Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/r5eT3AQCzJSqarMaGUdO6myth08.roa
File: r5eT3AQCzJSqarMaGUdO6myth08.roa (raw, json)
Hash identifier: FRtb4gwa6RSFtIb5EJFSgnna02aQUiGpeyPTESu1do0=
Subject key identifier: AF:97:93:DC:04:02:CC:94:AA:6A:B3:1A:19:47:4E:EA:6C:AD:87:4F
Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial: 0E9029E6
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/r5eT3AQCzJSqarMaGUdO6myth08.roa
Signing time: Sat 01 Jan 2022 02:56:29 +0000
ROA not before: Sat 01 Jan 2022 02:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20810
IP address blocks: 80.69.192.0/20 maxlen: 20
188.74.0.0/19 maxlen: 20
188.74.0.0/20 maxlen: 20
188.74.16.0/20 maxlen: 20
185.158.180.0/22 maxlen: 22
2a03:7500::/32 maxlen: 32
2a03:7500::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244328934 (0xe9029e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Validity
Not Before: Jan 1 02:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af9793dc0402cc94aa6ab31a19474eea6cad874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:9a:02:1b:0d:db:8c:a7:3f:07:9d:e7:33:
61:77:1e:dd:2c:e5:ee:41:53:86:e8:df:16:a3:51:
0e:6e:fa:fd:52:e0:57:ad:1f:9d:d4:68:1f:fa:cd:
7a:8b:b0:fe:05:a1:07:e5:e2:b2:4e:42:d5:b6:9c:
3d:d2:12:4d:89:11:4d:bc:6d:cc:4c:a2:c3:e7:4a:
e0:c5:40:86:68:fd:3b:eb:06:8d:38:2f:47:9f:db:
1a:1d:73:65:63:ac:c8:03:de:dc:77:d9:56:88:82:
b9:12:d7:12:53:54:d8:fa:3a:6a:36:8c:cb:93:42:
f8:86:a4:be:28:ab:2b:1c:1f:01:a2:8d:4b:7c:69:
ff:a0:31:75:a2:7e:a2:fd:af:c1:dd:ee:20:b5:60:
a2:aa:ec:df:ce:13:0a:8a:c4:c8:2d:d3:48:25:14:
af:b7:39:90:94:80:14:3b:17:b5:58:ca:88:ac:26:
4b:47:c3:27:3b:87:fb:6b:7d:26:28:ee:0f:b0:64:
45:e9:55:2a:a8:ac:fd:97:ab:58:e1:13:53:2d:d8:
e5:36:51:e2:a3:85:7b:a4:af:ee:dd:d5:80:88:6c:
8e:96:40:da:d9:43:29:d7:99:b3:06:41:3f:8d:fb:
0a:79:f7:61:53:f8:dd:b7:90:88:b9:38:ba:78:e5:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:93:DC:04:02:CC:94:AA:6A:B3:1A:19:47:4E:EA:6C:AD:87:4F
X509v3 Authority Key Identifier:
keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/r5eT3AQCzJSqarMaGUdO6myth08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.192.0/20
185.158.180.0/22
188.74.0.0/19
IPv6:
2a03:7500::/29
Signature Algorithm: sha256WithRSAEncryption
67:ef:f6:dc:8f:99:9d:6a:51:91:13:4f:1e:f2:27:65:36:62:
47:d8:b7:cb:c4:ba:cb:2b:6a:fb:d8:75:ec:46:ac:e7:56:fe:
e6:2f:b3:26:2e:b5:fe:7b:e2:3c:ae:10:4e:d4:ca:a1:4f:42:
e6:be:34:27:cf:c7:6b:a3:e2:e1:48:b1:0f:75:b4:9d:37:ad:
a9:e6:fe:7f:f6:42:13:43:0c:9e:03:65:70:bc:79:2f:b2:a9:
82:48:d2:86:ae:17:50:2c:8c:a6:79:2e:dd:7f:b1:ac:c8:73:
b4:01:dc:bf:8e:ee:4a:e5:23:77:5d:0f:43:4c:a3:72:d5:85:
f6:28:d7:2c:d6:46:d0:a3:dd:9a:fc:70:99:31:37:9c:a4:29:
d2:50:22:1d:70:ab:14:7e:bb:d9:93:d1:b6:af:dc:a4:0c:24:
f9:fe:c1:e6:57:43:26:71:43:1f:9c:66:41:5e:17:a4:ca:10:
43:c6:d6:c8:dd:61:33:e1:12:ba:07:a7:4b:58:7c:23:70:09:
d4:5c:e7:bf:b8:49:86:c5:26:3c:a1:03:34:b5:e0:5f:e1:d3:
33:11:77:4d:bb:38:b9:d2:04:2d:26:39:80:af:7f:c7:c6:4e:
f3:d6:10:ba:74:9f:31:e0:3b:4a:c2:20:3e:5f:84:57:3c:9b:
ac:e9:05:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:43 2024 by rpki-client on console-ams.rpki-client.org