Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/D6qpRas8IHWNdcOjZH9V7SkfAR4.roa
File: D6qpRas8IHWNdcOjZH9V7SkfAR4.roa (raw, json)
Hash identifier: R91pxbuw515HcOHE71/O1uZ5LDRszJwW9ZRGleVniUc=
Subject key identifier: 0F:AA:A9:45:AB:3C:20:75:8D:75:C3:A3:64:7F:55:ED:29:1F:01:1E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 049E32C2
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/D6qpRas8IHWNdcOjZH9V7SkfAR4.roa
Signing time: Sat 01 Jan 2022 15:04:31 +0000
ROA not before: Sat 01 Jan 2022 15:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212461
IP address blocks: 193.37.69.0/24 maxlen: 24
194.113.235.0/24 maxlen: 24
87.251.68.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.85.0/24 maxlen: 24
87.251.84.0/24 maxlen: 24
87.251.88.0/24 maxlen: 24
87.251.87.0/24 maxlen: 24
87.251.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77476546 (0x49e32c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 15:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0faaa945ab3c20758d75c3a3647f55ed291f011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:45:43:ca:2d:30:59:00:b4:9a:ed:4c:b6:
5c:d0:31:40:f7:90:a2:e0:7f:16:54:f1:4b:3f:3e:
6e:3d:ce:c5:96:fc:96:05:bb:eb:2b:69:66:23:2b:
96:49:f1:6e:8b:85:fb:6a:78:63:ac:32:4b:68:5a:
72:2b:1b:57:4c:7e:cf:cb:1c:06:20:d4:ac:5b:c5:
f6:ce:4c:4f:55:ed:2c:1c:4b:45:b6:6d:77:7e:a0:
9f:6b:76:bc:85:3c:28:6a:c0:c8:cc:6c:85:1a:9f:
67:b4:96:d8:13:a4:38:cb:b7:79:aa:3a:6f:68:d8:
7a:fc:31:6b:ee:25:fc:a3:80:49:4d:b5:27:5e:3a:
59:12:c1:9b:d4:b9:a5:a7:67:8a:6f:7d:60:9b:6a:
1c:44:55:48:3a:54:b1:e6:63:84:82:f1:aa:39:41:
9e:3d:9e:54:bf:22:a4:f8:e5:f0:de:4c:af:4a:3d:
4f:33:26:08:04:6b:b9:15:1f:3a:4f:1b:1a:3d:1f:
e3:a8:0e:55:f1:61:81:73:ed:4d:0e:db:43:21:fc:
61:c8:d0:e6:01:2c:48:93:33:41:5a:ac:1a:08:f1:
6d:ed:41:49:6c:05:7f:3d:a5:7d:98:ee:b2:0d:7e:
b7:27:10:f3:52:a4:59:88:21:bc:ac:06:67:0b:5c:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:A9:45:AB:3C:20:75:8D:75:C3:A3:64:7F:55:ED:29:1F:01:1E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/D6qpRas8IHWNdcOjZH9V7SkfAR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.68.0/24
87.251.78.0/24
87.251.84.0-87.251.88.255
193.37.69.0/24
194.113.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c5:cf:cd:82:3c:ff:45:a1:ae:af:fe:13:77:c2:f0:4a:d3:
9a:7f:40:e8:ba:28:f6:dd:35:cc:b2:e3:c8:a2:9f:86:22:da:
68:ce:64:36:09:5c:42:3a:d4:9b:4e:6d:d8:a8:42:6f:c8:01:
09:d3:44:f8:ab:e1:a0:c1:cc:57:a6:ce:c5:f4:71:37:38:3c:
0a:9b:79:45:98:e7:76:1d:74:b7:95:e8:cd:43:88:07:d9:55:
86:c5:ac:2f:d5:4c:49:a7:f4:9e:b7:92:c1:5e:ab:15:02:f5:
df:77:8e:3c:5c:c7:07:70:d4:fb:3b:b2:8b:fe:58:ec:39:fb:
e9:a9:53:9b:46:45:5e:90:ea:ec:89:6e:4d:51:5a:be:2a:76:
7b:fb:47:a0:89:d1:7b:25:fa:31:5d:6f:3c:f1:6d:7a:65:f3:
dc:ad:a8:22:61:03:b5:69:51:c4:8e:c7:c3:aa:21:0e:5b:1d:
90:0e:50:9e:e6:8d:83:67:b2:22:b5:d7:d9:0b:b6:55:19:d1:
68:d6:fc:2b:fc:59:97:ff:ba:c1:41:3e:47:20:62:90:7a:94:
19:af:5d:88:62:cb:12:7e:5d:cd:04:24:57:83:c6:dd:82:a8:
e0:95:23:19:19:e9:fc:39:2b:cf:54:97:8d:b5:62:e9:75:31:
95:ae:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org