Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/FEkq-LUDqaQuKMtHDp53YaWDuvc.roa
File: FEkq-LUDqaQuKMtHDp53YaWDuvc.roa (raw, json)
Hash identifier: faFVrWiQAhJJddWah/tISkhzT2KE320SLa/nkpbZjvU=
Subject key identifier: 14:49:2A:F8:B5:03:A9:A4:2E:28:CB:47:0E:9E:77:61:A5:83:BA:F7
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 34EA59B3
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/FEkq-LUDqaQuKMtHDp53YaWDuvc.roa
Signing time: Thu 05 May 2022 20:36:27 +0000
ROA not before: Thu 05 May 2022 20:36:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47527
IP address blocks: 185.126.152.0/23 maxlen: 23
91.223.235.0/24 maxlen: 24
185.208.212.0/22 maxlen: 22
62.69.152.0/21 maxlen: 21
46.30.120.0/21 maxlen: 21
2a00:1b18::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887773619 (0x34ea59b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: May 5 20:36:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14492af8b503a9a42e28cb470e9e7761a583baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:3d:72:21:1a:33:10:08:e1:a5:ea:40:6a:
22:9d:11:f8:73:ee:22:68:84:fa:bc:99:48:f1:75:
fb:66:6d:5e:80:ce:d8:85:91:c5:ff:3e:ea:ec:3d:
c1:8f:6b:48:a0:89:cc:b0:78:bb:9e:49:fd:bd:70:
f0:17:31:ea:a0:d9:31:2a:f8:d4:5d:0c:89:1f:a4:
90:45:fe:a6:82:c1:9e:a6:c6:28:39:fc:c8:a1:f9:
1d:63:9c:89:f0:d5:54:03:f8:54:c2:9d:8a:a5:48:
e2:39:f6:4c:14:64:a8:bf:5b:34:72:0a:ba:5b:87:
7e:4f:3d:a3:ff:16:2e:76:a5:e6:2c:e9:8f:ea:c3:
d9:43:ee:66:5b:fb:46:75:7b:5d:80:cc:81:01:79:
f9:bc:cc:ec:47:02:df:98:ec:23:7b:36:d0:31:ff:
90:75:65:8c:9c:15:b8:16:ce:3a:81:23:d6:54:fe:
ed:07:02:d5:bf:cc:c8:30:d1:eb:84:13:9b:fc:3e:
1e:e7:5d:8f:13:9d:2a:31:6c:dc:94:71:ef:ce:c1:
20:e1:57:6d:6c:35:b1:99:2a:0d:72:09:af:d6:01:
5c:a8:7b:f9:a7:b4:0e:3a:65:4d:fa:8c:66:b6:96:
1a:95:19:26:bc:bc:39:1c:95:d6:24:d6:1e:d7:44:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:49:2A:F8:B5:03:A9:A4:2E:28:CB:47:0E:9E:77:61:A5:83:BA:F7
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/FEkq-LUDqaQuKMtHDp53YaWDuvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.120.0/21
62.69.152.0/21
91.223.235.0/24
185.126.152.0/23
185.208.212.0/22
IPv6:
2a00:1b18::/29
Signature Algorithm: sha256WithRSAEncryption
cb:39:e2:57:9a:1e:11:94:ac:36:c9:cd:f9:04:6c:52:68:22:
ba:d9:72:d3:51:82:69:5e:b9:6d:da:16:e7:61:4d:af:81:4a:
45:c2:bb:a9:db:bc:f6:a1:0f:e5:de:1c:f7:bc:76:66:19:22:
47:f6:94:7d:c7:ea:fa:ab:05:71:d8:0a:85:b2:a2:09:67:e9:
a2:6d:76:49:b5:9f:3f:a8:8a:af:54:bb:c4:84:37:c6:9b:57:
17:07:6c:59:9a:de:37:88:a3:40:9f:c2:4a:8a:6d:bb:d6:28:
33:7b:de:5f:55:b9:af:13:4d:04:46:b2:b1:d5:e4:74:f1:d8:
14:bb:43:50:9c:75:63:54:26:1c:33:f6:15:32:f0:82:79:7d:
4a:b2:09:e6:69:cb:8b:fa:21:97:5d:9a:01:f6:47:a4:b0:f5:
7d:f2:14:1b:98:c2:0a:42:07:13:f7:88:ff:35:0e:f6:c8:1b:
62:f5:ec:3c:be:fc:f1:8e:4f:77:bd:5e:8e:de:54:7e:78:e8:
39:c7:ab:e8:8a:ca:e3:08:c4:f7:a8:b1:d7:3b:da:84:a0:0f:
34:85:f0:31:25:ac:5b:22:9b:17:57:28:bd:ca:59:71:0e:1a:
74:0e:c6:c4:e8:a8:7b:66:36:b0:d6:f5:3d:05:b7:5b:2c:10:
65:5a:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org