Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ceHA3QnfBxscHoRzoRRZ8raW2k0.roa
File: ceHA3QnfBxscHoRzoRRZ8raW2k0.roa (raw, json)
Hash identifier: 9d0Y9VawyI1Wifq9CgXsipHDc7PEGt8QQHk9xEWWavk=
Subject key identifier: 71:E1:C0:DD:09:DF:07:1B:1C:1E:84:73:A1:14:59:F2:B6:96:DA:4D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18B70E1F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ceHA3QnfBxscHoRzoRRZ8raW2k0.roa
Signing time: Tue 15 Feb 2022 12:14:46 +0000
ROA not before: Tue 15 Feb 2022 12:14:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44103
IP address blocks: 194.34.230.0/24 maxlen: 32
45.93.119.0/24 maxlen: 32
185.249.217.0/24 maxlen: 32
2a06:8e01::/44 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414649887 (0x18b70e1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 15 12:14:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71e1c0dd09df071b1c1e8473a11459f2b696da4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:c7:51:f4:1d:ee:3f:e8:2e:81:41:f9:60:
2d:4b:a0:a6:7f:01:ee:d8:77:09:29:7b:7b:b3:53:
09:9d:b3:82:66:8c:c4:85:a9:00:dc:5d:7e:3f:ff:
7e:a8:3f:2d:09:6d:77:ad:4e:c6:e2:2a:5e:65:a9:
67:9d:60:c4:6f:87:33:31:a0:30:6a:c6:5f:43:02:
67:e2:60:99:04:8b:9e:26:1c:85:80:7c:92:1d:4a:
39:cd:59:b5:64:6f:49:39:1d:7f:85:11:1e:36:21:
c1:69:fb:bd:19:ea:c1:47:e7:d2:04:a1:d2:26:3c:
7f:dc:f7:77:b5:d3:27:79:f2:75:03:1d:2e:2f:db:
95:b4:e2:46:97:e0:3a:a8:11:4e:3f:8a:84:c7:c5:
dd:b8:07:99:9b:e5:8d:0d:80:0e:c9:2b:d8:be:fe:
76:07:5c:01:0f:a3:43:0d:44:26:5a:6a:8a:a7:09:
5c:b0:f6:62:b6:1b:a3:25:c1:53:d1:08:fc:50:eb:
3a:88:b2:ac:6b:ab:73:7e:7a:63:49:77:db:19:7a:
a2:53:55:55:cc:2c:0a:e0:43:22:86:19:58:9b:1e:
e1:6c:4a:63:a4:bb:f5:fa:12:5c:b4:a7:42:03:1e:
1d:c2:f3:fb:f0:7c:a7:60:62:0a:08:7f:ba:88:fc:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:C0:DD:09:DF:07:1B:1C:1E:84:73:A1:14:59:F2:B6:96:DA:4D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ceHA3QnfBxscHoRzoRRZ8raW2k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.119.0/24
185.249.217.0/24
194.34.230.0/24
IPv6:
2a06:8e01::/44
Signature Algorithm: sha256WithRSAEncryption
52:e0:6f:7d:69:38:c1:df:cb:5d:39:a9:20:0f:ff:aa:93:9f:
32:f7:8a:7e:c8:92:9f:63:1f:aa:d0:3c:07:17:42:de:9d:7c:
6e:72:ec:e3:6a:9d:a1:dc:9e:0c:52:0a:14:06:36:0a:05:50:
5a:b0:9a:e8:50:cf:65:15:f7:c9:99:d9:b7:b0:4b:e6:9c:79:
8e:f0:02:90:d6:3c:b5:97:20:4e:d5:8d:a0:b5:83:c1:e7:ff:
4d:6c:52:13:2f:88:64:f9:f2:4d:6c:39:c0:f1:9c:b1:cb:0b:
5b:d6:0a:be:08:54:a3:28:f9:e6:80:89:0f:95:d6:ba:3a:fd:
b9:e4:8f:b6:b8:07:39:f8:65:62:b4:0d:a1:56:eb:65:4a:fb:
07:50:7b:a8:fb:17:d0:78:d8:aa:ef:62:4e:c8:d6:49:16:3e:
e0:8e:ee:c5:83:ff:38:6c:3c:13:31:2c:db:04:8a:5e:1c:e0:
9d:06:3b:b2:8f:cd:bf:58:d0:9f:ee:0b:e0:10:be:cb:7d:39:
58:e1:ca:b1:e1:77:72:0a:d5:a1:cd:75:66:e6:f7:0e:7f:8a:
66:fa:ff:9a:d6:bb:6b:c3:82:28:b3:19:16:65:2d:64:84:84:
4c:90:6d:d7:5e:fa:33:34:8c:46:14:91:42:c9:15:6c:d3:69:
74:dc:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org