Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/7nLXIdPoV26Mq5X8dWevApH4HuY.roa
File: 7nLXIdPoV26Mq5X8dWevApH4HuY.roa (raw, json)
Hash identifier: 8q2LGx/w778B1UmBocWXmggWk/2o9WawxpEeQ3dJYMQ=
Subject key identifier: EE:72:D7:21:D3:E8:57:6E:8C:AB:95:FC:75:67:AF:02:91:F8:1E:E6
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 1BD0AC4B
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/7nLXIdPoV26Mq5X8dWevApH4HuY.roa
Signing time: Sat 01 Jan 2022 06:03:24 +0000
ROA not before: Sat 01 Jan 2022 06:03:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 185.235.148.0/22 maxlen: 22
81.223.0.0/16 maxlen: 17
85.124.0.0/14 maxlen: 15
213.229.0.0/18 maxlen: 19
83.64.0.0/15 maxlen: 16
195.58.160.0/19 maxlen: 20
62.99.128.0/17 maxlen: 18
91.118.0.0/15 maxlen: 16
212.41.224.0/19 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466660427 (0x1bd0ac4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jan 1 06:03:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee72d721d3e8576e8cab95fc7567af0291f81ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:bf:57:be:0d:2d:5f:e3:b8:0a:4e:da:51:
b8:66:57:50:dd:1a:a6:e6:e6:bf:1d:a7:18:ea:06:
e4:65:c7:9e:15:44:b9:7b:14:c5:d9:7a:9b:41:c2:
a3:22:88:81:5c:5d:49:ad:a2:75:56:18:6e:4f:ac:
2e:0c:ad:51:8a:46:8b:01:3e:71:17:77:d6:a3:08:
da:d9:47:f0:51:ef:a4:28:cd:06:29:4f:e8:6f:f4:
28:24:30:e4:35:12:72:85:43:79:36:57:34:9d:bd:
72:0b:bb:4c:96:2f:1e:fb:ca:1d:0f:da:f6:76:a4:
a9:a3:db:95:0e:80:81:ad:4d:6c:7b:4a:75:ad:95:
ca:2f:26:6e:18:27:47:42:63:57:85:c2:c3:2e:73:
c8:72:72:cb:92:29:1f:7e:6b:7f:2d:8c:cb:cf:87:
e7:e7:f4:84:6f:a2:79:8d:3c:05:5a:98:e0:45:a7:
1d:3c:78:c7:1c:74:44:6a:14:30:19:47:69:cd:07:
ae:d3:ed:1a:ec:da:7c:d2:b8:f9:b9:70:ce:59:e4:
2a:d3:ac:53:c1:22:e2:d5:83:a4:8f:61:dc:84:8a:
72:27:ec:34:0f:84:4d:97:95:1a:b5:8f:5d:35:71:
81:8b:b4:b7:62:87:3e:1f:95:bc:63:49:16:04:5f:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:D7:21:D3:E8:57:6E:8C:AB:95:FC:75:67:AF:02:91:F8:1E:E6
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/7nLXIdPoV26Mq5X8dWevApH4HuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.99.128.0/17
81.223.0.0/16
83.64.0.0/15
85.124.0.0/14
91.118.0.0/15
185.235.148.0/22
195.58.160.0/19
212.41.224.0/19
213.229.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:5e:aa:7f:71:bc:48:be:4f:0e:c1:e3:45:b9:49:9e:e8:9c:
f1:c5:52:82:07:09:0b:e8:df:a9:95:e2:81:c2:f2:b8:9e:ce:
f1:1e:8b:f4:af:29:e0:3e:d1:0a:15:f3:90:fb:cf:4e:f1:67:
7c:de:f6:f0:68:d8:68:1b:ad:a1:67:6e:0b:7b:07:0c:29:00:
27:88:4f:db:d0:b3:bc:68:60:00:63:ff:58:7c:46:14:54:8c:
70:bc:84:c9:42:a7:c2:e2:f6:21:b6:00:73:01:e7:74:3d:a6:
fc:a3:c0:3b:e7:76:a9:02:31:1d:d9:92:c7:fd:06:15:f9:81:
b5:19:99:81:9a:eb:dc:12:03:fb:fd:9b:02:53:46:a3:d0:01:
cb:aa:24:e5:ce:a3:8b:23:08:08:b3:b3:a0:80:d2:fa:00:af:
e2:33:e2:ee:8d:ce:a4:6d:4a:d8:25:9d:32:28:31:db:f5:4d:
82:f7:ea:59:79:2e:bc:86:33:ed:bd:53:1c:3e:e4:e3:d8:a7:
50:f7:a9:21:07:b1:45:77:fc:c7:a0:8a:3e:d7:57:86:83:8c:
71:f9:99:26:a8:f8:7c:0c:27:aa:80:5d:1c:7a:b5:4c:63:93:
c5:27:53:95:4b:12:ca:79:39:9f:f8:c1:bf:7c:5f:fe:26:41:
eb:42:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org