Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/SXskDofaJIoGFcU0x7nBUUthiP0.roa
File: SXskDofaJIoGFcU0x7nBUUthiP0.roa (raw, json)
Hash identifier: RSAsqnf7gBTYpGan3WxVfs9EOWaKSV6vWHldnG5+cNI=
Subject key identifier: 49:7B:24:0E:87:DA:24:8A:06:15:C5:34:C7:B9:C1:51:4B:61:88:FD
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 16168A39
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/SXskDofaJIoGFcU0x7nBUUthiP0.roa
Signing time: Sat 01 Jan 2022 10:58:13 +0000
ROA not before: Sat 01 Jan 2022 10:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201838
IP address blocks: 89.45.176.0/20 maxlen: 20
89.36.112.0/20 maxlen: 20
188.212.122.0/23 maxlen: 23
93.113.26.0/23 maxlen: 23
188.215.16.0/23 maxlen: 23
79.171.154.0/23 maxlen: 23
79.171.153.0/24 maxlen: 24
79.171.156.0/22 maxlen: 22
94.177.138.0/23 maxlen: 23
147.12.128.0/17 maxlen: 17
46.102.171.0/24 maxlen: 24
46.102.170.0/24 maxlen: 24
46.102.170.0/23 maxlen: 23
94.176.208.0/23 maxlen: 23
185.59.124.0/22 maxlen: 22
212.132.192.0/18 maxlen: 18
188.215.74.0/23 maxlen: 23
188.241.106.0/23 maxlen: 23
94.247.86.0/23 maxlen: 23
2a02:6b60::/28 maxlen: 28
2a02:6b60::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370575929 (0x16168a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Jan 1 10:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=497b240e87da248a0615c534c7b9c1514b6188fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:17:f3:38:f7:66:d5:b7:98:49:9c:8e:13:
08:67:c7:89:58:06:8d:51:6a:44:c5:1b:ce:a2:df:
a9:e0:8e:39:34:0d:2b:5c:d4:f9:a0:fc:59:50:a0:
bd:8e:a1:c5:46:e1:e4:93:9a:01:62:60:0c:99:bf:
fb:0c:19:6a:78:b6:90:d4:ec:3f:45:18:82:03:e2:
1b:bb:b0:79:26:88:60:82:e7:41:6f:e2:80:d1:21:
40:01:0b:92:48:3f:04:be:37:29:8c:42:28:31:8a:
2e:79:bb:f1:d9:6b:2c:33:74:ba:f1:a6:51:98:8c:
73:59:e6:1c:c8:f4:85:98:47:e8:b0:ea:ae:d6:fa:
b6:2d:2d:a1:c4:64:ff:b5:4b:6b:33:73:71:08:8e:
e2:23:e0:03:8b:ab:ac:df:5f:8c:91:91:91:3e:58:
53:41:b3:fe:8c:cd:c9:1b:97:cf:c8:ff:f4:88:35:
aa:0d:a8:06:7b:63:8b:42:01:44:fa:28:4e:32:d9:
f9:af:e8:83:1f:36:ce:c9:1f:6e:5f:ba:82:92:2a:
d0:af:89:93:df:6d:37:ad:27:9e:7c:cc:7e:28:0c:
33:c3:f1:d5:54:7e:11:7c:03:d9:a7:d9:2e:ed:dd:
ab:0d:e8:e1:1f:37:54:10:7b:a3:58:ac:d3:c3:fd:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:24:0E:87:DA:24:8A:06:15:C5:34:C7:B9:C1:51:4B:61:88:FD
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/SXskDofaJIoGFcU0x7nBUUthiP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.170.0/23
79.171.153.0-79.171.159.255
89.36.112.0/20
89.45.176.0/20
93.113.26.0/23
94.176.208.0/23
94.177.138.0/23
94.247.86.0/23
147.12.128.0/17
185.59.124.0/22
188.212.122.0/23
188.215.16.0/23
188.215.74.0/23
188.241.106.0/23
212.132.192.0/18
IPv6:
2a02:6b60::/28
Signature Algorithm: sha256WithRSAEncryption
38:6f:fa:54:f9:a7:b1:9c:5a:66:8b:b8:27:0c:ed:03:e8:3e:
47:1a:31:02:c5:bb:85:9a:07:a4:df:54:90:38:06:78:e8:48:
ea:eb:db:c5:85:50:6b:f7:fa:79:d2:14:e6:78:7e:66:a6:40:
ac:01:90:f7:78:7b:66:c2:a5:b9:15:68:aa:46:83:70:f2:df:
4c:fc:6c:1e:06:b4:93:fb:64:95:bb:92:2a:52:34:2d:9a:cc:
99:ce:56:11:d4:41:0e:38:54:22:f5:7c:d6:14:05:f7:bf:45:
2b:d2:7f:cf:78:c3:82:f0:28:b4:ac:ec:c8:40:56:1f:08:1a:
9e:cc:22:f5:13:80:33:9f:20:8a:be:15:35:bc:a3:65:2a:8b:
4d:92:42:3f:0b:5f:09:e8:35:4a:5c:74:52:7c:88:d4:93:56:
a4:9f:a8:15:5b:92:f5:b2:f5:7a:35:4b:16:e8:e8:86:b1:57:
a2:b1:35:ba:e2:43:94:41:cf:29:85:27:7b:19:7f:0d:11:64:
5e:9a:f0:f4:9e:a5:67:4b:68:df:25:c8:eb:d0:f7:c9:e5:9f:
77:6e:0f:4e:be:52:da:1d:6f:7d:05:8d:6c:a0:32:83:55:90:
6a:cb:a1:0c:68:e7:7e:43:b3:da:27:c5:40:52:2a:1a:07:36:
bc:44:52:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:41 2024 by rpki-client on console-fra.rpki-client.org