Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/rR6QH540zhs8c2-2Nt0FFR-_jTk.roa
File: rR6QH540zhs8c2-2Nt0FFR-_jTk.roa (raw, json)
Hash identifier: X1hLfyJzaJqmRphFhwJqHhfYXrKlSgKSJp2mhhUymxQ=
Subject key identifier: AD:1E:90:1F:9E:34:CE:1B:3C:73:6F:B6:36:DD:05:15:1F:BF:8D:39
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 0182C5514F6A4BFC83946C6DA49F3D6AA6BA
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/rR6QH540zhs8c2-2Nt0FFR-_jTk.roa
Signing time: Mon 22 Aug 2022 11:30:16 +0000
ROA not before: Mon 22 Aug 2022 11:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43128
IP address blocks: 212.44.112.0/24 maxlen: 24
212.44.113.0/24 maxlen: 24
212.44.118.0/24 maxlen: 24
212.44.120.0/24 maxlen: 24
212.44.119.0/24 maxlen: 24
212.44.126.0/23 maxlen: 24
146.247.24.0/22 maxlen: 24
185.148.72.0/22 maxlen: 24
212.44.96.0/20 maxlen: 24
2a02:ec::/32 maxlen: 48
2a02:e8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:51:4f:6a:4b:fc:83:94:6c:6d:a4:9f:3d:6a:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Aug 22 11:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad1e901f9e34ce1b3c736fb636dd05151fbf8d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:cd:5e:6a:69:f6:e2:e9:fd:48:52:20:a2:
9e:71:19:6a:ff:e7:7f:1c:0d:4b:e8:c3:0a:49:dc:
54:b1:a2:43:72:aa:f3:8d:e5:db:e7:70:06:f3:73:
c4:a9:62:33:44:7a:ea:3e:cc:1e:bd:19:bf:a7:95:
33:19:c5:48:12:4b:1f:77:f5:2f:4e:67:b0:c9:5b:
2d:ca:6c:cc:67:21:57:cc:95:e9:84:d9:df:99:ec:
f2:48:4b:de:9f:3b:64:31:85:ad:88:10:3e:db:61:
8e:00:bc:1b:d6:7c:4d:cf:34:90:7e:48:51:9b:10:
0d:56:71:5c:92:ca:d9:46:e9:d8:64:4c:c8:dc:23:
10:31:63:cb:34:25:15:57:72:94:a8:37:82:3b:62:
35:97:c4:df:81:0b:77:b7:fe:88:62:2d:57:aa:69:
d5:5b:19:32:08:ee:83:c0:5a:1a:70:3b:12:d2:86:
ed:1c:00:6e:bd:eb:0d:49:10:18:40:3c:84:d9:28:
e2:12:09:c1:38:f2:68:bc:5d:38:dc:29:21:59:3f:
77:b7:1e:de:2d:20:b4:c7:4d:cb:c7:34:0d:3d:b9:
0e:db:ae:e1:60:93:ec:b0:ce:45:79:bd:65:eb:83:
b1:3f:24:13:03:4f:f2:c7:ea:c5:64:50:3a:03:b1:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:90:1F:9E:34:CE:1B:3C:73:6F:B6:36:DD:05:15:1F:BF:8D:39
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/rR6QH540zhs8c2-2Nt0FFR-_jTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.24.0/22
185.148.72.0/22
212.44.96.0-212.44.113.255
212.44.118.0-212.44.120.255
212.44.126.0/23
IPv6:
2a02:e8::/32
2a02:ec::/32
Signature Algorithm: sha256WithRSAEncryption
a8:2b:c5:20:cf:5c:e7:03:1d:fc:19:24:2e:ef:ba:d4:db:ed:
35:f3:5b:a9:14:01:56:ca:27:ce:6f:84:2b:82:05:da:c5:14:
f8:48:4d:06:7e:65:0a:71:77:19:c4:61:a6:51:71:f3:5f:2e:
00:ee:fb:0e:eb:1e:96:37:e8:50:6e:9e:6d:ef:06:66:14:d8:
b8:26:75:30:79:32:f4:3f:6c:3e:52:5b:91:a7:b1:05:68:bf:
bb:5a:5e:bd:27:3c:ab:f6:a9:25:72:f6:a2:f5:d5:d9:1f:6e:
99:2e:ce:69:b1:10:c7:ac:a4:b2:ba:84:93:21:27:a4:4a:d0:
7f:73:a2:d1:b3:4b:91:e6:cb:1c:5c:38:00:2b:71:3b:4b:c8:
b1:52:13:70:e2:07:c9:57:8c:30:ea:d6:02:47:79:c9:e2:aa:
65:81:67:9a:ef:bd:60:a1:8e:2e:53:25:5f:95:29:09:cb:a1:
ab:ba:9b:4f:5b:ef:37:1d:10:96:9e:b7:32:de:ab:65:0b:99:
e5:cf:ed:8b:ed:26:4d:f5:f8:51:08:38:37:40:ee:88:01:9c:
10:aa:8f:ba:f5:ce:ff:0d:d7:ec:c8:47:ec:7e:18:d7:83:7a:
46:6f:a4:10:24:31:da:4e:d4:42:3b:75:56:d4:68:2b:77:62:
b4:c2:9c:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:41 2024 by rpki-client on console-fra.rpki-client.org