Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/sKMnoUli6st_pxfY-GE12nk_WuE.roa
File: sKMnoUli6st_pxfY-GE12nk_WuE.roa (raw, json)
Hash identifier: omNfeKJXnQUwSrsRKh+3nFWxZFh0EDAiwEbvOsP88Ak=
Subject key identifier: B0:A3:27:A1:49:62:EA:CB:7F:A7:17:D8:F8:61:35:DA:79:3F:5A:E1
Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial: 0BA06341
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/sKMnoUli6st_pxfY-GE12nk_WuE.roa
Signing time: Mon 14 Mar 2022 12:53:29 +0000
ROA not before: Mon 14 Mar 2022 12:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25560
IP address blocks: 62.216.160.0/19 maxlen: 24
85.199.128.0/18 maxlen: 24
217.24.208.0/20 maxlen: 24
95.143.160.0/20 maxlen: 24
85.199.184.0/22 maxlen: 24
2001:1a50::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195060545 (0xba06341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Validity
Not Before: Mar 14 12:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0a327a14962eacb7fa717d8f86135da793f5ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:7a:9e:79:7d:43:86:14:fb:65:d9:ea:88:
09:98:e5:86:c5:06:f0:d7:ba:25:32:3b:7c:76:80:
a1:0f:2b:65:62:a2:5a:f8:1c:a6:1e:ec:d4:9e:85:
c4:55:77:3f:26:ae:a7:13:60:44:51:40:46:e5:0e:
2f:20:04:94:cb:c6:93:e8:f1:85:02:34:1c:88:21:
23:cf:49:c4:f1:c3:78:fe:5f:41:fb:41:26:b8:a9:
35:34:e1:87:18:f1:25:cd:e9:84:f2:0b:32:50:a2:
ed:0c:b9:03:63:1b:3d:20:a8:32:c8:a6:ac:c8:26:
b8:fa:3b:64:d7:c7:1f:4b:81:88:71:19:10:74:1c:
48:ee:2b:c3:d4:c0:8e:88:bc:45:c1:41:8b:63:0f:
5d:e6:36:79:07:32:b4:96:57:2b:3b:dd:40:02:91:
94:99:3a:78:a5:67:c8:4a:26:d1:46:1b:32:3a:4c:
af:bb:8b:5f:f5:9a:50:28:47:af:f5:04:4f:ca:b7:
a2:67:3d:ca:c2:7f:eb:dd:f8:1e:a1:f2:10:0b:b7:
2a:8f:72:49:12:27:fb:e2:2f:a9:da:0f:a7:86:a4:
f3:f0:43:00:01:8b:ec:2c:d7:46:56:ac:ef:15:7c:
a6:43:08:47:76:09:05:c9:1e:96:24:b6:72:3a:0a:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A3:27:A1:49:62:EA:CB:7F:A7:17:D8:F8:61:35:DA:79:3F:5A:E1
X509v3 Authority Key Identifier:
keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/sKMnoUli6st_pxfY-GE12nk_WuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.216.160.0/19
85.199.128.0/18
95.143.160.0/20
217.24.208.0/20
IPv6:
2001:1a50::/32
Signature Algorithm: sha256WithRSAEncryption
11:0e:c0:60:9c:ab:c0:6f:b9:12:4c:72:fa:1b:49:c4:5c:f3:
63:70:f5:8e:85:fd:77:cb:53:aa:27:7a:25:35:de:2d:92:35:
de:ae:d9:3d:31:c7:9e:76:98:1a:03:f5:dd:45:49:d4:f7:34:
f8:bc:a3:6b:bf:b8:97:30:2b:c2:d4:d2:77:e0:e1:eb:e9:c7:
1f:f8:a6:bd:d2:94:e6:ec:49:bf:d6:a1:ab:5c:b6:b6:c2:e8:
5b:89:49:4e:17:8c:9c:19:77:b4:91:c9:a7:9a:8f:97:34:9c:
a5:97:ff:f9:b1:ac:20:78:5f:ea:55:88:c1:ec:b2:f3:4c:ab:
f4:a5:fc:91:fb:b7:5d:cd:c5:41:81:8f:ff:fc:df:25:28:9c:
3a:71:6e:df:f2:a4:95:cd:23:8a:04:24:0f:d7:4a:24:a3:86:
20:93:02:07:2f:c3:a2:f0:32:3b:76:b3:cf:c4:b1:37:17:9d:
e9:b0:5d:d3:f1:f0:90:a2:6b:65:37:58:d9:81:1a:53:eb:f0:
85:88:bb:24:db:f2:bf:d7:5d:a8:8f:09:35:1b:0d:36:dd:0e:
08:09:73:d9:61:e8:72:e3:07:c0:ca:b5:19:21:2d:8e:1f:6a:
a9:9e:03:d6:ff:7a:0e:8e:ca:5d:ef:12:ba:71:55:7e:1a:8a:
a1:cf:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:44 2023 by rpki-client on console-fra.rpki-client.org