Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/E91F6bE56R0nKKNyfLkFTqGUoks.roa
File: E91F6bE56R0nKKNyfLkFTqGUoks.roa (raw, json)
Hash identifier: nRGKPTHOurZV96pL6k9lgeb67J5uFh1wFxmW9O3tLSM=
Subject key identifier: 13:DD:45:E9:B1:39:E9:1D:27:28:A3:72:7C:B9:05:4E:A1:94:A2:4B
Certificate issuer: /CN=966b05c661c76a5bcc48da838eedb6973f153b86
Certificate serial: 087728BB
Authority key identifier: 96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/E91F6bE56R0nKKNyfLkFTqGUoks.roa
Signing time: Sat 01 Jan 2022 09:57:37 +0000
ROA not before: Sat 01 Jan 2022 09:57:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206316
IP address blocks: 195.242.177.0/24 maxlen: 24
195.242.178.0/24 maxlen: 24
5.183.97.0/24 maxlen: 24
5.183.98.0/24 maxlen: 24
5.183.96.0/22 maxlen: 22
5.183.96.0/24 maxlen: 24
5.183.99.0/24 maxlen: 24
195.238.248.0/24 maxlen: 24
195.238.252.0/24 maxlen: 24
185.219.130.0/24 maxlen: 24
185.219.131.0/24 maxlen: 24
185.219.128.0/22 maxlen: 22
185.219.129.0/24 maxlen: 24
185.219.128.0/24 maxlen: 24
2a0e:bc04::/30 maxlen: 64
2a0b:e640::/30 maxlen: 64
2a0e:bc00::/30 maxlen: 64
2a0b:e640:1::/48 maxlen: 64
2a0b:e644::/30 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142026939 (0x87728bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966b05c661c76a5bcc48da838eedb6973f153b86
Validity
Not Before: Jan 1 09:57:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13dd45e9b139e91d2728a3727cb9054ea194a24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:82:01:5e:5b:81:a3:83:79:0a:11:dc:28:
60:13:4a:e1:fd:b0:50:21:c8:45:e6:0b:f7:7f:6e:
4a:26:e0:9f:2e:c0:ee:50:5d:cb:dd:18:46:c8:e6:
15:fa:b7:e0:f0:a2:c0:f2:38:62:87:28:a8:fe:db:
51:41:94:e8:0a:5c:34:5c:91:f4:17:cc:8e:36:6e:
a9:c6:75:ee:58:de:56:9d:9c:b1:c6:c9:6f:91:c2:
35:24:00:d9:33:15:8a:a5:4e:a7:e2:cb:6f:48:1c:
1e:f3:a9:24:24:4f:15:88:f5:ba:3f:b2:14:d6:c4:
f6:38:01:41:f6:65:a0:75:9d:32:4f:3f:26:52:6d:
3b:ec:76:89:22:ed:17:53:ae:5b:10:88:c1:34:ca:
c0:61:9d:b3:6f:a4:e8:fa:a4:f2:c8:10:ee:97:de:
e1:b5:7b:92:29:78:95:2c:23:38:ad:55:40:75:9b:
16:a6:d0:53:ad:c2:c5:c1:d7:a4:0d:c7:7c:03:53:
e0:3e:c5:2f:db:0c:fc:e4:f6:0f:bd:99:83:65:c2:
42:d7:3d:59:0f:c1:27:ce:5e:28:7a:65:3d:79:e1:
fb:77:a5:45:89:79:0e:63:f9:85:58:3d:df:28:55:
cb:51:e7:88:e8:f1:81:40:d5:b3:77:57:29:d9:3d:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:45:E9:B1:39:E9:1D:27:28:A3:72:7C:B9:05:4E:A1:94:A2:4B
X509v3 Authority Key Identifier:
keyid:96:6B:05:C6:61:C7:6A:5B:CC:48:DA:83:8E:ED:B6:97:3F:15:3B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmsFxmHHalvMSNqDju22lz8VO4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/E91F6bE56R0nKKNyfLkFTqGUoks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6891df-971e-4e60-8cbc-e3c2f32cf3b7/1/lmsFxmHHalvMSNqDju22lz8VO4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.96.0/22
185.219.128.0/22
195.238.248.0/24
195.238.252.0/24
195.242.177.0-195.242.178.255
IPv6:
2a0b:e640::/29
2a0e:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
ac:9f:dc:01:c4:8e:6f:cd:c3:30:f7:69:6e:5b:60:cd:06:af:
71:f8:47:da:8d:ea:68:4a:f9:8e:f6:37:92:29:91:ec:66:c8:
28:bf:04:86:67:7d:30:34:79:93:9b:05:24:bc:8f:9e:75:6a:
e0:f1:1b:08:50:1b:c8:65:01:7c:4a:49:6f:89:36:9f:31:4e:
c3:f7:91:b9:9e:ed:54:f3:78:06:81:4e:ff:66:a8:3f:3f:42:
9b:1c:e0:95:ce:67:f2:c7:5f:61:d6:26:88:36:ea:88:e1:ba:
a6:a8:fa:3b:fb:2e:34:2f:1a:23:43:bb:fd:62:ac:7c:15:3f:
44:fe:ad:8d:ab:0b:f3:69:4b:7d:17:69:57:5b:d0:d5:e8:ee:
4a:70:9a:a2:fa:58:b5:76:4b:93:65:0c:75:70:d4:dc:04:62:
78:66:ae:77:2d:7c:e4:f2:07:43:5e:64:b1:66:d9:19:57:74:
60:e9:8e:c1:d0:ba:2a:f3:3a:2c:8e:0d:c2:0a:15:95:61:0e:
bb:8b:97:09:73:8e:86:0b:3b:6a:b4:c6:9b:5e:49:09:b6:e6:
8c:fc:ca:de:51:14:1a:6a:e9:83:b2:83:9b:cd:4f:6b:67:7e:
54:04:d1:d5:2b:7c:47:06:e1:f6:9d:35:ce:a7:0d:be:29:47:
8d:49:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:22 2024 by rpki-client on console-ams.rpki-client.org