Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/1-EVUs2qbFZgd7sOVYGBrdV_C_Y0.roa
File: 1-EVUs2qbFZgd7sOVYGBrdV_C_Y0.roa (raw, json)
Hash identifier: 7XU1XXkBPhkdAihfWTN91zIiclunuQsbO9zUo7OfQ4w=
Subject key identifier: F8:45:54:B3:6A:9B:15:98:1D:EE:C3:95:60:60:6B:75:5F:C2:FD:8D
Certificate issuer: /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial: 03DC9BAD
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/1-EVUs2qbFZgd7sOVYGBrdV_C_Y0.roa
Signing time: Sat 01 Jan 2022 06:01:53 +0000
ROA not before: Sat 01 Jan 2022 06:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43415
IP address blocks: 176.56.156.0/24 maxlen: 24
176.56.156.0/22 maxlen: 22
176.56.156.0/23 maxlen: 23
176.56.158.0/24 maxlen: 24
176.56.158.0/23 maxlen: 23
176.56.157.0/24 maxlen: 24
176.56.159.0/24 maxlen: 24
185.185.240.0/24 maxlen: 24
185.185.240.0/22 maxlen: 22
185.185.241.0/24 maxlen: 24
185.185.242.0/24 maxlen: 24
185.185.243.0/24 maxlen: 24
2a0e:8300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64789421 (0x3dc9bad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Validity
Not Before: Jan 1 06:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f84554b36a9b15981deec39560606b755fc2fd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:1e:85:95:5b:b2:f9:78:7b:c6:bd:bd:3a:
98:ac:24:ef:62:5a:4b:28:f8:f5:f7:bb:9c:b2:84:
8b:f6:66:de:73:d6:9d:e2:77:79:bd:7a:08:56:05:
68:ee:27:8b:08:b6:be:14:6a:f0:7b:c9:21:ca:e5:
74:2a:52:35:bc:20:eb:2c:68:9a:8d:81:3a:79:d8:
47:36:ba:c9:90:67:b0:c6:3f:d0:ab:8f:14:08:86:
6a:3c:04:c2:e4:fb:d6:c4:4c:4c:49:3e:46:e5:29:
55:d3:c7:2f:29:60:e9:4e:dc:f9:02:b8:06:61:dd:
48:29:fd:64:20:20:34:63:8e:40:09:9a:c7:bf:b8:
df:c1:f7:ca:9a:5e:db:ea:e7:4e:de:92:8a:b3:c0:
41:3b:73:81:60:97:a4:c9:36:94:41:a5:e2:6c:a7:
c3:e1:b8:91:ae:01:7f:47:f1:93:bc:55:f5:0b:ff:
16:6f:a3:80:45:2e:24:ee:ed:fe:16:31:82:27:e2:
62:b5:92:5c:f7:04:18:0f:ac:fe:d1:72:8a:09:e0:
e8:5a:fd:1c:ea:9e:4e:31:33:cb:ff:d6:a2:0d:ff:
31:68:2a:3c:4f:c0:dc:58:db:37:d9:10:1f:8f:1c:
e1:8a:65:2e:3c:d5:fa:e0:67:9f:81:03:89:06:63:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:54:B3:6A:9B:15:98:1D:EE:C3:95:60:60:6B:75:5F:C2:FD:8D
X509v3 Authority Key Identifier:
keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/1-EVUs2qbFZgd7sOVYGBrdV_C_Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.156.0/22
185.185.240.0/22
IPv6:
2a0e:8300::/29
Signature Algorithm: sha256WithRSAEncryption
65:79:81:26:7c:8f:be:be:45:6f:91:ae:fc:f3:12:97:9b:44:
28:dc:9b:b0:a1:9c:cf:74:d5:37:58:88:b5:e1:ea:5c:c9:ba:
14:26:37:37:e7:53:47:b4:6d:85:41:f0:75:ea:be:72:2c:bb:
19:7f:ce:8f:5d:4d:e0:70:ba:41:9b:c8:69:71:33:f2:50:ab:
5a:5d:8f:90:d1:7c:96:c6:f4:b5:96:9a:c1:95:b7:9d:79:03:
7a:99:d1:46:98:e3:df:ed:02:a3:5b:92:d5:6a:76:86:1f:9f:
dc:8c:eb:74:eb:af:b3:66:41:d9:8c:7f:d7:8e:c4:fd:39:3b:
48:d0:c0:7b:c2:2d:90:e0:fc:70:8c:71:12:0a:8c:6e:ba:3d:
1e:a7:c2:af:96:03:b1:78:b5:00:40:cc:8f:9d:f6:74:40:5e:
4d:bf:98:c6:cc:09:31:bc:8d:c3:24:30:6e:2c:f2:8e:04:0e:
49:cf:64:65:89:ac:56:04:96:f3:75:82:ab:37:f6:87:dc:3e:
9a:25:c1:39:c9:70:67:82:64:1f:96:04:aa:60:0e:3c:33:d9:
73:9d:89:6b:15:ef:6b:c1:c9:3e:8f:03:19:cf:16:bc:70:e5:
a7:51:ba:80:13:c0:9c:f3:4d:bd:7b:60:01:d3:36:2f:15:08:
60:2f:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:53 2024 by rpki-client on console-ams.rpki-client.org