Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/1kC98sWKcxE-_s5eeJa8QMTxYKc.roa
File: 1kC98sWKcxE-_s5eeJa8QMTxYKc.roa (raw, json)
Hash identifier: +vfDHMw+xXu5uVl2Y1jPGsESC3p29fyZ3o8heENiJ0U=
Subject key identifier: D6:40:BD:F2:C5:8A:73:11:3E:FE:CE:5E:78:96:BC:40:C4:F1:60:A7
Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial: 33000A56
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/1kC98sWKcxE-_s5eeJa8QMTxYKc.roa
Signing time: Sat 01 Jan 2022 01:51:29 +0000
ROA not before: Sat 01 Jan 2022 01:51:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9042
IP address blocks: 193.5.66.0/24 maxlen: 24
193.5.76.0/22 maxlen: 22
146.109.0.0/16 maxlen: 24
193.247.180.0/24 maxlen: 24
2a01:4642:100::/40 maxlen: 40
2a01:4642:200::/40 maxlen: 40
2a01:4640:100::/40 maxlen: 40
2a01:4640:200::/40 maxlen: 40
2a01:4640:c800::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855640662 (0x33000a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
Validity
Not Before: Jan 1 01:51:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d640bdf2c58a73113efece5e7896bc40c4f160a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:da:8b:d0:a0:c6:b8:31:59:bb:44:d3:83:
02:e8:8c:78:d1:82:f4:be:c4:f7:d7:b0:b8:a3:ab:
97:dd:c8:89:e6:30:1c:64:7a:3a:e7:27:9c:55:60:
a4:65:46:1d:92:27:e5:d5:0b:c5:60:f9:40:b5:b5:
48:2b:d9:25:51:c1:75:2f:ca:ae:b7:3a:d0:61:1b:
b0:ea:3a:86:9a:a8:70:07:9d:77:e9:19:c6:9f:75:
54:e6:a0:e1:f8:3c:86:cf:0a:5a:55:7f:78:44:e4:
aa:68:0b:8c:65:e1:5d:95:8e:23:cd:e9:c1:7c:53:
d1:28:8e:45:b2:fe:c0:88:87:9e:0e:b7:a3:ca:fa:
a5:5f:8b:80:17:f7:87:d8:08:47:d5:24:dc:b0:7c:
c1:62:e7:38:1e:54:85:88:1d:51:7a:72:01:b9:6b:
74:f5:d5:48:3d:da:77:da:f4:0e:1b:b7:41:fc:34:
7b:15:10:8b:6d:d3:01:68:78:6d:5c:53:7b:6c:0e:
69:85:49:c1:cb:05:27:a1:eb:b9:fe:e6:71:f1:f1:
4e:44:f6:33:ea:ad:a5:7f:f7:7d:cf:19:6c:1b:f9:
36:4b:df:f6:47:c9:80:cc:05:2e:d6:93:46:7d:ec:
65:b8:24:d6:b5:49:cf:8e:c7:74:05:c9:36:a9:78:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:40:BD:F2:C5:8A:73:11:3E:FE:CE:5E:78:96:BC:40:C4:F1:60:A7
X509v3 Authority Key Identifier:
keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/1kC98sWKcxE-_s5eeJa8QMTxYKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.109.0.0/16
193.5.66.0/24
193.5.76.0/22
193.247.180.0/24
IPv6:
2a01:4640:100::-2a01:4640:2ff:ffff:ffff:ffff:ffff:ffff
2a01:4640:c800::/40
2a01:4642:100::-2a01:4642:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:be:8a:10:ab:53:11:6c:e8:a8:94:b5:e2:29:98:9c:a7:41:
68:f9:13:cc:0f:3c:9d:d9:28:91:94:3a:80:4c:dd:d9:25:fb:
b5:88:a1:d9:34:e9:1d:b0:f3:c8:6b:de:a5:09:19:7a:b4:1e:
06:86:43:c9:37:8d:ad:10:06:70:05:d3:5c:78:00:8a:82:db:
b8:c9:fd:83:95:83:cf:a3:18:cd:ba:ea:08:42:34:0e:41:3d:
3b:a8:f8:c4:67:da:26:81:67:cd:4e:4b:8f:8a:7f:ce:b5:d4:
a5:8b:46:0b:f3:4c:68:b3:00:44:c5:ba:b9:bc:db:d8:91:63:
d8:02:9e:97:76:1c:fe:0f:69:01:b7:87:c4:c3:09:f4:cb:40:
c8:fe:14:3a:58:bf:55:63:f5:7b:ce:08:20:a3:99:c3:0c:4d:
de:18:e9:29:32:81:bd:b3:fc:3b:8a:14:11:c5:c5:d5:1a:7d:
6b:6f:89:3b:d9:7e:c8:ec:3f:f7:8a:bc:2c:e3:04:00:df:be:
89:2c:3b:0d:fd:05:1c:40:79:99:6d:7e:03:25:08:eb:52:1f:
48:78:f3:ac:d8:b8:27:90:c1:af:e3:ca:bc:49:6c:31:4f:7d:
3e:d6:bb:76:75:c1:32:58:17:fa:f4:28:11:88:18:04:b1:84:
61:1c:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:39 2024 by rpki-client on console-ams.rpki-client.org