Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/Rvd9hNJ6TseUKBKTC-_jlVoKLdc.roa
File: Rvd9hNJ6TseUKBKTC-_jlVoKLdc.roa (raw, json)
Hash identifier: 1fHvFvjJBMIACiBwJevabdOPWs4CbFDTHvB7BkB4V/E=
Subject key identifier: 46:F7:7D:84:D2:7A:4E:C7:94:28:12:93:0B:EF:E3:95:5A:0A:2D:D7
Certificate issuer: /CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Certificate serial: 0C6FDFBD
Authority key identifier: 1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/Rvd9hNJ6TseUKBKTC-_jlVoKLdc.roa
Signing time: Sat 01 Jan 2022 08:53:10 +0000
ROA not before: Sat 01 Jan 2022 08:53:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16205
IP address blocks: 178.249.24.0/21 maxlen: 21
81.201.144.0/20 maxlen: 20
185.75.184.0/22 maxlen: 22
31.210.160.0/21 maxlen: 21
217.18.176.0/20 maxlen: 20
176.52.200.0/21 maxlen: 21
2a00:8180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208658365 (0xc6fdfbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Validity
Not Before: Jan 1 08:53:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46f77d84d27a4ec7942812930befe3955a0a2dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:03:14:87:36:45:d9:e0:ee:7f:f2:17:5f:
e8:60:98:d3:01:e8:cf:83:6f:05:47:44:d9:84:7b:
64:df:4b:8a:b5:ca:22:55:59:02:29:ee:d2:67:c4:
30:0f:8f:32:03:26:f2:6a:f2:18:fe:b8:91:5f:4d:
98:f2:de:81:9a:73:bc:18:11:3b:a7:da:95:9e:21:
48:de:35:09:31:4b:25:e8:9c:4b:eb:e6:af:5d:4e:
43:23:ad:6f:3e:ab:bc:03:22:80:aa:cb:4a:88:48:
95:f0:7a:c7:4a:49:84:84:79:e8:67:1d:87:ac:82:
07:9a:66:8d:d6:56:31:5c:15:04:88:69:22:c3:8c:
87:05:60:c6:c0:43:ea:57:7a:b4:3f:a1:18:f7:ed:
4c:99:37:58:40:3a:2c:3b:9b:e7:b1:f1:dd:e6:bc:
14:99:f0:de:a3:a0:32:f2:65:c6:ab:1a:62:e6:44:
ab:51:1e:4c:94:b0:9d:f6:81:bf:bc:d1:d7:ed:06:
bc:59:c4:53:f8:ed:d9:81:6e:98:f8:18:b3:cc:65:
71:7d:5e:94:30:89:8d:76:29:60:50:7b:fe:ac:88:
aa:c4:0a:e5:fd:80:6d:6c:58:a1:ca:5e:ae:48:13:
46:5a:88:5b:9b:f7:0a:ec:48:ca:75:ea:47:4a:e7:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F7:7D:84:D2:7A:4E:C7:94:28:12:93:0B:EF:E3:95:5A:0A:2D:D7
X509v3 Authority Key Identifier:
keyid:1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/Rvd9hNJ6TseUKBKTC-_jlVoKLdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.160.0/21
81.201.144.0/20
176.52.200.0/21
178.249.24.0/21
185.75.184.0/22
217.18.176.0/20
IPv6:
2a00:8180::/32
Signature Algorithm: sha256WithRSAEncryption
6c:c9:83:00:1b:1d:fc:50:ee:bf:d1:63:73:9e:48:be:61:1e:
f1:f3:51:0d:e7:32:9a:cc:59:57:03:99:d9:5f:cc:b4:12:38:
86:68:fa:37:0b:8b:92:7a:7f:a3:c2:2d:04:bb:8e:54:b1:ae:
49:b3:40:07:17:c6:94:e7:e9:50:62:17:ee:f2:5d:27:20:b7:
d0:7e:75:8a:4d:b9:68:49:e4:bf:8d:b1:39:fe:e5:8b:57:a6:
c5:56:00:d5:b4:4b:34:61:3d:e6:41:63:c3:be:f2:a2:30:4a:
0e:11:fd:3b:b4:09:eb:e4:bb:ec:a7:a6:19:85:f3:b2:d7:ac:
4b:44:e6:c7:f5:fe:18:6c:23:bc:5f:51:bd:f1:54:f0:0a:5e:
49:da:65:97:41:34:f9:7b:fb:54:04:57:bb:30:a5:0f:90:08:
a2:01:59:65:83:26:e1:8e:b7:2c:dc:9c:d3:50:af:ed:cc:60:
53:12:32:a5:f6:60:dd:da:99:70:aa:97:cb:59:d3:4b:12:c6:
6c:85:b7:8f:b3:0e:7d:be:be:03:7e:99:f2:35:b4:54:52:94:
a4:b9:a3:86:b2:a7:e6:75:b4:97:5c:12:9a:a4:da:3c:8f:3e:
ab:f7:16:38:bd:0b:77:ce:7d:ee:b8:5e:e8:14:63:3f:74:41:
3d:64:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-fra.rpki-client.org