Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/6pVe12Iw7CJzENSz3t0_J9cVBZg.roa
File: 6pVe12Iw7CJzENSz3t0_J9cVBZg.roa (raw, json)
Hash identifier: EnChN/dtyhNyGUBVd2oOVzRDs+Axl0xv3zbdFouGmhs=
Subject key identifier: EA:95:5E:D7:62:30:EC:22:73:10:D4:B3:DE:DD:3F:27:D7:15:05:98
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 4D0047EC
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/6pVe12Iw7CJzENSz3t0_J9cVBZg.roa
Signing time: Sat 01 Jan 2022 15:56:15 +0000
ROA not before: Sat 01 Jan 2022 15:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31257
IP address blocks: 80.65.16.0/20 maxlen: 24
109.226.192.0/18 maxlen: 24
171.33.248.0/21 maxlen: 24
185.84.172.0/23 maxlen: 23
185.84.172.0/24 maxlen: 24
185.84.173.0/24 maxlen: 24
94.73.192.0/18 maxlen: 24
134.19.128.0/21 maxlen: 24
2a05:7400::/29 maxlen: 29
2a05:7400::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291864044 (0x4d0047ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jan 1 15:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea955ed76230ec227310d4b3dedd3f27d7150598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:f9:ab:54:3f:3d:00:e8:d6:f8:07:43:ab:
37:fb:f6:a1:7d:c5:37:4c:90:e1:00:37:4e:28:70:
0d:8e:fb:b6:fe:f3:f0:c9:a3:02:2e:3b:42:36:cf:
72:25:82:be:f4:3a:ac:a3:80:ce:19:e4:e0:f0:96:
ac:60:86:ac:a4:55:81:0d:58:67:fc:4e:fc:86:3e:
35:cc:8c:a5:ce:cf:1d:3f:a7:33:9a:2b:b8:f6:f1:
49:f8:94:91:a9:85:dd:fc:4d:31:aa:3e:e4:e0:c9:
86:82:35:bf:27:38:e2:e8:a7:37:28:fa:c6:ca:21:
19:06:41:ea:2a:25:49:1e:af:ae:a0:f5:d7:ae:fb:
80:6f:a3:2b:4a:3f:ff:fa:2f:4f:6e:cb:86:6f:45:
a2:86:25:6e:46:06:44:46:3e:18:2f:56:ef:b3:e3:
30:aa:88:22:dd:a2:82:19:28:8d:1b:2a:79:83:b5:
ae:0d:37:23:4c:ac:52:8f:6c:72:34:b1:92:2c:08:
47:ac:52:e5:e2:ab:08:80:6a:91:a0:97:66:9d:54:
f0:58:fa:8f:15:9d:f8:d1:d1:18:eb:06:0b:2b:ec:
ef:4e:9a:23:f0:aa:cc:a1:6d:ba:ba:14:f5:1c:e9:
6e:77:ee:f7:8b:95:11:49:01:fe:b9:67:a8:68:50:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:95:5E:D7:62:30:EC:22:73:10:D4:B3:DE:DD:3F:27:D7:15:05:98
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/6pVe12Iw7CJzENSz3t0_J9cVBZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.16.0/20
94.73.192.0/18
109.226.192.0/18
134.19.128.0/21
171.33.248.0/21
185.84.172.0/23
IPv6:
2a05:7400::/29
Signature Algorithm: sha256WithRSAEncryption
2b:f6:51:71:29:6e:eb:4b:1b:be:e2:b7:16:1f:1c:8b:d0:d5:
ea:f0:18:4f:6f:f0:fb:48:2a:aa:d9:dd:36:3b:1d:16:86:67:
dc:13:c3:be:5a:bd:b3:6d:e4:1f:a9:a4:57:60:91:1a:b6:fb:
80:3c:2c:75:0d:50:de:9c:75:c6:98:43:c3:8f:9b:b8:05:4f:
68:ef:a8:7b:71:8b:41:45:f4:d2:e4:4d:3c:58:87:8a:a5:79:
3e:47:1f:cf:f1:cf:86:e0:41:35:b7:4a:ee:80:ac:aa:11:fe:
dd:bd:ee:ab:34:7a:92:78:e9:6b:33:7e:82:01:7f:ba:dd:0a:
27:0c:89:0a:c4:98:78:ab:a5:82:17:9a:2e:f8:62:c7:af:f3:
d5:01:13:b1:5d:43:f9:b2:07:42:33:fa:d5:0c:a2:27:a9:14:
27:ae:aa:e3:db:85:ee:fa:f1:09:e0:82:26:f4:37:e3:c8:09:
88:07:01:88:da:bf:00:01:ab:23:84:00:df:1a:11:4d:7f:aa:
ca:6f:c5:5b:2b:55:d1:ea:76:74:27:e4:67:8c:eb:14:9b:48:
f6:09:91:67:e5:78:13:0b:d6:84:e6:d0:ab:44:6f:f1:6e:ac:
49:79:8e:3e:60:4e:62:99:0d:29:93:20:13:4e:cb:73:45:75:
56:9b:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:18 2024 by rpki-client on console-ams.rpki-client.org