Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/D16-Z_WOqUcUDePHaMVQPm-LQaw.roa
File: D16-Z_WOqUcUDePHaMVQPm-LQaw.roa (raw, json)
Hash identifier: WH0qBEWghTL30R+8NZNL0crHr76vTvffgYMkaUalWS8=
Subject key identifier: 0F:5E:BE:67:F5:8E:A9:47:14:0D:E3:C7:68:C5:50:3E:6F:8B:41:AC
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 039E5F70
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/D16-Z_WOqUcUDePHaMVQPm-LQaw.roa
Signing time: Thu 05 May 2022 13:33:50 +0000
ROA not before: Thu 05 May 2022 13:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 185.125.200.0/22 maxlen: 22
95.140.152.0/21 maxlen: 21
80.90.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60710768 (0x39e5f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: May 5 13:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f5ebe67f58ea947140de3c768c5503e6f8b41ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:1e:0f:23:0c:8d:cd:f0:08:fc:a6:7e:5c:
fb:1c:56:a4:34:96:02:61:2d:d8:33:38:dd:11:c5:
d5:dc:5c:ae:ca:3b:c5:5a:07:3a:60:62:12:1b:26:
19:ec:3f:30:bf:b8:11:8f:df:ed:d1:33:e4:41:20:
2d:7b:6f:4e:1d:ae:e8:c2:fd:b5:73:59:9e:4e:eb:
b2:97:2f:7a:f9:c9:17:61:c0:d2:15:0a:8b:4d:46:
19:b0:07:e3:f7:d4:15:ea:dc:cd:aa:92:20:2e:72:
0d:a2:97:c9:ae:af:c9:6a:a8:8b:f6:97:00:74:c8:
6d:9f:8a:58:0b:8d:46:5e:39:f4:fe:5c:8f:30:84:
1c:46:59:35:c2:67:31:ba:ce:ab:0e:08:f7:3b:94:
5e:db:f1:c1:4d:d4:b5:12:c9:2c:b3:8f:4b:7c:a6:
23:5f:fa:fe:fa:ac:d8:94:38:b1:29:fb:85:a0:f3:
78:51:ee:0b:a2:18:c2:e4:62:90:3a:e5:99:2b:42:
c3:7d:88:3b:8c:66:6a:95:4c:23:0d:6f:7a:eb:8d:
5b:2d:a3:92:ca:09:a1:be:8c:66:56:9f:9a:f3:af:
2a:30:e9:db:51:29:8c:57:a2:64:f0:22:dd:34:51:
8c:57:ec:e6:fa:7a:5f:31:bd:d6:20:ef:7f:52:e9:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:BE:67:F5:8E:A9:47:14:0D:E3:C7:68:C5:50:3E:6F:8B:41:AC
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/D16-Z_WOqUcUDePHaMVQPm-LQaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0/22
95.140.152.0/21
185.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
50:51:e3:30:78:20:68:c8:87:ab:f1:a7:4b:17:c4:a8:c8:2e:
14:32:f8:72:81:b8:cb:c0:ce:ee:fc:6c:ef:dc:eb:6b:b5:39:
16:eb:8e:4d:16:8c:aa:fe:57:60:58:13:da:c9:da:81:12:9f:
73:a7:59:50:53:b2:18:1b:7f:8d:eb:26:bd:5e:b9:d6:57:24:
f0:3f:48:3c:97:0e:86:22:13:46:10:68:50:a1:6c:a3:0b:69:
62:e6:4a:37:d1:5b:5c:4d:0e:f8:1a:7b:d5:a0:33:e5:e1:64:
c9:e0:1f:c0:32:f5:a7:39:5a:19:b9:47:61:09:02:a2:f1:06:
f6:bf:c7:fd:eb:53:04:a3:a1:1e:e5:c0:e4:4e:30:67:d9:bd:
21:e4:b9:5d:f8:5a:cf:6c:a2:09:90:92:91:59:d3:01:93:97:
d1:0b:e1:e3:0a:37:cd:79:49:45:b0:a8:56:43:13:cd:91:1b:
64:1c:36:3f:d3:f9:38:6f:56:30:23:83:94:07:ca:83:ba:80:
e2:d4:62:18:48:62:db:f7:9d:24:ef:dc:1c:b6:d5:21:d8:7c:
e0:76:3f:62:14:49:d3:15:7b:e2:18:53:52:1e:d4:bf:c9:a6:
df:60:49:4d:95:16:d6:d5:8b:3f:41:7c:07:12:13:37:e5:ef:
f6:49:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:33 2023 by rpki-client on console-ams.rpki-client.org