Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/oq7e_xIkHppxk5btYk6yCFf4sUQ.roa
File: oq7e_xIkHppxk5btYk6yCFf4sUQ.roa (raw, json)
Hash identifier: /XQ6X3MXxw5x/ssqnErmpU3wg59sdP1BJ47s/gf22OY=
Subject key identifier: A2:AE:DE:FF:12:24:1E:9A:71:93:96:ED:62:4E:B2:08:57:F8:B1:44
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 146FB537
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/oq7e_xIkHppxk5btYk6yCFf4sUQ.roa
Signing time: Sat 01 Jan 2022 09:55:22 +0000
ROA not before: Sat 01 Jan 2022 09:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34288
IP address blocks: 109.233.176.0/21 maxlen: 21
46.234.32.0/19 maxlen: 19
81.94.112.0/20 maxlen: 20
85.158.24.0/21 maxlen: 21
2001:4b20::/32 maxlen: 32
2001:4b20::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342865207 (0x146fb537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Jan 1 09:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2aedeff12241e9a719396ed624eb20857f8b144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:0f:e3:c6:56:82:3c:62:78:53:cd:fa:81:
04:d0:88:0b:6b:8c:31:ba:bb:ce:52:29:8c:13:76:
4f:fa:6b:d5:00:36:db:21:4c:e7:a9:e4:e6:d5:d0:
e1:17:20:bb:02:44:87:ff:11:64:f9:ba:f8:04:0c:
a5:ec:c4:7f:a0:35:95:9e:ed:e6:4c:a1:d2:c8:e8:
26:ef:a7:81:05:6f:34:3c:95:d7:c3:8a:0a:e1:5e:
4c:ce:95:f9:62:19:3e:52:92:94:bc:3a:a0:76:e7:
2a:a4:be:0d:e4:b6:3c:42:04:0d:7a:31:87:a5:d0:
4f:d6:49:51:60:bc:31:39:ef:16:48:dc:aa:ad:55:
e7:19:10:76:17:88:cb:5c:20:9a:47:81:46:b3:a7:
5a:01:41:30:77:64:c8:a2:8d:14:7e:c8:93:7a:49:
8c:36:f2:8f:4e:6e:e8:7f:5b:c7:e0:dc:5e:77:50:
f1:cf:e1:36:0d:a7:b9:26:cd:69:f5:7f:95:fb:b9:
c6:da:34:a6:bb:af:6e:03:f3:b2:35:17:68:7d:24:
51:1b:91:5d:23:4c:18:02:8a:2c:2f:60:ab:08:db:
58:e2:ee:4a:20:51:59:83:78:df:60:a5:f5:38:54:
2f:1e:88:52:f1:e1:30:85:8b:77:07:6a:39:9f:55:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AE:DE:FF:12:24:1E:9A:71:93:96:ED:62:4E:B2:08:57:F8:B1:44
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/oq7e_xIkHppxk5btYk6yCFf4sUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.32.0/19
81.94.112.0/20
85.158.24.0/21
109.233.176.0/21
IPv6:
2001:4b20::/29
Signature Algorithm: sha256WithRSAEncryption
67:65:94:c8:9c:7a:b6:bf:0a:66:65:59:c7:8e:c4:8c:66:c3:
74:2b:7d:a3:eb:01:c2:e5:96:b2:56:97:c4:67:7c:3c:79:98:
7b:df:e4:cc:59:1b:db:55:ff:ed:1c:69:46:00:0b:1a:5a:15:
e2:e0:a4:4d:82:9c:18:02:61:a1:45:19:2d:15:b1:8b:10:a1:
40:f4:6d:bc:eb:bf:31:63:07:c9:d9:f8:4a:94:ef:f7:58:17:
25:c1:47:97:4c:79:b0:4f:bf:fe:09:32:ab:7e:12:87:30:06:
d4:8a:41:18:bc:4d:c8:db:ad:81:09:6d:42:ba:9c:73:dd:0e:
5c:80:46:5e:c5:40:bf:ae:46:94:bd:a1:3c:37:58:5a:ca:ee:
c7:b1:b3:3d:89:f5:c1:b4:fb:4a:30:fb:95:9b:7c:aa:a2:31:
2c:bc:8f:4c:a6:2b:d6:fb:81:18:e3:57:ad:fc:96:5f:98:a1:
16:eb:55:a6:43:a0:7e:df:37:a2:60:59:ee:1f:9b:c7:80:73:
7f:86:fd:bb:43:36:c0:a9:b6:4e:23:bd:7c:94:2d:10:53:d4:
07:2a:bd:d3:4a:f4:7c:42:65:bb:32:2f:6b:2d:77:35:72:6c:
09:43:83:fb:76:17:23:1a:15:d8:db:32:c9:7e:7e:ef:57:2d:
f2:ee:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:46 2023 by rpki-client on console-fra.rpki-client.org