Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/eBOoSQHLXg_JYysxufowRAGBMQc.roa
File: eBOoSQHLXg_JYysxufowRAGBMQc.roa (raw, json)
Hash identifier: FCa2WAF7MfZWRJAsiOAqnu9xKE1RnHVZ8KITWpcJCdM=
Subject key identifier: 78:13:A8:49:01:CB:5E:0F:C9:63:2B:31:B9:FA:30:44:01:81:31:07
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 0184E7CFB74162C9655D661B8172E5205290
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/eBOoSQHLXg_JYysxufowRAGBMQc.roa
Signing time: Tue 06 Dec 2022 14:21:00 +0000
ROA not before: Tue 06 Dec 2022 14:21:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13172
IP address blocks: 195.225.127.0/24 maxlen: 24
91.211.232.0/24 maxlen: 24
185.108.188.0/24 maxlen: 24
91.211.235.0/24 maxlen: 24
91.211.234.0/24 maxlen: 24
2a03:d180::/32 maxlen: 32
2a03:d180:fffe::/48 maxlen: 48
2a03:d180:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:cf:b7:41:62:c9:65:5d:66:1b:81:72:e5:20:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Dec 6 14:21:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7813a84901cb5e0fc9632b31b9fa304401813107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:7d:7b:66:9a:a6:72:26:5a:57:aa:74:08:
1b:cf:0e:a3:d7:45:80:51:29:22:1b:db:75:36:49:
3a:17:82:97:2c:f4:2a:55:ab:72:16:51:5a:24:9d:
29:bd:ba:97:81:1d:ef:12:bb:4a:88:ca:7a:ad:4b:
11:63:b5:ff:0d:b5:e1:4a:13:b3:60:c8:7c:4e:07:
61:3f:87:42:f2:c1:b6:7a:27:09:37:f2:98:cb:9b:
07:68:b0:5f:e1:fd:ed:7c:7d:5d:f6:f7:f6:bc:85:
8f:b9:51:5f:bc:1f:dd:b1:3d:9d:ff:6f:28:d6:94:
de:58:3f:08:76:f8:d8:34:7f:87:7e:95:2d:d1:e2:
59:a5:8b:af:23:b1:7f:b1:39:8a:72:7e:a0:e9:a0:
24:f9:a5:7c:d8:7c:4c:ff:62:10:fc:36:d8:fc:52:
5a:25:47:e9:d1:73:68:ff:0c:85:75:7e:aa:9e:c7:
ed:e5:72:80:8b:ae:90:80:47:c1:d9:36:95:2f:c4:
b0:a8:1e:0b:cd:f6:d8:ff:51:45:86:1e:4c:a7:b2:
36:56:16:ec:64:fb:f3:fa:bb:2a:d7:c3:64:cc:2f:
81:c1:d5:4a:19:92:b1:19:df:a8:78:a3:25:36:ae:
ce:7c:e4:4b:09:c5:1e:51:df:87:9f:54:5a:ca:0e:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:A8:49:01:CB:5E:0F:C9:63:2B:31:B9:FA:30:44:01:81:31:07
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/eBOoSQHLXg_JYysxufowRAGBMQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.232.0/24
91.211.234.0/23
185.108.188.0/24
195.225.127.0/24
IPv6:
2a03:d180::/32
Signature Algorithm: sha256WithRSAEncryption
50:a2:01:36:66:ae:37:ff:eb:ff:c8:49:d4:23:c4:ae:71:a1:
91:5e:b2:db:98:ea:3d:a8:2c:62:69:51:ba:b0:c4:97:2e:14:
76:20:40:4e:4b:a9:fb:53:d5:3b:00:df:6c:55:8a:14:53:2f:
79:fd:55:dd:d7:11:95:be:c2:9d:16:5a:3a:a5:89:2b:5d:90:
1f:12:7a:e2:c2:97:45:db:63:9f:88:a7:ad:4c:be:8b:9b:ef:
e7:e8:1c:b6:16:c4:f8:f5:d3:a9:fd:05:3d:89:91:ae:04:5a:
24:06:c2:d2:bd:d2:2d:f8:eb:25:15:4a:fa:15:da:b5:ee:ef:
57:1d:c7:72:e6:b1:93:b9:05:f4:d4:88:3f:e9:1e:1b:4a:8b:
0c:90:51:ba:31:8a:58:0c:08:ad:74:28:92:ac:6d:88:59:94:
7b:5b:46:90:6c:3b:c0:e2:13:c9:dc:b8:e6:2d:ee:c7:2c:7e:
67:eb:a9:16:80:66:b5:c3:98:d6:88:5e:3b:35:44:d8:c8:12:
ec:5e:a2:36:e0:84:8d:78:4d:1f:1e:4a:3c:6a:a3:a7:b9:49:
a0:cf:52:9e:2b:6c:90:20:10:ae:14:24:a1:36:43:d2:4f:a0:
e6:27:7c:ed:86:83:9c:18:46:03:12:a3:e6:53:9e:2f:61:f0:
6d:8b:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:20 2024 by rpki-client on console-ams.rpki-client.org