Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/E8Ne2LfJ0TtI2iV2jK6wTsqxO7Y.roa
File: E8Ne2LfJ0TtI2iV2jK6wTsqxO7Y.roa (raw, json)
Hash identifier: PVdnEmibYB7GOBWRcEc1nsMROTDVZgvHI9/wFvxtarc=
Subject key identifier: 13:C3:5E:D8:B7:C9:D1:3B:48:DA:25:76:8C:AE:B0:4E:CA:B1:3B:B6
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 0D0E5C71
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/E8Ne2LfJ0TtI2iV2jK6wTsqxO7Y.roa
Signing time: Sat 01 Jan 2022 12:03:41 +0000
ROA not before: Sat 01 Jan 2022 12:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1741
IP address blocks: 195.148.0.0/16 maxlen: 16
86.50.0.0/16 maxlen: 16
185.229.128.0/22 maxlen: 22
193.166.4.0/24 maxlen: 24
128.214.0.0/16 maxlen: 16
193.166.0.0/15 maxlen: 15
2001:708::/32 maxlen: 32
2001:708:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219044977 (0xd0e5c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Jan 1 12:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13c35ed8b7c9d13b48da25768caeb04ecab13bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:d7:7a:70:06:85:82:e0:a9:d1:41:a2:a4:
5a:c0:4d:28:23:9f:dd:42:15:bb:75:7c:eb:6e:95:
a9:18:93:b3:68:a5:f9:66:1c:5f:a1:cb:a6:16:e2:
64:45:07:cd:cc:bf:6a:e2:95:6e:f0:13:2e:78:86:
1b:a7:11:89:7a:ab:c4:77:a0:b6:0c:75:9f:91:ad:
63:34:82:7f:66:f8:fc:5a:1d:b6:47:6e:40:4e:c4:
17:eb:15:cc:ee:70:5b:9d:ad:f4:cc:5b:a5:b4:be:
1d:76:3a:08:29:47:d3:58:04:95:de:32:19:4e:e6:
a9:d0:d7:5d:03:f0:ba:19:ee:73:ad:08:78:54:8d:
27:dd:7b:2d:28:65:63:93:48:2d:ef:a7:dc:23:e2:
0b:58:0a:6c:bd:54:d0:02:d3:c6:46:dd:0c:9c:f8:
2f:1b:1c:d8:87:29:d4:95:f4:f8:2b:37:22:dc:40:
e6:46:21:ff:c9:a7:fe:9c:15:ad:4f:90:3e:da:d0:
69:fd:5c:a2:3b:d9:ed:5e:c2:d3:a4:13:6d:bb:a4:
fb:32:05:ba:22:6a:f2:7c:88:af:f1:ec:21:9b:62:
4e:13:2a:55:27:4d:16:ff:a2:64:7d:2d:1c:5f:67:
d2:06:8f:ac:f2:74:c8:69:e2:69:e3:db:49:ea:0b:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:5E:D8:B7:C9:D1:3B:48:DA:25:76:8C:AE:B0:4E:CA:B1:3B:B6
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/E8Ne2LfJ0TtI2iV2jK6wTsqxO7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.50.0.0/16
128.214.0.0/16
185.229.128.0/22
193.166.0.0/15
195.148.0.0/16
IPv6:
2001:708::/32
Signature Algorithm: sha256WithRSAEncryption
13:11:68:18:a5:10:49:e7:05:d0:c1:10:e8:14:9e:88:fa:f0:
73:94:c4:21:3b:68:4d:0e:4e:14:e0:b5:ca:be:dd:84:de:a2:
11:8a:c2:46:29:5f:64:70:8e:00:f1:81:26:19:d0:f7:7f:34:
a0:16:77:3d:73:86:21:9b:75:7b:7d:f7:bb:b3:99:ae:a2:a5:
05:3a:53:a2:00:72:4f:41:bd:d1:50:49:c0:79:b0:2e:95:82:
42:70:04:2d:ef:63:24:05:9f:13:58:3e:d4:54:be:bc:60:12:
7d:49:8c:95:04:21:79:28:cd:c0:2a:38:fd:db:1b:8c:ef:2d:
5a:a5:78:ae:bd:4b:a7:21:89:4d:c0:ff:d5:dd:e9:d9:55:44:
db:ac:ae:4f:96:56:90:78:a4:f0:3d:cf:c3:d0:11:c9:ad:2f:
0b:84:6d:21:21:3c:82:0a:8e:5d:7b:bd:85:06:36:30:63:a1:
40:2f:bc:ad:f4:74:28:ba:b9:de:ff:0d:26:7f:95:1f:6e:c9:
19:d7:18:e4:b7:80:e5:67:08:37:fd:2b:61:ad:86:45:70:e0:
be:e7:8e:59:a5:b4:0d:86:49:e1:13:ab:97:87:4b:90:54:40:
4a:0e:2e:63:a5:80:0f:da:ae:40:14:eb:f1:56:41:87:be:34:
62:61:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org