Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/TEq5PwiQpro0pB3ioQTc7ZAMQ_k.roa
File: TEq5PwiQpro0pB3ioQTc7ZAMQ_k.roa (raw, json)
Hash identifier: Rn7KLZ0No7fbQquv7Y/fkCBGCTj8LbkwieB7P/zYN/4=
Subject key identifier: 4C:4A:B9:3F:08:90:A6:BA:34:A4:1D:E2:A1:04:DC:ED:90:0C:43:F9
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E15F143
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/TEq5PwiQpro0pB3ioQTc7ZAMQ_k.roa
Signing time: Sat 01 Jan 2022 03:02:50 +0000
ROA not before: Sat 01 Jan 2022 03:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 82.98.192.0/21 maxlen: 21
94.31.0.0/18 maxlen: 18
193.160.88.0/22 maxlen: 22
82.98.232.0/21 maxlen: 21
213.161.64.0/19 maxlen: 19
82.98.240.0/20 maxlen: 20
193.28.62.0/23 maxlen: 23
213.152.224.0/19 maxlen: 19
79.141.32.0/20 maxlen: 20
193.28.104.0/23 maxlen: 23
2a00:16f8::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236319043 (0xe15f143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c4ab93f0890a6ba34a41de2a104dced900c43f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:75:c6:48:48:a1:a0:59:5d:30:b2:6c:75:
b3:66:5b:b2:84:ab:6c:89:83:95:93:79:46:dc:f9:
3a:73:87:71:a1:c2:ba:0a:4a:70:70:1b:3e:6f:03:
24:f5:02:84:36:08:51:08:d8:46:a0:34:a1:9c:81:
eb:7f:fa:2a:26:dc:f3:08:3a:21:de:10:65:ab:2e:
f0:cb:8f:cc:c9:81:5d:f8:1d:6e:ad:ff:70:17:26:
bf:0d:58:3b:70:a1:e1:5a:30:2b:64:8d:7f:9d:5a:
47:0a:6c:25:bc:46:d9:b9:97:42:10:f8:53:78:d3:
ad:b0:8b:d9:e0:88:84:55:62:cc:8d:63:52:14:c4:
54:60:42:65:96:a7:ea:2b:28:e4:57:70:86:e5:87:
f8:89:25:6c:03:bb:37:12:2e:9b:33:f4:5a:ae:1a:
7f:06:f2:4f:da:d4:4c:51:b2:c8:a1:7c:b7:62:59:
e0:a8:7c:22:b3:4e:5d:c9:74:aa:aa:3b:fc:50:9c:
f9:9c:85:da:5b:a1:30:6c:8c:8c:b0:aa:bf:a7:80:
a8:51:83:c7:2c:c2:ef:a0:1e:69:b1:e5:a8:8d:08:
45:a1:9e:50:f6:dc:6c:94:9c:0e:2a:8d:67:88:f2:
61:4b:76:37:d4:f1:a1:b5:ec:2f:a9:04:b7:54:71:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:B9:3F:08:90:A6:BA:34:A4:1D:E2:A1:04:DC:ED:90:0C:43:F9
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/TEq5PwiQpro0pB3ioQTc7ZAMQ_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.32.0/20
82.98.192.0/21
82.98.232.0-82.98.255.255
94.31.0.0/18
193.28.62.0/23
193.28.104.0/23
193.160.88.0/22
213.152.224.0/19
213.161.64.0/19
IPv6:
2a00:16f8::/29
Signature Algorithm: sha256WithRSAEncryption
a4:d1:5d:7a:32:da:f6:36:1a:ab:89:8e:8f:ff:48:66:d9:9f:
d7:91:d8:3a:d8:8d:d3:8e:fe:e5:ef:ba:d1:75:0a:8f:7c:b5:
ab:92:0f:ef:1f:7d:c0:62:49:18:32:b7:35:70:4c:d0:cf:6f:
41:8a:cd:94:93:4f:c8:bd:46:fc:36:da:fe:e1:0c:07:94:f4:
40:a8:b4:7d:95:38:82:c0:a1:38:f2:29:e0:17:7e:f0:c0:dd:
55:d9:cf:5c:71:5f:1d:5c:12:86:59:b5:29:08:0a:68:df:c0:
b4:27:40:6d:6e:f0:d8:56:d3:24:f0:c9:62:c5:cc:2c:ac:44:
94:5f:b8:33:53:79:28:18:4f:e7:9b:3a:69:c0:35:e4:aa:89:
6a:d1:b9:43:b3:3c:a0:dd:3b:99:e9:75:20:4f:57:60:7e:3c:
20:f1:6a:d8:ec:e9:da:d2:41:22:20:37:a2:09:07:af:24:97:
49:5f:ba:99:85:76:5f:b5:63:86:ff:d8:f8:86:70:36:c5:5f:
de:13:24:dc:b9:e7:9b:2f:44:32:77:a0:1d:5b:35:c1:77:c2:
45:36:1c:a6:bf:9f:7f:67:0c:67:0e:43:9c:52:b5:40:8d:07:
f3:e9:b6:0a:83:9a:50:c6:a0:b0:7b:85:dc:ae:88:90:29:52:
1a:56:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org