Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/P7ApIf2CGyLYSlDII7vBEm4JyLQ.roa
File: P7ApIf2CGyLYSlDII7vBEm4JyLQ.roa (raw, json)
Hash identifier: PEyALLxBp9+slQ/GJB0mbrVccwsFJ9zwlNJ43L77BYo=
Subject key identifier: 3F:B0:29:21:FD:82:1B:22:D8:4A:50:C8:23:BB:C1:12:6E:09:C8:B4
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 01D5A388
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/P7ApIf2CGyLYSlDII7vBEm4JyLQ.roa
Signing time: Sat 01 Jan 2022 11:57:58 +0000
ROA not before: Sat 01 Jan 2022 11:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51050
IP address blocks: 193.53.90.0/23 maxlen: 23
193.53.10.0/23 maxlen: 23
185.98.144.0/22 maxlen: 22
5.83.0.0/21 maxlen: 21
178.217.80.0/21 maxlen: 21
2a01:5cc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30778248 (0x1d5a388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Jan 1 11:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fb02921fd821b22d84a50c823bbc1126e09c8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:82:c5:8f:8c:fe:30:1f:5e:01:98:5b:0c:
66:4d:bc:34:a7:37:8d:b5:29:34:da:5b:c8:e2:5d:
7e:36:86:cc:a8:28:26:4c:d4:b2:82:43:e3:a6:01:
1d:ca:e5:7d:60:a7:59:3c:b7:c8:8c:bb:71:a7:d9:
f4:c8:87:aa:3f:0f:5d:b5:51:cb:1c:78:2c:06:38:
7e:75:94:0a:22:ef:78:99:ee:89:3f:a4:ea:38:c5:
c8:a6:b8:0c:a5:6e:ac:0a:99:36:da:4f:c8:39:2b:
08:ce:c3:d9:e7:f2:af:67:63:a6:b9:a8:94:08:be:
4e:33:39:bf:4c:ea:71:48:ba:c8:05:63:eb:5a:ed:
df:ec:f8:62:98:25:50:31:29:47:7b:ee:ad:ff:4a:
97:f9:ab:bf:c1:20:d7:9e:57:cf:97:83:51:1f:87:
7c:ee:42:e1:32:59:b6:42:8b:b3:db:e2:44:33:e7:
d5:4c:7c:d9:b1:b6:d9:e3:58:48:f3:22:41:a5:9a:
07:97:7e:e6:6a:78:94:c6:06:31:d2:c0:ff:04:43:
ff:f0:bc:54:a6:e7:27:1b:ff:8c:30:38:b0:d1:03:
cb:1f:8d:6c:1a:64:b8:b2:44:b0:55:c5:d6:8d:a0:
6d:75:92:29:61:b1:ad:0e:f0:e7:76:7f:44:5d:d0:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:29:21:FD:82:1B:22:D8:4A:50:C8:23:BB:C1:12:6E:09:C8:B4
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/P7ApIf2CGyLYSlDII7vBEm4JyLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.0.0/21
178.217.80.0/21
185.98.144.0/22
193.53.10.0/23
193.53.90.0/23
IPv6:
2a01:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
d2:38:aa:c3:25:f9:9f:3b:73:9e:cf:53:0d:d2:b5:1b:15:9a:
3a:5e:52:43:e1:45:77:9a:91:14:13:ec:69:f3:5d:d1:66:65:
7d:14:78:62:f0:1a:de:02:74:ab:79:ed:39:ff:6b:11:2e:b7:
c0:6e:8d:52:b8:04:01:63:50:e0:b8:0c:33:2f:cf:bf:3b:64:
9b:10:5b:08:d0:3b:91:6b:2d:4f:3f:4f:5e:7b:c1:67:4d:bd:
25:82:fb:c5:ed:63:f4:26:3f:4f:31:aa:15:7c:f3:ac:92:36:
53:16:59:99:9a:2a:2a:19:15:af:bf:4d:92:99:71:16:37:36:
9b:f3:9d:2f:c3:db:36:db:a0:26:1f:44:6a:b8:3d:3f:6e:16:
5f:02:ae:0b:95:b4:e0:f6:71:71:44:df:0e:51:75:cb:49:27:
85:ae:99:6d:9d:6f:51:16:69:61:60:02:76:fa:52:cb:40:2f:
c5:be:93:8b:97:c5:ab:47:c9:a4:6e:6e:ee:52:0e:0a:64:75:
3f:eb:7e:a0:ca:bc:46:6d:f5:0c:29:b7:b8:9f:b0:5a:a5:ef:
b9:7e:da:52:17:62:83:2c:ae:86:30:7c:44:22:1a:fc:43:75:
b1:6b:86:eb:a6:57:a0:e2:75:07:fe:61:fa:31:15:52:85:c8:
c3:8c:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:16 2024 by rpki-client on console-fra.rpki-client.org