Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/V6NE4IAqCuvmRJ6lUxvUOnuP0qQ.roa
File: V6NE4IAqCuvmRJ6lUxvUOnuP0qQ.roa (raw, json)
Hash identifier: YUr6thMeW0QJFfeSebSYvxYZ84CEihoZ5LV4bQ5xywI=
Subject key identifier: 57:A3:44:E0:80:2A:0A:EB:E6:44:9E:A5:53:1B:D4:3A:7B:8F:D2:A4
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 0B1A5A38
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/V6NE4IAqCuvmRJ6lUxvUOnuP0qQ.roa
Signing time: Mon 07 Mar 2022 14:10:28 +0000
ROA not before: Mon 07 Mar 2022 14:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210834
IP address blocks: 188.93.173.0/24 maxlen: 24
188.93.174.0/24 maxlen: 24
188.93.175.0/24 maxlen: 24
185.215.68.0/22 maxlen: 24
188.93.172.0/24 maxlen: 24
188.93.168.0/24 maxlen: 24
2a0b:880:4::/48 maxlen: 48
2a0b:880:5::/48 maxlen: 48
2a0b:880::/32 maxlen: 32
2a0b:880::/36 maxlen: 36
2a0b:880:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186276408 (0xb1a5a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Mar 7 14:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57a344e0802a0aebe6449ea5531bd43a7b8fd2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:9a:61:d8:92:35:1b:04:2d:28:a5:71:96:
71:b0:30:8b:e1:27:72:0a:ba:46:7d:a4:7e:b9:c8:
75:e3:04:5e:a8:ae:67:51:58:7e:b3:7d:84:73:b0:
96:10:1a:8f:cb:f8:09:82:b3:e4:cc:8a:d3:5d:61:
52:c5:fd:30:c5:e4:be:8d:f6:a6:41:ee:80:68:9a:
aa:0a:f0:6d:b6:c8:0d:2a:4c:3c:af:df:14:75:e5:
0a:b8:d4:48:49:8a:53:d4:50:00:b4:93:ed:02:4b:
c6:e3:05:1c:d5:9a:94:52:13:96:21:30:9f:8d:55:
f3:55:bc:76:e5:82:a5:6b:95:2e:13:76:07:7e:47:
74:d8:05:16:9a:d3:5f:f2:66:cd:8b:34:d9:a0:b9:
53:96:96:fd:08:95:cc:41:2c:c7:eb:09:fa:65:6b:
5c:ce:9b:3a:91:01:8a:ed:4a:13:b1:e1:89:c0:2e:
f0:89:a5:89:d8:f1:71:a0:e2:43:cf:92:f1:b5:78:
ea:f1:66:06:ad:75:1f:1c:b3:ce:f1:b0:a1:91:6c:
6c:42:b4:1e:df:14:06:c0:ef:5e:14:55:81:6b:b2:
c4:71:45:d1:a9:5d:41:d9:24:40:b8:8e:a1:cc:dd:
a1:93:3d:8d:c1:db:59:a5:45:ae:90:01:3d:4a:6b:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:44:E0:80:2A:0A:EB:E6:44:9E:A5:53:1B:D4:3A:7B:8F:D2:A4
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/V6NE4IAqCuvmRJ6lUxvUOnuP0qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.68.0/22
188.93.168.0/24
188.93.172.0/22
IPv6:
2a0b:880::/32
Signature Algorithm: sha256WithRSAEncryption
7c:9c:d6:55:3c:a6:df:57:f7:3d:5c:4f:12:db:8b:92:d2:de:
f8:69:33:13:aa:bf:65:87:ea:df:75:e0:b0:05:3e:3a:6e:99:
12:55:5c:19:46:ad:c8:38:7a:cc:51:10:2b:6c:60:2e:81:0c:
c1:24:d4:f2:e9:2a:f8:2a:76:fb:54:f0:32:79:b6:ef:71:83:
c3:ae:b7:0c:94:42:6c:8c:29:bc:67:43:3e:c7:b1:c8:0a:59:
72:03:18:b5:d5:f2:75:5c:0d:2f:e0:75:53:4f:09:b3:62:eb:
a4:36:d0:ff:42:ef:94:e6:be:22:3c:79:dd:4a:33:4e:ab:7c:
4d:11:8a:eb:24:ae:8a:c1:e0:56:f9:87:bc:d2:8d:a3:61:5f:
69:68:72:fd:06:35:26:e7:bb:bf:c3:45:51:fd:43:8b:cf:7f:
09:f3:e7:8c:14:fc:da:9b:30:46:59:c3:be:cd:27:ae:cf:df:
7d:d0:13:d4:b8:82:f3:8b:02:97:43:9b:56:49:bb:65:d2:47:
63:da:a6:3a:b4:78:03:b7:4e:43:27:07:d1:83:6b:a0:80:ca:
1c:fe:cb:c7:25:0f:29:ec:cd:29:0d:1e:31:cc:f1:63:c3:98:
dc:db:ac:05:1f:52:4e:a7:9b:30:7f:2b:87:e0:25:dc:ff:46:
a2:7a:f0:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:40 2024 by rpki-client on console-ams.rpki-client.org