Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/IVrXw_gEfHyLLRl-n3KYIlXcypU.roa
File: IVrXw_gEfHyLLRl-n3KYIlXcypU.roa (raw, json)
Hash identifier: WXrVlod5HTPDIoIxAzowrrW/bAaO2MxvabEvitYj0N0=
Subject key identifier: 21:5A:D7:C3:F8:04:7C:7C:8B:2D:19:7E:9F:72:98:22:55:DC:CA:95
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 36ED9FD7
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/IVrXw_gEfHyLLRl-n3KYIlXcypU.roa
Signing time: Sat 01 Jan 2022 13:56:43 +0000
ROA not before: Sat 01 Jan 2022 13:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12620
IP address blocks: 195.190.160.0/19 maxlen: 19
62.48.96.0/19 maxlen: 19
176.46.192.0/18 maxlen: 18
185.179.16.0/22 maxlen: 22
84.55.192.0/18 maxlen: 18
2001:4b00::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921542615 (0x36ed9fd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Jan 1 13:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=215ad7c3f8047c7c8b2d197e9f72982255dcca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:2e:c9:54:07:ef:1c:89:05:8d:06:b1:f1:
2d:2c:bd:ba:e4:fa:3e:98:5a:51:a5:ec:ee:2f:e6:
11:4d:06:7b:fb:46:13:a9:51:66:db:33:4c:3b:ec:
94:42:06:05:18:ce:18:a1:a9:49:c8:61:fe:75:6f:
d0:6d:b0:98:36:9e:68:b9:55:ef:ea:20:94:3c:a6:
06:c0:fc:b4:d3:0c:e1:82:dd:0b:b2:b3:23:81:cb:
da:05:6b:db:14:8d:d9:42:22:43:27:d5:3d:53:05:
08:2c:8b:d1:d6:e4:5d:25:67:1b:e3:ae:97:49:ec:
3c:77:07:53:7a:49:bc:75:57:42:4f:9f:c8:21:59:
ee:c9:b5:53:b4:68:b4:cb:70:8f:92:28:d0:96:ba:
64:66:9d:9e:87:90:0e:63:37:aa:4e:7a:a6:3c:24:
42:83:56:95:12:e2:ae:0c:a1:82:14:46:22:57:12:
ca:ae:a5:3e:fb:2c:e0:ba:13:b8:d7:73:f8:8a:e0:
de:ec:44:22:05:26:6d:99:2b:ae:53:56:8b:bd:3a:
df:85:cd:62:e1:75:b7:84:42:03:29:c3:ee:f5:f6:
b4:2a:76:f9:9d:a6:40:93:e9:b2:06:4f:3e:65:6b:
72:66:b1:0a:02:88:80:a5:7e:97:a3:37:39:74:a8:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5A:D7:C3:F8:04:7C:7C:8B:2D:19:7E:9F:72:98:22:55:DC:CA:95
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/IVrXw_gEfHyLLRl-n3KYIlXcypU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.48.96.0/19
84.55.192.0/18
176.46.192.0/18
185.179.16.0/22
195.190.160.0/19
IPv6:
2001:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
4b:0e:34:66:de:4d:7b:ed:8e:0d:be:e1:ed:be:ee:72:e9:c0:
4b:69:99:4e:f4:d6:d4:26:7e:66:29:12:8e:52:5d:2c:d3:f2:
7a:70:a5:cd:5c:3b:00:f7:d0:8a:3e:a3:bf:e0:72:cf:df:7b:
14:19:bc:e3:29:b3:9d:45:39:27:38:63:3e:50:d0:73:1e:15:
ef:f6:88:aa:05:a5:54:f4:f9:4d:f4:c0:70:f0:da:aa:28:6a:
88:3a:03:cd:72:28:41:89:a2:b5:e1:c1:d0:01:4e:c4:39:f1:
e6:e4:32:2d:4f:fd:92:fa:9c:28:1d:d5:14:0b:e1:c3:72:e3:
68:c5:5f:82:24:70:e2:d7:58:2a:26:d5:07:8a:47:38:3c:26:
98:55:3e:11:c7:36:ad:c3:84:b3:15:1d:b4:2b:d5:64:d3:32:
e2:e1:c6:df:ae:a6:a5:e7:50:0d:e9:91:9b:4f:f3:64:3f:fd:
61:e3:39:68:8c:f1:61:5a:14:c8:8e:ae:1a:7e:e5:bf:48:4a:
58:2b:11:84:7c:57:27:d3:f6:3c:5d:a5:3c:90:d9:8b:ae:8d:
57:a0:12:54:fb:4c:a1:b7:a4:99:2a:fa:a5:81:16:5c:31:48:
a6:d1:7b:25:64:66:55:fe:a3:81:cb:05:a3:f5:e4:3b:67:74:
9f:ba:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org