Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/7GF4yTLScBEMKghR3Hmfa-6ZOUc.roa
File: 7GF4yTLScBEMKghR3Hmfa-6ZOUc.roa (raw, json)
Hash identifier: teSztIWmgT5MkTH5k8TlEtIqdgPn9I6WQoz69S4Yf+A=
Subject key identifier: EC:61:78:C9:32:D2:70:11:0C:2A:08:51:DC:79:9F:6B:EE:99:39:47
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 1CBECC74
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/7GF4yTLScBEMKghR3Hmfa-6ZOUc.roa
Signing time: Sat 05 Mar 2022 17:37:05 +0000
ROA not before: Sat 05 Mar 2022 17:37:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29169
IP address blocks: 46.226.104.0/21 maxlen: 32
213.167.228.0/22 maxlen: 24
217.70.176.0/20 maxlen: 32
185.26.124.0/22 maxlen: 32
213.167.240.0/20 maxlen: 24
2001:4b98::/31 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482266228 (0x1cbecc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Mar 5 17:37:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec6178c932d270110c2a0851dc799f6bee993947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:05:d4:50:cb:7a:31:e9:98:4d:99:62:be:
7e:6b:00:32:14:a8:43:7b:9f:a6:95:3b:3f:c4:4e:
e3:72:73:d2:39:4e:ae:58:06:76:0a:7c:14:07:a5:
77:c0:59:31:28:4d:9f:27:aa:3d:20:fd:d7:3a:ce:
20:bb:ff:8c:08:23:2f:2b:7c:53:9a:70:57:fd:f2:
ae:63:3b:b7:60:8e:e8:c7:78:28:8e:ac:71:f0:25:
d2:d0:8d:09:72:15:02:7f:2c:b8:66:ed:ee:e2:46:
fd:ce:86:92:ba:a9:f6:71:22:ec:cf:d5:ad:96:d9:
5a:73:04:19:9a:51:d4:04:15:8c:9e:9b:86:a7:06:
a7:38:4d:90:d1:2b:c4:4a:31:7e:d2:53:9d:b2:87:
d9:65:75:b4:59:0e:86:d4:49:a7:0c:7d:32:b9:6b:
4e:59:1e:7c:56:4a:56:9f:d3:43:ce:a6:45:51:b2:
00:f2:5b:38:60:51:05:51:a0:4d:f9:a8:2c:37:9a:
a1:d2:f0:37:a8:a7:37:d9:1a:9b:33:0a:cd:78:77:
a1:a1:c3:61:5b:f1:69:82:4b:d7:1e:50:a2:1e:a2:
82:e1:e7:6a:3e:e8:02:5f:e0:38:5d:af:0c:96:b7:
67:b4:c1:ee:9f:8d:50:c7:43:62:bd:ed:50:12:91:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:78:C9:32:D2:70:11:0C:2A:08:51:DC:79:9F:6B:EE:99:39:47
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/7GF4yTLScBEMKghR3Hmfa-6ZOUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.104.0/21
185.26.124.0/22
213.167.228.0/22
213.167.240.0/20
217.70.176.0/20
IPv6:
2001:4b98::/31
Signature Algorithm: sha256WithRSAEncryption
9b:7e:23:f3:a5:76:97:cc:d2:f5:a7:e0:68:6a:b8:ca:da:38:
fb:42:df:4d:63:67:6b:72:0b:20:65:a6:d0:a5:92:7d:41:ce:
eb:47:25:0e:b1:16:b5:0d:18:f5:74:dc:65:70:a2:88:11:21:
cd:75:68:99:91:49:02:f5:cb:29:27:fc:32:50:a3:0b:83:fc:
31:e1:e6:85:3d:6a:62:a5:30:1a:3f:ad:05:82:4d:f8:3b:38:
ce:42:c1:85:8f:7e:25:03:e5:d4:a2:10:fd:a9:fc:59:d7:16:
28:c8:58:77:e4:4d:99:3d:bf:fd:57:53:b2:ba:0d:f9:90:ed:
b8:10:41:c7:c7:ee:05:55:6a:75:d0:e9:23:ae:0a:a4:c6:04:
e1:8d:4b:10:eb:4d:6d:48:c4:0f:a4:f0:b9:17:a3:f1:37:11:
2d:2a:5b:92:c0:68:33:6a:37:5e:da:48:b7:a4:f1:d6:90:b5:
ce:1a:03:89:8a:60:0a:e3:94:88:b7:9f:69:3e:a3:8a:fa:65:
bc:a4:5c:db:bc:9d:c4:bd:5b:6c:23:fb:a5:2a:bf:dd:bb:cc:
35:82:ca:08:7d:7e:bd:34:c2:e4:70:69:b1:20:85:26:aa:64:
37:f8:13:88:58:18:fb:6a:1e:79:17:8b:10:ff:bc:3a:e7:3c:
8b:07:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:05 2024 by rpki-client on console-ams.rpki-client.org