Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/pLE88sPn60N9ulxKgSJ5-fjz0B0.roa
File: pLE88sPn60N9ulxKgSJ5-fjz0B0.roa (raw, json)
Hash identifier: nWMZdW2LG4BEcCV37z3LqtN3wVXKL4HIxpx3CriG6pk=
Subject key identifier: A4:B1:3C:F2:C3:E7:EB:43:7D:BA:5C:4A:81:22:79:F9:F8:F3:D0:1D
Certificate issuer: /CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Certificate serial: 0181F17D9C34AC66071F75F2723CED3C443F
Authority key identifier: EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/pLE88sPn60N9ulxKgSJ5-fjz0B0.roa
Signing time: Tue 12 Jul 2022 08:19:09 +0000
ROA not before: Tue 12 Jul 2022 08:19:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30925
IP address blocks: 194.124.196.0/22 maxlen: 22
185.220.212.0/22 maxlen: 22
185.226.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f1:7d:9c:34:ac:66:07:1f:75:f2:72:3c:ed:3c:44:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9d376d5441f48b3dd508515b16fe95c5a11782
Validity
Not Before: Jul 12 08:19:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4b13cf2c3e7eb437dba5c4a812279f9f8f3d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:b5:d3:08:d4:3a:99:07:d8:28:5e:1f:5e:
fa:b4:85:09:d9:33:8f:f3:39:22:c4:7d:d2:6c:02:
36:3a:43:24:b5:8e:d2:ab:bd:17:a1:3a:6d:ef:08:
c8:20:24:0a:c2:fd:92:3f:68:ab:c9:86:a1:f3:33:
d7:62:de:41:d1:e6:f1:71:34:e2:18:70:76:fc:61:
fd:0c:0b:41:52:cd:f6:41:9b:57:66:ac:f8:3a:cd:
fe:3c:96:4d:4f:12:41:06:2d:60:19:27:82:30:18:
80:e8:09:6a:46:fe:8c:10:a1:52:b9:2e:7b:51:f3:
f1:bb:9c:28:82:86:e4:f6:5a:6c:45:6b:06:21:32:
f7:db:8a:5f:0f:a2:6a:57:07:39:06:f2:f9:77:a6:
7a:7f:7c:a3:80:e3:d2:fb:36:80:8e:38:a2:96:8a:
e0:b9:2b:f6:71:1e:8e:56:b7:bd:b6:4b:3c:22:0a:
8d:06:a6:70:c9:4d:a2:08:83:b0:a4:73:a5:72:d2:
1e:3e:c5:98:eb:b4:30:d8:b9:06:c6:54:06:c1:1c:
d3:3d:42:bc:b0:86:2c:7e:ca:49:df:32:4c:24:13:
64:7a:20:d1:d0:7b:8d:eb:ef:81:76:93:41:88:18:
19:da:78:96:0e:ab:89:bc:ce:4d:0e:17:00:c6:f6:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B1:3C:F2:C3:E7:EB:43:7D:BA:5C:4A:81:22:79:F9:F8:F3:D0:1D
X509v3 Authority Key Identifier:
keyid:EA:9D:37:6D:54:41:F4:8B:3D:D5:08:51:5B:16:FE:95:C5:A1:17:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p03bVRB9Is91QhRWxb-lcWhF4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/pLE88sPn60N9ulxKgSJ5-fjz0B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/92c8a4-4a95-486d-9993-3f7aa446f7a8/1/6p03bVRB9Is91QhRWxb-lcWhF4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.212.0/22
185.226.76.0/22
194.124.196.0/22
Signature Algorithm: sha256WithRSAEncryption
be:1b:01:5a:f2:da:0e:78:36:49:25:42:78:2b:c4:30:08:fb:
16:8b:59:02:90:cf:5b:9c:7a:04:f0:dc:d9:c9:0d:9d:da:3f:
9f:04:25:9a:34:24:5f:96:ee:6f:0f:42:42:e4:7a:16:fb:44:
46:f9:a2:29:4f:a0:24:c7:6c:c2:98:02:26:84:8f:53:8d:99:
92:33:e7:43:f0:5e:75:b4:25:8b:28:bd:c5:8b:cd:35:01:14:
6b:ae:3b:57:dd:2b:84:83:3e:4e:11:6f:c3:f3:d2:a4:d5:d0:
44:d5:ec:6e:a4:b8:55:6a:c7:9f:8b:eb:56:f3:99:4a:4e:f6:
f2:58:98:cf:f4:34:88:a1:d5:bb:b0:c0:da:26:cb:d6:50:ab:
c4:09:1b:14:88:15:a4:21:e7:45:5e:08:f7:1a:7b:87:bf:1e:
9c:66:2e:d4:31:7e:33:f3:e8:f8:04:f3:51:0c:be:ea:f5:32:
7d:69:f9:84:51:df:7b:d6:25:87:ed:ac:cd:eb:2a:b8:66:73:
36:77:8f:ce:b9:13:3d:70:f8:9d:34:e8:f3:de:35:3e:7f:be:
e0:62:31:32:e7:84:14:20:6e:a8:4d:e5:e5:44:f4:f1:19:c9:
96:d6:84:90:8d:e5:d8:d7:e3:1e:00:0d:a0:f2:50:4c:6d:7a:
11:e6:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:08 2023 by rpki-client on console-fra.rpki-client.org