Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/hXrVWXskC6_ezu6hpSB8ykLF9_0.roa
File: hXrVWXskC6_ezu6hpSB8ykLF9_0.roa (raw, json)
Hash identifier: qwft2AJmazYjWfQbYlgi811EbWN5DO4u8r0B2ivJTFU=
Subject key identifier: 85:7A:D5:59:7B:24:0B:AF:DE:CE:EE:A1:A5:20:7C:CA:42:C5:F7:FD
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 36B8EA2F
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/hXrVWXskC6_ezu6hpSB8ykLF9_0.roa
Signing time: Sat 01 Jan 2022 05:58:50 +0000
ROA not before: Sat 01 Jan 2022 05:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50629
IP address blocks: 185.55.116.0/22 maxlen: 23
185.146.228.0/22 maxlen: 23
46.19.88.0/21 maxlen: 22
31.209.80.0/20 maxlen: 21
185.76.188.0/22 maxlen: 23
37.72.144.0/21 maxlen: 22
2a00:c380::/32 maxlen: 33
2a02:2918::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918088239 (0x36b8ea2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Jan 1 05:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=857ad5597b240bafdeceeea1a5207cca42c5f7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:3d:20:be:11:f8:d1:9b:9c:1d:9b:4d:e7:
dc:84:5b:68:13:9c:ba:55:3d:b1:11:99:85:50:8d:
05:66:90:31:dd:9c:33:21:fb:c2:cf:c2:78:50:22:
ef:68:4e:a1:e4:00:be:85:eb:38:09:09:42:0a:f9:
4d:b8:af:c7:d1:f2:d9:48:69:93:e3:ca:25:d8:93:
c6:da:fa:79:db:f8:52:6d:c2:24:97:30:88:3c:b8:
14:ce:3b:5d:21:d3:f9:1f:4b:d3:6a:84:6f:db:40:
b2:35:34:0f:8b:31:41:34:7b:96:d3:e2:5f:11:9e:
27:a5:a1:4e:36:bc:dc:f3:9a:ff:fd:6a:16:ba:b5:
5a:a9:14:63:90:12:5c:88:46:19:ef:a4:ea:7a:5d:
22:cc:4c:57:02:53:7c:7a:bb:98:c6:73:fa:d1:97:
8b:e9:de:97:31:de:ad:05:7e:5f:ec:9e:ff:91:23:
23:da:29:11:17:a0:13:97:d0:b6:af:d1:6a:b8:2d:
cd:21:d0:e4:3d:75:62:9b:f7:21:ae:e8:3d:a0:5c:
f4:a2:0e:be:e7:98:cb:89:17:6f:4b:97:39:fc:e9:
4a:3b:33:62:33:09:d5:2a:f3:88:5e:72:49:08:17:
6d:d6:a1:d9:7f:d9:63:0c:7f:38:08:f1:4a:37:b4:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:D5:59:7B:24:0B:AF:DE:CE:EE:A1:A5:20:7C:CA:42:C5:F7:FD
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/hXrVWXskC6_ezu6hpSB8ykLF9_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.80.0/20
37.72.144.0/21
46.19.88.0/21
185.55.116.0/22
185.76.188.0/22
185.146.228.0/22
IPv6:
2a00:c380::/32
2a02:2918::/32
Signature Algorithm: sha256WithRSAEncryption
78:7e:15:b5:49:7f:ee:e8:b2:8b:7a:bf:1c:dc:bf:ea:d8:22:
22:35:8b:7e:79:01:b5:7b:9c:ab:c3:1b:fa:8b:cb:8c:29:cf:
5f:2e:31:13:5a:ce:5e:6b:80:53:6e:ca:d7:4e:be:dd:f5:52:
87:ce:93:ab:00:fa:f2:ff:5a:c6:96:43:62:9b:67:bf:4a:5e:
6f:70:32:0c:be:eb:4e:a9:fb:0a:6c:f3:fe:2b:65:b5:d0:ba:
e4:89:b4:0d:51:65:7c:dd:c9:0b:2f:4b:3f:2e:c5:2a:c7:8e:
d9:e6:4b:3c:57:00:ef:22:29:4d:f9:d7:cf:55:b8:31:f0:1b:
35:46:2b:ad:25:75:79:6c:fc:5d:0b:ed:f9:66:8f:6c:c7:3f:
37:a1:c7:7c:52:e6:a1:97:b7:3f:f7:75:06:14:d0:25:38:ab:
f4:5c:b0:d4:df:9a:f2:ee:06:a1:50:6b:e2:20:1a:4a:93:90:
07:67:d9:e0:4f:0d:d9:4c:4f:8e:db:60:1d:70:ac:c2:02:af:
4f:fb:52:21:75:7d:06:15:0c:e8:57:29:c2:e5:6e:a2:d3:33:
b6:db:93:bb:9e:6f:f7:1c:14:64:c9:a7:74:7b:f2:00:26:61:
9c:cc:64:41:37:38:51:12:6f:8c:ac:af:aa:3c:88:fb:11:22:
50:f4:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-fra.rpki-client.org