Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kNlbVumCW3UsmsfJYzMu6lYBldE.roa
File: kNlbVumCW3UsmsfJYzMu6lYBldE.roa (raw, json)
Hash identifier: /lh5a06QVWM7vrifRoVQpcGkOMxhyg6g/g6L7hqmob0=
Subject key identifier: 90:D9:5B:56:E9:82:5B:75:2C:9A:C7:C9:63:33:2E:EA:56:01:95:D1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 03DBCCFB
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kNlbVumCW3UsmsfJYzMu6lYBldE.roa
Signing time: Sat 01 Jan 2022 13:04:06 +0000
ROA not before: Sat 01 Jan 2022 13:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64736507 (0x3dbccfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 13:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90d95b56e9825b752c9ac7c963332eea560195d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:f6:d0:7d:fc:7b:75:0b:84:a0:86:21:6b:
0e:7c:b4:3f:05:d8:e5:70:5f:98:d4:b8:2d:b7:82:
2c:47:23:bb:c5:6f:fc:75:2d:33:c6:16:33:88:d3:
5e:69:4e:9e:ee:18:17:b6:ed:4c:e6:bb:2d:cc:f2:
bc:dd:5a:bf:5d:db:49:50:e6:85:62:1b:d2:a6:ca:
04:76:3e:59:95:54:bc:ed:48:37:d3:d9:83:9a:3c:
c9:2f:72:e7:cf:cd:d8:51:c6:03:95:26:8d:5e:94:
fa:a9:6f:bc:3f:e6:d4:44:e9:9d:09:86:0c:15:53:
13:c6:74:a7:35:9b:ce:84:26:7d:d6:d1:7f:ba:a2:
e6:0a:a7:5a:da:2e:45:15:a2:2f:b0:03:0a:d2:e9:
3f:63:4c:b8:d1:c4:be:26:bf:80:9e:bd:ae:f4:d0:
fb:25:26:98:64:ac:6b:30:e5:c9:44:04:34:fc:cf:
db:6a:41:4b:ff:88:93:da:25:3b:7a:04:39:0e:72:
01:06:7a:6c:9d:39:ec:eb:1d:ed:11:7c:49:83:7f:
12:80:08:f7:a5:96:70:7c:a6:e6:b2:9a:16:5d:ac:
fa:75:b3:e2:1f:92:ac:6f:ff:3b:f2:56:11:e5:9e:
e9:13:e9:e1:12:46:1a:d6:43:f9:1f:02:98:88:31:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D9:5B:56:E9:82:5B:75:2C:9A:C7:C9:63:33:2E:EA:56:01:95:D1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/kNlbVumCW3UsmsfJYzMu6lYBldE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.115.0/24
89.42.70.0/24
89.44.150.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.229.215.0/24
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:11:bb:38:f9:4f:41:d7:b0:c3:64:5c:d1:57:b9:67:62:75:
ba:11:f8:5c:99:ed:63:8c:0d:ce:94:8a:22:17:e7:73:0a:12:
31:73:b8:18:6d:92:7a:87:69:8a:2b:51:c6:bf:8b:49:50:03:
f9:bf:85:8d:71:60:1f:52:2a:0e:78:28:63:ba:55:d0:30:bd:
68:44:2d:d6:a6:1e:78:df:1d:56:fa:fa:ea:d1:b8:08:02:f3:
7b:49:06:df:0f:17:16:c5:df:25:1b:97:30:3e:f1:a1:01:1b:
60:27:44:6b:4b:c7:cc:7f:3a:bf:36:42:90:4f:a4:91:78:30:
73:05:c1:ca:a6:c2:93:11:28:14:d6:4b:d0:f3:19:b3:65:d9:
ae:cd:e6:46:13:ff:8d:df:41:f8:7d:ed:29:d1:8a:d5:1d:de:
38:da:e1:c2:6c:cb:e4:5d:ea:01:fb:36:74:50:a7:d2:67:8d:
2b:97:e9:1b:cc:9e:5a:64:d6:1c:b2:4f:2f:2e:72:25:18:8e:
78:5c:ce:db:7a:01:3a:48:79:f5:63:ba:1b:3f:ff:eb:94:e5:
d8:d3:21:ab:28:c0:90:14:f5:f8:e8:e8:9c:e8:20:63:7f:da:
e8:5f:87:48:2c:cd:2a:ee:b4:3b:10:0d:2a:8f:74:e0:15:e1:
5b:84:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org