Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/TePcqWrdRxMLsxnDujTji04Tca4.roa
File: TePcqWrdRxMLsxnDujTji04Tca4.roa (raw, json)
Hash identifier: HpHvqD1DDpQrV8jtpy/FniaIWaWtu3jKF6B7Bm8EDgI=
Subject key identifier: 4D:E3:DC:A9:6A:DD:47:13:0B:B3:19:C3:BA:34:E3:8B:4E:13:71:AE
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 09CDF775
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/TePcqWrdRxMLsxnDujTji04Tca4.roa
Signing time: Tue 05 Apr 2022 12:06:31 +0000
ROA not before: Tue 05 Apr 2022 12:06:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29582
IP address blocks: 95.158.145.0/24 maxlen: 24
80.95.19.0/24 maxlen: 24
93.152.240.0/24 maxlen: 24
93.152.246.0/24 maxlen: 24
93.152.247.0/24 maxlen: 24
2a00:e200:103::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164493173 (0x9cdf775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Apr 5 12:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4de3dca96add47130bb319c3ba34e38b4e1371ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:76:99:49:d3:34:48:a4:35:4b:bc:60:1e:
ab:c8:e7:e3:fa:59:7a:2c:25:17:06:39:56:29:c1:
83:10:ad:cc:b2:40:3a:e6:f0:89:4a:f2:5b:a8:a8:
2d:14:7e:94:7e:e4:a1:ed:83:2c:3e:24:16:52:c9:
f6:c8:5a:44:40:31:5b:8e:f0:6b:4c:7d:b4:c4:c6:
0f:e5:d9:4e:11:55:f1:a4:27:fb:37:e8:f2:17:64:
92:76:c2:41:84:a8:76:16:ee:d0:56:0e:21:0b:80:
db:ba:33:b8:98:67:b2:ce:b4:ce:69:df:89:4d:ed:
be:33:eb:42:14:68:6a:f5:83:69:54:7f:9d:38:0a:
49:14:58:b4:1d:d4:4f:a5:70:7c:35:54:30:ca:50:
9b:d3:c5:31:e0:d8:d8:0a:8e:fb:16:07:75:ed:1d:
c3:ab:b2:e2:75:13:7c:09:09:e6:d1:e0:1a:cd:cc:
56:81:39:1b:0b:1e:26:47:57:b3:72:7f:50:8d:af:
a4:4d:8e:06:2c:9d:35:8e:e9:69:09:bd:38:68:60:
89:97:a8:26:01:04:ed:8c:10:e3:2e:1d:5e:3f:8a:
2b:8c:df:4f:b2:88:6d:73:12:00:1e:0c:8f:66:7a:
1a:86:35:25:ba:a2:b9:99:59:03:6b:0b:e8:6b:a5:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:DC:A9:6A:DD:47:13:0B:B3:19:C3:BA:34:E3:8B:4E:13:71:AE
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/TePcqWrdRxMLsxnDujTji04Tca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.19.0/24
93.152.240.0/24
93.152.246.0/23
95.158.145.0/24
IPv6:
2a00:e200:103::/48
Signature Algorithm: sha256WithRSAEncryption
18:54:78:0e:91:f6:33:40:5d:31:b4:6e:38:e9:b4:7c:05:ad:
5f:df:d5:00:02:c2:e7:b3:0b:15:81:ff:98:9b:2b:88:05:e5:
72:45:f0:45:f3:db:2f:df:65:31:c7:76:b8:d4:94:3d:1c:42:
23:8f:42:1d:a9:1c:50:62:20:7f:53:93:91:c8:f1:60:ba:02:
cd:29:dd:45:78:0f:c5:25:e0:c2:32:1b:6e:19:e2:88:3f:74:
f7:7e:96:a3:c4:1d:ef:d8:a0:7f:d0:f1:8c:cf:1b:db:93:cf:
aa:3c:21:58:83:9f:ae:21:28:eb:c4:ec:e1:c2:24:44:a7:53:
cd:d9:c2:e9:d8:11:07:87:50:bc:50:5d:7e:09:7b:8d:39:09:
f3:12:8e:9f:a3:d9:1d:cd:b1:c0:b6:6f:c0:d9:09:d1:f7:33:
49:b8:3b:1e:74:3a:b4:ee:79:5a:a9:8a:0f:4e:1c:d5:2d:da:
93:3a:43:06:5d:aa:69:39:16:af:95:3b:ed:bd:bf:48:92:d9:
d9:95:07:95:3f:c8:1f:13:6a:4d:cf:97:90:70:83:00:8b:9f:
b8:33:6f:aa:17:74:7e:cf:c0:2c:6d:3e:22:51:87:0d:54:f4:
15:52:0a:72:fe:55:c1:c5:72:21:e7:96:23:fb:b7:79:b5:b9:
a8:15:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org