Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/hE3XFbvruNiHEEaQJqDE0A8o-EU.roa
File: hE3XFbvruNiHEEaQJqDE0A8o-EU.roa (raw, json)
Hash identifier: NwShCtXhuoDc/aVPQnsHpkf0FEJhKvetviPSAxuw7So=
Subject key identifier: 84:4D:D7:15:BB:EB:B8:D8:87:10:46:90:26:A0:C4:D0:0F:28:F8:45
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 0183A1B0AB6E380F3EBB4372101F90876C5A
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/hE3XFbvruNiHEEaQJqDE0A8o-EU.roa
Signing time: Tue 04 Oct 2022 06:30:53 +0000
ROA not before: Tue 04 Oct 2022 06:30:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209898
IP address blocks: 91.194.139.0/24 maxlen: 24
147.78.194.0/23 maxlen: 24
185.203.114.0/23 maxlen: 23
2a0a:e5c0::/29 maxlen: 48
2a0a:e5c0:2::/48 maxlen: 48
2a09:2940::/29 maxlen: 48
2a0a:e5c1:100::/40 maxlen: 48
2a0a:e5c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:b0:ab:6e:38:0f:3e:bb:43:72:10:1f:90:87:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Oct 4 06:30:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=844dd715bbebb8d88710469026a0c4d00f28f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:80:16:00:45:83:46:68:f5:a6:0d:8e:89:
1e:69:b8:ce:ba:df:7a:b9:e3:f1:80:15:90:83:ea:
0b:ba:a5:80:00:cc:d0:de:36:a4:b2:3c:a6:f7:01:
1b:04:b0:a4:c5:11:d9:1e:c3:a8:cd:5a:eb:64:00:
ed:e8:07:c4:08:9e:ca:4c:ed:a8:e7:ba:30:e2:82:
d7:77:b7:5b:41:20:57:05:f4:9e:15:1b:66:10:dd:
ea:65:d2:1b:34:e9:da:6f:91:92:cd:f9:63:e7:71:
a2:92:5c:bb:ac:d2:ca:34:39:f8:6b:c7:88:03:47:
1f:7f:df:6e:21:2c:da:8f:91:29:6c:9d:74:a7:c5:
94:35:f0:3e:6a:2c:a4:3b:e0:65:5f:8c:ed:a4:11:
56:07:c1:91:bf:f2:84:93:56:02:6d:ea:5a:80:35:
de:2b:d3:3c:6e:05:61:82:0f:cd:de:c2:ee:e9:98:
8a:48:36:b1:6c:92:79:70:c3:8d:b4:cf:94:6e:b9:
13:ad:49:72:a2:21:69:46:71:40:4f:b5:96:2c:35:
1a:33:99:34:9f:d3:aa:76:bf:7c:74:04:b9:0f:b0:
b3:6a:0a:96:15:b2:c8:2a:90:6f:11:77:54:2f:13:
42:bb:b0:0a:69:e6:36:0d:8f:e9:31:a8:ce:59:46:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4D:D7:15:BB:EB:B8:D8:87:10:46:90:26:A0:C4:D0:0F:28:F8:45
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/hE3XFbvruNiHEEaQJqDE0A8o-EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.139.0/24
147.78.194.0/23
185.203.114.0/23
IPv6:
2a09:2940::/29
2a0a:e5c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:30:30:30:bb:10:a0:45:42:64:0d:e8:e0:71:98:c2:10:77:
92:0b:10:ff:c5:40:75:88:16:10:56:1e:2c:72:47:af:e1:b5:
e8:e5:05:96:f4:bd:c3:71:c1:54:a9:0c:4e:18:4a:c2:67:93:
24:11:24:e0:d8:02:5b:6a:fa:73:02:c7:f9:46:37:b1:92:66:
18:27:81:ad:ec:ab:65:86:34:a7:00:40:cd:45:47:b3:59:9c:
96:aa:26:4b:5e:dd:06:2f:ca:01:a6:a6:29:30:28:ed:91:ce:
61:cb:88:0e:6e:88:1e:d6:91:01:65:1b:e8:51:86:57:68:84:
aa:7d:fc:04:d6:8c:6e:9d:fc:94:92:65:7a:c7:c6:59:da:a2:
e5:e2:cb:09:b3:f8:df:05:0a:13:67:1b:c2:eb:ac:b6:b6:81:
54:a5:23:f7:a3:e3:c9:28:cb:fc:ae:ea:d4:cf:e9:96:82:73:
97:14:d6:85:d2:14:70:08:4c:43:b8:79:55:2c:f1:d8:b5:7a:
2c:7b:74:6d:74:a5:b8:95:b7:92:44:3e:66:db:0b:f9:3c:54:
4a:f9:0a:33:94:f4:62:0d:3d:33:6f:c2:f6:71:c9:12:07:48:
16:d8:26:bc:2a:9f:9f:51:c6:90:6f:d2:1d:af:cf:30:ec:ba:
ee:f2:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org