Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6gb5RRsd5O-lha_dpmq0H8l_0OE.roa
File: 6gb5RRsd5O-lha_dpmq0H8l_0OE.roa (raw, json)
Hash identifier: gVBBWluPRoltGdZgG2SNvr6MgBlYTCYR69jfiNqUJuw=
Subject key identifier: EA:06:F9:45:1B:1D:E4:EF:A5:85:AF:DD:A6:6A:B4:1F:C9:7F:D0:E1
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01821D6C2653E3AA8FD5B5165E75C6E4813B
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6gb5RRsd5O-lha_dpmq0H8l_0OE.roa
Signing time: Wed 20 Jul 2022 21:03:23 +0000
ROA not before: Wed 20 Jul 2022 21:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18530
IP address blocks: 84.39.202.0/23 maxlen: 23
84.39.200.0/23 maxlen: 23
92.246.68.0/23 maxlen: 23
92.246.70.0/23 maxlen: 23
193.31.32.0/23 maxlen: 23
193.31.34.0/23 maxlen: 23
2.56.22.0/23 maxlen: 23
2.56.20.0/23 maxlen: 23
195.38.0.0/23 maxlen: 23
195.38.2.0/23 maxlen: 23
194.93.52.0/23 maxlen: 23
194.93.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1d:6c:26:53:e3:aa:8f:d5:b5:16:5e:75:c6:e4:81:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jul 20 21:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea06f9451b1de4efa585afdda66ab41fc97fd0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:f3:c1:8a:b7:12:97:6b:4f:34:29:c1:4b:
20:74:68:8f:1d:e9:16:30:2f:32:60:d6:73:27:44:
2e:31:c9:f1:19:c0:58:b5:68:ca:0c:32:45:e0:3f:
5c:3c:1e:b2:94:72:ef:a1:d4:24:f1:74:fe:81:62:
4f:17:32:24:9f:ff:7f:c3:e4:2f:83:61:a7:ce:e9:
d7:1c:71:a4:19:98:72:e2:85:a5:90:b2:0e:af:dc:
10:45:5c:88:a1:09:70:66:5d:d1:68:92:59:8e:68:
2c:f8:85:83:90:05:5d:2e:9a:7a:2e:92:78:71:5f:
dc:6f:0d:f5:fb:74:ad:0b:08:c4:b6:74:b3:b9:bc:
9e:f9:25:ab:6e:e7:32:32:79:c7:fd:4b:c4:13:b2:
22:09:e6:d1:7a:27:2e:a7:03:cc:c1:7d:c9:f5:57:
cd:73:8c:99:78:c1:3a:d4:22:cb:40:d8:fd:1f:5e:
6f:2b:02:50:5f:50:24:ad:2b:72:bc:4f:0f:53:c5:
c9:71:80:f5:9b:9c:2e:b6:0e:b5:1d:2a:b6:47:8b:
b4:fb:00:b0:e2:08:fa:71:90:e2:d2:1b:fc:57:52:
a6:6d:9a:48:f5:f8:4b:2e:85:df:b7:7a:3d:05:6d:
3c:09:22:67:c5:28:b3:fc:cb:e3:81:99:72:fc:e4:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:06:F9:45:1B:1D:E4:EF:A5:85:AF:DD:A6:6A:B4:1F:C9:7F:D0:E1
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/6gb5RRsd5O-lha_dpmq0H8l_0OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.20.0/22
84.39.200.0/22
92.246.68.0/22
193.31.32.0/22
194.93.52.0/22
195.38.0.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:77:04:d3:76:15:b0:b8:d9:75:89:46:54:5c:35:a2:1d:17:
87:21:cf:80:cd:6b:aa:2d:f7:74:d1:47:1d:44:d1:97:f9:f1:
3e:d1:d8:1b:f2:74:3c:98:00:53:f0:b4:a0:c9:f1:f6:1b:4e:
b9:12:53:4c:f1:d4:90:39:7e:bf:ab:30:b0:ab:86:6c:79:c8:
79:99:54:f2:4b:dc:0c:f5:49:f7:12:cb:14:08:29:a4:89:e6:
04:90:b1:63:fa:0b:77:5e:9c:44:66:fc:fa:e8:c5:e5:2d:6d:
81:45:1c:c6:31:be:20:f7:23:18:cc:19:e1:25:6b:24:77:3c:
0f:92:2b:41:27:73:2c:7c:0b:c7:d9:85:61:de:4a:f9:cc:3d:
5e:b8:e6:66:5e:5f:c7:dc:60:32:50:48:98:d9:01:37:90:0f:
db:c6:63:ae:1c:09:82:3e:f1:cf:a6:ee:81:d8:ff:b5:04:94:
38:5a:1e:9d:e6:08:3e:3a:03:06:46:c2:90:26:42:be:a7:c8:
1a:4d:7d:d4:15:74:fc:51:f2:8e:38:b5:c5:73:e0:a0:2b:45:
f5:07:e6:3f:e4:b1:d9:06:b5:be:a1:73:7f:86:7e:fd:bc:68:
9c:60:5c:b3:97:fc:89:98:b1:f1:77:50:6c:b6:37:8a:86:0a:
90:54:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-ams.rpki-client.org