:0a:
71:89:2d:c0:4b:7a:b5:d7:21:ed:7b:4e:97:d9:6e:
55:d2:2e:98:1f:bd:1b:9a:2d:f3:fc:a7:a6:d3:1a:
05:26:ec:a1:69:77:45:b4:d9:1f:70:cb:63:f7:c1:
d1:a1:e9:e4:f3:ea:85:99:25:29:84:7a:e9:96:96:
dd:e8:9d:f2:fa:8c:64:99:14:e2:2c:e8:8c:bd:e3:
78:f8:e6:d6:99:4a:28:11:80:c4:b8:3c:95:b0:be:
41:b5:71:5d:77:12:a1:e9:51:64:12:d8:c0:71:db:
8f:e9:47:bd:92:70:f0:13:b8:fa:db:a7:61:6a:71:
9f:c2:75:12:7e:aa:7f:f8:38:4d:b2:e2:cf:76:ae:
c9:d9:7d:ea:32:ab:1a:4f:71:2e:c7:73:07:07:08:
2a:da:d1:a1:b6:6e:23:52:a1:1c:2d:27:b0:57:8d:
9e:ee:04:72:81:43:de:2a:4f:60:c0:53:c4:4c:b1:
9a:04:7d:d0:26:23:cc:56:29:e7:d4:4e:e1:01:b2:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:27:7F:BA:1B:00:77:8C:90:43:E2:2E:E5:63:BC:CB:A1:EE:C4
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/6awnf7obAHeMkEPiLuVjvMuh7sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.104.0/22
185.168.224.0/22
193.176.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:11:0e:fd:05:33:ad:ea:28:64:5d:3a:4c:f2:b2:83:8f:d8:
5b:cc:7d:83:94:0a:44:9d:d4:69:bd:73:21:c0:a1:1b:d2:a6:
c6:4a:0c:4b:08:cd:6c:04:47:2a:c4:17:b5:62:f7:31:68:1e:
7d:8e:93:ec:1d:91:4f:c8:e1:2d:58:2f:44:dc:11:f4:3d:1d:
54:54:68:e3:96:55:eb:35:40:8c:8f:e4:63:69:29:be:d0:58:
e0:98:f3:fe:1d:b9:0a:65:01:ac:4b:78:fa:3f:b4:40:1a:65:
1f:4b:3b:88:e6:fc:72:f2:ab:1f:97:d9:f9:70:db:4f:dc:7f:
b1:ff:dd:c0:fe:a1:cf:89:59:ba:f3:df:aa:00:89:30:fb:16:
c3:04:53:5d:86:33:a1:73:db:94:61:60:5b:61:75:6d:85:71:
61:c4:95:c0:c4:a8:7e:52:c5:b0:17:38:f8:4a:5e:25:40:68:
a7:57:c4:26:76:2d:0c:f7:88:9d:a3:23:73:d2:d1:fa:fb:7c:
48:40:43:f1:dc:cc:f2:06:21:18:7b:ad:d7:69:ab:ca:1e:06:
6a:c7:bf:3b:29:a6:07:c3:e0:9e:b7:f6:86:d1:be:62:3d:67:
80:d5:69:82:14:20:60:52:48:64:0f:bb:99:8c:a3:0f:f3:42:
cd:12:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org