Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/0_Fe7UjR9ZNgJEbL1c3xczCOS58.roa
File: 0_Fe7UjR9ZNgJEbL1c3xczCOS58.roa (raw, json)
Hash identifier: oon5ynos4vFeNRswz4/6qX8O9p/P+i/YX/RTCfi1RMk=
Subject key identifier: D3:F1:5E:ED:48:D1:F5:93:60:24:46:CB:D5:CD:F1:73:30:8E:4B:9F
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 0181DE9A276C36DD53435D1245BB57C8F3ED
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/0_Fe7UjR9ZNgJEbL1c3xczCOS58.roa
Signing time: Fri 08 Jul 2022 16:17:33 +0000
ROA not before: Fri 08 Jul 2022 16:17:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 46.245.176.0/21 maxlen: 24
89.38.36.0/23 maxlen: 24
185.187.64.0/22 maxlen: 24
91.230.172.0/22 maxlen: 24
91.90.144.0/20 maxlen: 24
195.93.242.0/23 maxlen: 24
109.70.216.0/21 maxlen: 24
86.105.222.0/23 maxlen: 24
2a00:14e0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:de:9a:27:6c:36:dd:53:43:5d:12:45:bb:57:c8:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jul 8 16:17:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3f15eed48d1f593602446cbd5cdf173308e4b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:70:c7:22:0a:b4:bf:76:8b:81:9f:32:99:
29:28:65:61:b7:f4:30:07:be:54:c1:6c:f4:18:b4:
09:9a:64:db:23:16:1e:c8:81:f0:ac:79:7a:46:41:
28:26:71:3a:7e:86:dc:0b:48:ca:cc:ae:d8:c1:89:
53:eb:e3:e9:17:74:c1:04:af:5d:a6:73:64:8d:7f:
c0:d1:98:40:fa:ca:fb:8e:17:3f:46:c7:9d:94:b0:
8f:5f:ee:32:0c:03:88:c6:58:0f:29:ad:4a:3b:9b:
4c:15:b4:09:a7:60:92:0b:90:77:ea:8d:21:f7:29:
50:0e:07:06:ae:7e:f7:9d:7b:e1:ce:8f:42:fd:d3:
24:67:84:d3:75:38:82:2f:80:c8:16:b0:4c:50:0b:
8a:e9:df:17:0c:fe:71:dc:5b:e3:57:7d:6e:4f:bb:
d6:f2:e3:89:a7:38:ff:6b:2a:24:68:75:57:21:7d:
ca:9e:21:f7:eb:b6:1a:e1:cd:15:db:76:33:46:77:
61:78:66:a3:7e:23:d0:1a:40:ef:fb:54:46:03:45:
d2:16:67:5f:85:1e:34:20:f8:d2:be:cc:a8:54:59:
bf:f4:b7:07:a7:7b:43:32:4a:8a:24:8a:76:02:ad:
68:52:3f:54:3e:6b:d9:e2:d2:e4:90:e0:44:7f:a2:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:5E:ED:48:D1:F5:93:60:24:46:CB:D5:CD:F1:73:30:8E:4B:9F
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/0_Fe7UjR9ZNgJEbL1c3xczCOS58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.176.0/21
86.105.222.0/23
89.38.36.0/23
91.90.144.0/20
91.230.172.0/22
109.70.216.0/21
185.187.64.0/22
195.93.242.0/23
IPv6:
2a00:14e0::/29
Signature Algorithm: sha256WithRSAEncryption
c9:df:50:dd:31:ad:e8:30:c6:5d:85:64:2e:d0:2d:ab:e8:b7:
b4:7b:55:4e:b3:e8:b7:5a:8c:14:18:4a:9c:f7:9a:f2:34:05:
57:e2:46:61:a8:b0:21:8a:05:87:16:d4:4c:27:3b:9a:fc:12:
61:11:28:c2:e8:48:09:a3:80:e8:0a:80:c7:0b:12:a1:49:1f:
b6:31:d7:41:b9:8e:f9:4f:72:55:ea:6d:6e:b5:29:76:8d:68:
79:28:ac:7f:36:21:7e:2d:a5:ec:88:08:56:6e:80:32:3c:18:
61:fe:1c:b3:56:9f:89:68:ed:40:2d:66:88:3a:b4:90:a3:58:
1a:5a:27:89:bc:c8:7c:08:2f:6d:e5:eb:4d:11:e9:fe:4e:53:
f9:87:1c:19:d8:93:35:d8:22:69:68:af:3b:b8:0e:d3:51:ef:
61:08:22:50:91:49:42:41:e0:0e:f1:d3:e1:a7:09:96:63:fc:
2f:9a:23:9d:f2:0e:2f:e8:0c:20:d5:aa:b2:4e:57:83:2d:83:
04:bf:f2:48:87:2e:e5:90:e8:40:76:00:dc:f2:45:70:c9:35:
6e:93:56:87:56:64:4c:a2:28:63:21:0f:60:d0:41:d9:b4:5e:
ac:5e:f9:b0:23:35:41:23:ed:0f:d7:f4:fd:94:c0:2c:2a:10:
22:07:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org