Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/E66LMkb5bj2isIKeHgkasYRu3qs.roa
File: E66LMkb5bj2isIKeHgkasYRu3qs.roa (raw, json)
Hash identifier: fYXjTs5jpDLiEDSllltijRUvIXDy1butcxgQsrXO2vw=
Subject key identifier: 13:AE:8B:32:46:F9:6E:3D:A2:B0:82:9E:1E:09:1A:B1:84:6E:DE:AB
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 05B9A0DE
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/E66LMkb5bj2isIKeHgkasYRu3qs.roa
Signing time: Thu 10 Mar 2022 11:13:33 +0000
ROA not before: Thu 10 Mar 2022 11:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21056
IP address blocks: 185.241.20.0/22 maxlen: 32
185.224.60.0/22 maxlen: 32
87.247.232.0/21 maxlen: 32
213.182.64.0/19 maxlen: 32
45.84.140.0/22 maxlen: 32
185.224.104.0/22 maxlen: 32
79.135.32.0/19 maxlen: 32
185.230.192.0/22 maxlen: 32
80.93.128.0/20 maxlen: 32
185.170.36.0/22 maxlen: 32
185.231.160.0/22 maxlen: 32
46.44.192.0/18 maxlen: 32
185.158.116.0/22 maxlen: 32
185.230.232.0/22 maxlen: 32
144.48.192.0/22 maxlen: 32
78.152.96.0/19 maxlen: 32
45.143.36.0/22 maxlen: 32
185.230.92.0/22 maxlen: 32
45.151.64.0/22 maxlen: 32
185.234.164.0/22 maxlen: 32
94.138.160.0/19 maxlen: 32
91.143.192.0/20 maxlen: 32
2a00:14f8::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96051422 (0x5b9a0de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Mar 10 11:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13ae8b3246f96e3da2b0829e1e091ab1846edeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:1d:db:58:44:18:41:af:78:81:c4:2a:b5:
57:25:1b:12:d2:41:aa:5e:b5:8f:33:f2:76:45:8a:
67:d8:9a:42:2f:bc:e7:0f:18:14:42:ce:54:0d:8c:
b1:75:57:67:90:ee:cb:ef:8f:3e:d4:e9:97:90:f1:
2e:6c:6b:6e:4b:d3:75:ba:63:d7:fb:c3:65:dd:e8:
a5:47:24:b2:1b:08:25:0e:e9:bb:b2:c9:a2:98:f7:
11:c6:04:90:95:49:05:c5:32:58:31:ae:64:0b:0d:
57:c8:6e:ab:7c:01:d4:6c:b6:6c:e4:33:6a:33:3f:
2c:ce:7b:56:7f:be:b3:58:01:d7:3f:cc:7b:c7:18:
d0:49:ff:f6:0d:77:a7:71:dc:fd:08:d7:58:4c:83:
86:7b:53:37:3a:61:5c:9d:fb:7f:80:9f:13:9d:4e:
06:12:dd:87:fb:6e:6c:80:9c:bf:ee:3a:68:88:c0:
b7:d4:b6:58:1d:f3:a0:8f:30:f4:e1:2a:d9:30:e6:
f9:ea:50:35:ab:28:76:13:02:1e:64:1e:09:78:b0:
93:80:5b:0a:93:de:69:6e:4e:9c:4f:9d:d5:23:4f:
9f:af:29:ac:fb:09:95:64:c5:b7:e4:e0:01:bf:b5:
6e:fe:ad:67:80:42:34:58:33:8c:b0:83:bc:84:2d:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AE:8B:32:46:F9:6E:3D:A2:B0:82:9E:1E:09:1A:B1:84:6E:DE:AB
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/E66LMkb5bj2isIKeHgkasYRu3qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.140.0/22
45.143.36.0/22
45.151.64.0/22
46.44.192.0/18
78.152.96.0/19
79.135.32.0/19
80.93.128.0/20
87.247.232.0/21
91.143.192.0/20
94.138.160.0/19
144.48.192.0/22
185.158.116.0/22
185.170.36.0/22
185.224.60.0/22
185.224.104.0/22
185.230.92.0/22
185.230.192.0/22
185.230.232.0/22
185.231.160.0/22
185.234.164.0/22
185.241.20.0/22
213.182.64.0/19
IPv6:
2a00:14f8::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f1:39:d2:95:29:50:9f:30:25:a1:36:e6:b1:80:42:19:be:
d0:72:94:14:55:e4:a1:9b:d4:bc:17:4c:0d:c0:fd:d6:5b:97:
41:09:ee:55:bf:bf:46:ad:e3:1d:5b:9e:82:f3:99:b2:37:30:
2d:61:f9:e0:10:f1:9a:78:e4:51:bf:33:e4:9a:a5:70:40:84:
aa:67:98:57:21:51:3f:cf:e6:87:95:8f:71:f7:b7:bc:31:dd:
3a:fd:76:03:bb:50:30:e0:61:fa:63:af:ae:f1:8f:f5:b9:08:
8f:3b:f2:b7:76:b8:dd:92:96:7f:a8:9b:a3:20:f0:0e:8e:c7:
eb:ec:4b:f9:a2:f8:3f:6b:05:be:e9:42:03:60:94:8a:9b:c7:
c4:bf:14:5d:31:df:4d:59:de:f7:6b:aa:bc:e2:76:f5:ea:83:
7b:96:99:c1:f5:33:59:de:85:f4:78:3f:39:c8:b0:bf:06:20:
86:08:49:1d:2e:0f:52:97:ae:76:a9:8d:5c:19:ba:d8:a1:68:
07:b1:69:19:9c:55:7c:0b:f3:1b:71:91:e6:db:fc:3d:50:9e:
f2:75:2c:1f:c7:11:14:a6:e9:10:a1:94:04:d2:54:55:83:6b:
7d:7d:dd:03:f1:9b:7e:8b:7f:4e:1c:f1:bb:a0:e2:24:3e:e0:
6b:4b:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:43 2024 by rpki-client on console-fra.rpki-client.org