Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/76PEhinvd5EdrFRg-CFzSs7aN3s.roa
File: 76PEhinvd5EdrFRg-CFzSs7aN3s.roa (raw, json)
Hash identifier: tQjRdvd2cVltbx/scFukSTkgrYXedtOrMmxpxPi2S4w=
Subject key identifier: EF:A3:C4:86:29:EF:77:91:1D:AC:54:60:F8:21:73:4A:CE:DA:37:7B
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 37643F48
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/76PEhinvd5EdrFRg-CFzSs7aN3s.roa
Signing time: Sat 01 Jan 2022 13:00:10 +0000
ROA not before: Sat 01 Jan 2022 13:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32780
IP address blocks: 146.185.192.0/22 maxlen: 22
5.188.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929316680 (0x37643f48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 13:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efa3c48629ef77911dac5460f821734aceda377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:71:ea:3e:47:46:72:f1:61:f1:51:ab:0c:
c2:00:8a:53:3d:67:e9:51:82:72:e5:ed:31:12:ee:
8c:74:94:dc:c8:a5:49:91:2e:1b:2a:2f:b0:d6:00:
65:e9:30:45:0a:ae:4a:c6:c1:43:c0:58:1b:7f:1a:
a3:5e:03:a7:39:ee:05:f7:22:93:87:58:c9:4c:ce:
e6:36:8f:6a:b8:d8:bb:4a:f1:3e:26:e9:38:ea:56:
f1:aa:1f:64:ed:29:10:ec:44:cb:0c:98:4d:82:f1:
83:5c:56:e2:40:91:04:32:93:3f:5c:42:be:e6:0d:
57:31:8f:75:dd:a2:64:c8:14:fa:72:3f:bf:4f:a5:
d4:4b:ba:d2:d6:c4:d8:d2:33:c9:8d:74:59:98:2d:
19:5e:85:e2:5b:53:88:3d:9c:ae:96:f2:bb:68:f2:
fd:36:55:37:98:60:f9:54:b5:a9:18:9e:c6:bd:d5:
33:52:67:dc:35:7d:a1:f3:d9:8e:1e:3d:ef:f7:01:
77:6c:52:2c:91:39:19:34:a7:47:a0:95:7d:4e:e4:
54:ee:d7:48:ad:73:8f:af:77:00:9a:4c:b8:89:38:
f2:b1:3d:1a:4c:0e:c7:e6:e3:fd:af:e4:3d:8c:83:
e6:e7:be:0e:ea:d2:c0:39:89:7a:57:7b:d5:2c:50:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:C4:86:29:EF:77:91:1D:AC:54:60:F8:21:73:4A:CE:DA:37:7B
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/76PEhinvd5EdrFRg-CFzSs7aN3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.196.0/22
146.185.192.0/22
Signature Algorithm: sha256WithRSAEncryption
58:53:1e:8e:19:99:bd:04:7c:9b:60:95:ca:8e:4e:d4:80:86:
aa:31:39:c9:d4:b5:d0:d2:88:43:d8:09:78:a6:e8:c4:62:89:
62:54:e7:66:51:2a:f9:3d:23:f8:25:3f:ac:b3:60:a5:1e:fc:
01:d8:d3:f1:83:2b:79:62:f1:76:ab:25:d2:61:8a:de:7f:34:
b2:62:01:f9:13:c6:29:cd:2d:42:45:70:cd:22:59:80:d0:15:
f9:36:43:08:90:87:0b:48:c5:f7:8e:53:5c:d6:d6:21:7f:2e:
90:1e:31:d0:40:d2:41:aa:c8:bf:92:37:89:3b:66:46:9e:0e:
86:4e:64:81:97:e8:ec:c4:be:f7:8a:86:c4:3f:b4:ee:02:ea:
72:e3:30:22:8c:fd:0f:11:5b:07:d0:4a:57:85:69:c6:ed:3a:
5c:1f:84:0f:c8:1c:90:de:b0:ab:81:25:8b:eb:d6:9b:8a:fa:
61:24:5a:72:7b:d3:ce:f2:66:6e:8e:30:eb:39:cd:a0:42:b0:
d9:41:15:54:1b:81:74:9b:ae:99:a7:cf:58:7c:a5:55:0d:68:
30:fc:2d:8b:eb:7d:eb:b6:5f:b4:b1:50:84:c3:01:02:6a:e3:
46:a0:8b:1e:f1:82:27:8f:5c:0c:8c:06:4e:14:61:dd:25:c2:
7c:78:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org