Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/eUznKK0hOsKEYV9CzpLSTQi0yvQ.roa
File: eUznKK0hOsKEYV9CzpLSTQi0yvQ.roa (raw, json)
Hash identifier: r+ojESaZ8Qv6tNnMAgxcsANM7gqgbBmoiM+wgUrlVMo=
Subject key identifier: 79:4C:E7:28:AD:21:3A:C2:84:61:5F:42:CE:92:D2:4D:08:B4:CA:F4
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 0AE944FC
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/eUznKK0hOsKEYV9CzpLSTQi0yvQ.roa
Signing time: Sat 01 Jan 2022 10:03:46 +0000
ROA not before: Sat 01 Jan 2022 10:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62166
IP address blocks: 185.83.172.0/22 maxlen: 22
185.83.172.0/23 maxlen: 23
185.83.174.0/23 maxlen: 23
193.58.36.0/23 maxlen: 23
193.58.36.0/22 maxlen: 22
193.58.38.0/23 maxlen: 23
2a05:9d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183059708 (0xae944fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Jan 1 10:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=794ce728ad213ac284615f42ce92d24d08b4caf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:30:23:7f:4f:c2:b3:ca:eb:af:6f:67:e8:
f9:f2:cd:49:25:5e:cc:44:fe:ee:c3:bf:9c:cb:fa:
82:03:4f:9f:a3:72:f5:44:88:29:04:0a:b6:ab:ba:
4a:5b:9d:1c:c8:22:70:83:2c:58:80:eb:1c:44:15:
a0:44:b1:55:66:75:c1:bc:c6:26:f3:06:aa:2f:cd:
cd:4d:4f:2f:42:61:1c:6e:c6:7c:30:31:9c:d9:9f:
00:2d:a7:2d:c6:8e:60:c0:14:a7:51:50:70:6b:99:
d3:c1:45:a0:4c:2d:8b:a6:ab:27:d8:ec:f9:29:8f:
e8:d4:65:09:c2:f7:cb:b3:a6:be:eb:d0:e4:64:fe:
64:d0:30:68:e1:2a:4b:c2:91:b7:63:fa:a1:a8:c3:
4f:ad:7e:4d:73:ea:64:7a:20:77:b7:1e:7f:60:9a:
e8:f1:1c:5f:d0:f5:30:90:25:e9:d3:d1:0c:23:51:
81:55:fc:c4:e6:a9:73:b1:3a:04:a4:d2:2b:07:69:
11:97:6e:86:26:e4:ba:b2:ce:04:f5:77:cf:1b:2a:
50:c3:70:a5:ae:ce:19:f4:74:3e:97:61:6c:be:76:
0d:13:67:81:74:23:ce:39:02:97:17:35:7d:ec:0c:
99:ed:45:d5:74:28:d7:d5:66:da:d2:75:c2:46:28:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:E7:28:AD:21:3A:C2:84:61:5F:42:CE:92:D2:4D:08:B4:CA:F4
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/eUznKK0hOsKEYV9CzpLSTQi0yvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.172.0/22
193.58.36.0/22
IPv6:
2a05:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
43:c1:c5:86:c3:79:00:b3:66:ad:c8:26:86:8d:a8:76:12:e7:
cd:6d:28:31:6e:1d:97:9a:ae:90:94:d5:63:ff:37:eb:14:e5:
e4:ff:cd:b0:95:79:d3:fe:5b:d2:e9:14:e4:d8:7f:2f:32:a3:
96:17:3e:db:6c:ef:b6:3f:08:06:72:7a:09:1b:91:4a:83:ad:
1a:23:d2:93:9f:76:24:e6:e8:19:53:20:d6:b8:95:64:9c:df:
17:ee:49:24:b7:7c:db:c5:6a:99:8e:82:c2:ef:45:53:ce:14:
07:30:41:71:a1:f0:d0:78:42:4e:0a:3c:67:77:2e:64:b8:11:
43:58:77:fc:34:c9:29:1c:0d:3c:4d:07:92:b4:cb:90:f1:90:
98:56:39:23:22:e6:7a:4a:8b:78:9d:a1:b9:b9:eb:e3:e4:2b:
5e:b7:83:15:82:d5:4d:ab:83:fd:b9:cd:ae:85:7b:4e:5c:ee:
42:45:4f:7e:05:44:0f:0f:e7:5c:56:2d:51:98:3c:4b:3f:8d:
23:13:6e:c9:42:fa:f0:7b:1d:11:06:6a:53:b7:e2:b3:64:80:
8f:30:f0:a4:f1:e2:c8:66:83:cf:64:e0:c3:b4:e4:95:09:26:
13:a4:03:b0:18:90:19:5c:09:07:a7:46:d7:00:0a:e1:aa:59:
42:03:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-ams.rpki-client.org