Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/SgpyeY7vBUEAGJd3MCnw1wi4Q6Y.roa
File: SgpyeY7vBUEAGJd3MCnw1wi4Q6Y.roa (raw, json)
Hash identifier: 4IvW91Eh8jl++/zE0afj3PJVgUEYSSV3ATKqvyLHz5M=
Subject key identifier: 4A:0A:72:79:8E:EF:05:41:00:18:97:77:30:29:F0:D7:08:B8:43:A6
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 0184789B71B4763D6E994C4C402243142E62
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/SgpyeY7vBUEAGJd3MCnw1wi4Q6Y.roa
Signing time: Tue 15 Nov 2022 00:06:03 +0000
ROA not before: Tue 15 Nov 2022 00:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51661
IP address blocks: 94.124.106.192/29 maxlen: 29
185.160.20.0/24 maxlen: 24
185.160.23.0/24 maxlen: 24
185.160.21.0/24 maxlen: 24
2a02:1d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:9b:71:b4:76:3d:6e:99:4c:4c:40:22:43:14:2e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Nov 15 00:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a0a72798eef0541001897773029f0d708b843a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:27:bd:91:5b:df:33:84:33:3d:c2:51:06:
3b:c8:e0:43:d9:3e:e8:6c:99:d5:d8:f8:28:70:03:
ed:60:87:cd:2c:22:22:77:34:a4:2e:b4:46:46:d4:
68:83:6e:47:43:99:1f:e4:83:a9:1e:3c:01:ef:21:
f1:06:f7:af:f1:54:8c:da:d4:7f:31:94:a2:5d:e0:
6d:f3:24:6a:2e:30:c1:66:85:20:7c:58:e9:f4:97:
f6:56:25:52:31:64:e7:7f:f5:e4:7b:7f:85:96:a2:
2f:b8:d7:14:66:d1:b5:f6:a1:aa:92:4a:e6:67:d3:
1a:28:8a:e1:18:0a:4f:1b:4c:ac:79:26:d1:f8:f8:
95:0b:8c:1c:5b:d8:2e:d6:21:d4:dd:c3:8e:7f:cb:
56:69:c4:ff:8b:42:0c:4d:fd:2b:13:7c:0c:11:4c:
5c:d0:40:bc:4b:b5:f6:29:9e:ce:db:55:c2:9c:68:
6d:ac:a3:4f:f9:42:a3:b9:92:ee:0a:38:e0:58:b0:
ef:2d:f9:d0:8f:d6:7b:66:ed:b5:f2:07:08:c7:bb:
2b:5d:04:20:fa:28:6f:df:01:bf:f0:2c:37:a8:da:
7f:e5:c6:f3:06:5b:fd:27:84:e0:a3:c0:20:bd:8a:
b5:d9:99:10:95:2c:95:75:5f:5f:74:56:88:3e:06:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0A:72:79:8E:EF:05:41:00:18:97:77:30:29:F0:D7:08:B8:43:A6
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/SgpyeY7vBUEAGJd3MCnw1wi4Q6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.106.192/29
185.160.20.0/23
185.160.23.0/24
IPv6:
2a02:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:d6:9b:01:a0:d6:98:f4:df:5c:c9:e6:1f:24:9a:51:d8:dc:
ee:38:d7:7d:95:11:11:26:b6:41:b8:8e:f7:e4:e7:33:df:c1:
bd:9b:3f:13:e2:8b:36:83:7f:f0:82:a2:62:ef:79:00:70:d9:
cf:6b:fd:d2:71:30:60:ad:59:53:3a:12:28:eb:84:2e:9c:25:
5d:65:f4:a6:df:f5:ba:40:90:a8:46:11:65:a2:ef:93:99:d2:
51:5c:af:a0:38:a4:58:96:bc:d6:6c:46:e7:a0:30:68:42:c4:
3b:b7:00:b4:70:fc:26:3b:6c:9d:d9:09:f9:0d:89:a1:e9:73:
62:8d:8b:dc:02:25:76:13:19:b0:89:59:70:84:5c:4f:3f:d7:
56:08:0f:0d:7f:5b:59:f0:b4:80:27:75:a6:fa:79:f6:05:ed:
26:36:ab:fb:04:31:0f:44:47:d0:da:2f:1e:c0:fe:59:42:77:
0c:6e:d7:ea:90:35:64:07:a6:64:11:d9:60:6d:18:3c:43:e6:
8f:5f:b0:0b:0d:47:cb:f8:2e:79:2b:49:e8:61:e9:b8:6d:96:
62:24:16:0e:55:43:7a:96:10:e1:71:22:0c:74:e3:bc:5c:fd:
3c:b4:f8:3b:fa:bd:c0:03:de:83:7c:4d:b8:37:98:b2:2c:92:
7b:6c:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-fra.rpki-client.org