Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/AEb8-wclExqP1e4XKDWpyvhwUgk.roa
File: AEb8-wclExqP1e4XKDWpyvhwUgk.roa (raw, json)
Hash identifier: zz4ATn7OMk6cS6jumnzjVYjJzMF4nVzJaom8y7lvQq4=
Subject key identifier: 00:46:FC:FB:07:25:13:1A:8F:D5:EE:17:28:35:A9:CA:F8:70:52:09
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 17F61908
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/AEb8-wclExqP1e4XKDWpyvhwUgk.roa
Signing time: Sat 01 Jan 2022 09:54:33 +0000
ROA not before: Sat 01 Jan 2022 09:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1120
IP address blocks: 193.171.255.0/24 maxlen: 24
193.170.120.96/28 maxlen: 28
193.171.3.0/24 maxlen: 24
78.104.145.0/24 maxlen: 24
2001:628:2000::/48 maxlen: 48
2001:628:453::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402004232 (0x17f61908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Jan 1 09:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0046fcfb0725131a8fd5ee172835a9caf8705209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:2c:91:71:04:5b:b2:6d:60:f1:db:3d:08:
ed:f7:41:ed:53:57:0d:64:83:6e:5e:2d:4f:b3:3d:
2a:9f:30:eb:0e:3f:11:f0:3a:b0:10:f6:3f:a3:a8:
d4:f6:67:53:a4:6a:8b:7d:13:6d:67:ca:b4:8e:a8:
5b:f7:22:13:6a:80:ae:ff:d9:e2:b3:b9:50:69:a4:
c9:5c:7c:a5:62:77:d1:7c:b1:d4:bc:12:86:e1:4e:
f9:3f:ac:e4:7f:b3:87:e8:3f:d3:15:b2:dc:fc:ad:
cc:6e:56:3b:ef:4f:c1:9e:6b:76:7a:f9:de:cd:76:
10:71:50:36:2e:bb:df:32:16:98:10:17:eb:95:5d:
1d:b6:3b:24:73:64:ac:ad:56:da:67:5b:3f:24:58:
77:e9:f6:78:96:0c:90:eb:4b:dc:01:7d:d9:87:56:
1c:93:6b:81:3a:f7:57:9d:fd:94:95:41:66:6d:74:
80:39:92:b4:64:f1:d5:0e:63:e1:50:a9:10:13:88:
1d:fb:21:de:99:d0:c6:7c:02:ed:9f:6f:f5:fd:f3:
7d:ec:68:75:b1:17:b7:05:d7:e2:6a:e2:c6:04:b7:
c2:15:51:bc:1d:b3:ac:e0:01:b2:08:b1:12:89:f2:
25:2c:52:df:14:51:33:5a:cc:a3:e2:3c:87:bd:b3:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:FC:FB:07:25:13:1A:8F:D5:EE:17:28:35:A9:CA:F8:70:52:09
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/AEb8-wclExqP1e4XKDWpyvhwUgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.104.145.0/24
193.170.120.96/28
193.171.3.0/24
193.171.255.0/24
IPv6:
2001:628:453::/48
2001:628:2000::/48
Signature Algorithm: sha256WithRSAEncryption
60:42:50:29:6b:ea:1a:e6:44:1f:e8:61:06:6e:f0:8b:39:1f:
e0:1f:e9:68:8a:73:51:9b:0b:c5:fa:ef:0d:cf:92:79:34:4c:
82:6d:1e:4a:0f:29:0f:27:f8:28:bc:55:e9:f7:8b:2f:0c:8f:
72:72:1f:44:2a:36:ae:14:03:a7:5f:d6:8c:af:cd:fe:70:ad:
c6:06:72:9e:24:60:be:d5:21:35:7e:d0:62:c1:a4:a8:bb:8b:
a2:4c:64:cd:02:b1:4a:32:86:a1:1b:9d:6a:ea:4c:2b:e9:fa:
d0:4c:4b:7d:73:65:42:ba:c7:7c:71:c8:0e:92:c8:07:4f:d4:
ca:c0:4a:80:31:a3:b7:26:4f:31:3d:48:46:ba:6f:cb:d0:84:
27:f1:8e:2d:79:56:1b:05:c5:01:67:f5:64:1f:a8:a8:6f:c5:
07:74:ae:fe:8f:58:4e:56:2e:6f:62:73:64:ea:bb:94:fa:c6:
2c:bd:48:d7:6a:24:83:32:de:42:6c:9f:2b:98:76:cc:5d:5c:
21:d0:e0:d5:34:22:ad:c3:65:52:91:b0:c1:e5:db:a5:7a:39:
88:00:1b:76:ca:9b:d6:bb:7e:6c:07:0c:80:53:73:b3:e2:03:
b2:b9:2b:dd:43:80:54:81:6a:84:55:91:d9:0d:37:9d:a4:fc:
23:a6:71:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:52 2023 by rpki-client on console-fra.rpki-client.org