Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1BRmSGVenql7Wgd5F1xSz3oM2qI.roa
File: 1BRmSGVenql7Wgd5F1xSz3oM2qI.roa (raw, json)
Hash identifier: +ytTcDUd9S5hUlgHiGnW8HxBqUxphaED3yN8U5Vmfps=
Subject key identifier: D4:14:66:48:65:5E:9E:A9:7B:5A:07:79:17:5C:52:CF:7A:0C:DA:A2
Certificate issuer: /CN=d4ec0ed237dc07c25167867355454116eece927e
Certificate serial: 02AD2D84
Authority key identifier: D4:EC:0E:D2:37:DC:07:C2:51:67:86:73:55:45:41:16:EE:CE:92:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1BRmSGVenql7Wgd5F1xSz3oM2qI.roa
Signing time: Sat 01 Jan 2022 13:02:08 +0000
ROA not before: Sat 01 Jan 2022 13:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199736
IP address blocks: 5.183.220.0/22 maxlen: 22
195.211.168.0/22 maxlen: 22
185.87.188.0/22 maxlen: 22
185.219.136.0/22 maxlen: 22
185.38.128.0/22 maxlen: 22
2a00:fde0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44903812 (0x2ad2d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ec0ed237dc07c25167867355454116eece927e
Validity
Not Before: Jan 1 13:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4146648655e9ea97b5a0779175c52cf7a0cdaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:24:a3:9a:5f:95:51:bc:27:ab:45:c5:91:
4c:6a:ce:6e:ae:18:db:e0:53:07:37:e8:dd:d9:08:
ca:99:f2:ae:11:e1:2a:0c:11:4d:8d:96:19:b5:2f:
6c:61:55:e8:52:b8:ac:de:7f:fa:95:dc:d5:31:0b:
d6:41:d4:0b:15:51:90:56:f7:0d:ee:ae:08:0e:83:
7c:af:1c:c2:91:d6:18:eb:bc:c8:89:16:94:84:a2:
e7:ff:0e:af:b5:2f:cb:c6:5d:a8:80:c1:39:5c:e4:
8b:f4:0f:2d:de:49:be:61:fa:b0:70:dc:25:41:20:
9e:83:ac:d7:e3:5e:51:a8:a4:7c:99:a1:fc:9d:61:
be:67:f3:1a:3a:09:29:41:a7:6e:3b:94:b3:b3:ee:
8c:17:24:ab:2b:65:19:23:2a:fa:a6:16:45:ce:5a:
cc:00:ea:88:f7:25:0e:6e:72:32:2d:d0:34:ef:4c:
66:fc:b4:74:90:27:07:77:b5:cd:d7:91:ab:13:28:
69:1c:fb:7e:64:86:78:2a:f1:ee:fa:14:46:b5:a0:
f5:ca:3e:9e:76:9e:b7:39:fc:d0:ce:36:0e:b2:b1:
47:6c:81:76:1a:7f:63:5e:4e:44:3b:5d:4a:9f:f8:
94:31:54:9a:57:23:fa:f3:aa:a3:d2:22:e4:c9:0c:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:66:48:65:5E:9E:A9:7B:5A:07:79:17:5C:52:CF:7A:0C:DA:A2
X509v3 Authority Key Identifier:
keyid:D4:EC:0E:D2:37:DC:07:C2:51:67:86:73:55:45:41:16:EE:CE:92:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1BRmSGVenql7Wgd5F1xSz3oM2qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.220.0/22
185.38.128.0/22
185.87.188.0/22
185.219.136.0/22
195.211.168.0/22
IPv6:
2a00:fde0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:6e:86:d2:d9:19:75:16:ce:7b:58:32:ae:dc:bc:28:1b:8f:
1a:cc:a3:5c:19:32:2c:4e:2e:68:cf:0f:99:24:da:3d:12:c7:
aa:d5:19:13:84:f9:db:9d:46:e7:9c:20:83:df:45:b0:f2:2d:
cc:bb:18:eb:bf:20:f3:9a:0a:42:f8:3a:f4:bd:74:52:9e:c3:
85:c5:ea:b9:bc:f8:fa:e2:39:95:a3:5b:ee:e4:46:1a:1e:01:
87:ba:c4:aa:08:1b:21:26:fb:32:26:1b:63:40:c0:f3:87:94:
e8:64:67:8e:fe:84:0b:71:46:49:fd:aa:10:ab:2f:34:24:31:
13:39:5a:78:18:f1:45:ef:64:55:98:21:d0:c4:a8:b1:54:bd:
ed:6f:ea:76:2f:ce:48:1b:5f:5c:69:75:22:81:73:0e:22:77:
96:5d:82:5b:07:94:a9:50:b0:5a:f0:b5:71:37:8f:17:2e:4f:
7f:80:7c:0f:25:98:2c:03:6e:cc:8b:87:c1:f2:d2:93:6e:1b:
b6:72:67:47:4e:aa:fc:ec:75:fa:bc:6c:36:29:0b:23:ef:4b:
ec:73:8b:8b:c9:09:39:19:e8:16:0b:7f:ad:f3:7c:6b:93:7d:
4e:03:d5:cf:38:49:8b:72:a3:61:54:ff:55:50:77:10:d1:1a:
98:93:de:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-fra.rpki-client.org