Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/d9CqpSFfNEWa3zMvklzxdr-lF7g.roa
File: d9CqpSFfNEWa3zMvklzxdr-lF7g.roa (raw, json)
Hash identifier: O2HV7guQt+lA/bGBQx0rLWzQ9l81d8xD6Hq3B1hjJEQ=
Subject key identifier: 77:D0:AA:A5:21:5F:34:45:9A:DF:33:2F:92:5C:F1:76:BF:A5:17:B8
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0471EB63
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/d9CqpSFfNEWa3zMvklzxdr-lF7g.roa
Signing time: Wed 06 Apr 2022 15:29:45 +0000
ROA not before: Wed 06 Apr 2022 15:29:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24651
IP address blocks: 213.21.218.0/24 maxlen: 24
185.118.76.0/24 maxlen: 24
213.21.222.0/24 maxlen: 24
194.8.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74574691 (0x471eb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Apr 6 15:29:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77d0aaa5215f34459adf332f925cf176bfa517b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bf:c9:e9:3f:96:5d:b1:98:9a:a5:9a:4f:fb:
22:08:77:00:38:d6:82:c6:7d:6a:06:ce:5e:63:10:
5a:eb:3a:41:0c:8f:80:b8:c7:0f:b9:07:2f:78:72:
7c:ff:03:26:ac:5f:e9:50:0a:15:66:bb:5e:45:a1:
67:05:b2:ec:d5:cd:7c:4b:e2:91:89:6f:13:64:42:
49:1e:1a:e3:dd:d4:a4:38:95:78:7f:22:ff:6d:84:
00:b2:9f:34:f8:a8:bf:78:bd:70:9d:5c:fd:79:5d:
c8:19:02:33:af:0b:ae:70:2a:05:5d:79:ea:e6:07:
6c:76:1d:56:7b:77:ea:1e:90:92:3b:ce:fb:8c:ff:
6a:b5:31:91:c3:9c:a8:e2:3e:51:15:a4:e3:06:4a:
7a:88:ee:9b:be:b1:fb:bf:de:b2:ef:9d:77:4d:ae:
0f:4c:b8:3f:7c:d3:44:93:23:97:64:c4:ff:6e:c1:
4c:39:73:3c:6e:54:dd:a8:c1:14:50:e3:5d:f5:00:
2d:55:f6:b7:ac:0c:ea:cd:2c:da:40:94:1c:22:ad:
46:8c:c5:d5:5d:78:44:f2:6a:ba:b4:7b:ab:fe:b5:
a3:03:23:ba:af:c1:f2:cc:0c:34:14:e9:b2:35:83:
37:fc:8d:4a:12:da:2e:b7:11:cc:cf:00:6f:c6:23:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:AA:A5:21:5F:34:45:9A:DF:33:2F:92:5C:F1:76:BF:A5:17:B8
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/d9CqpSFfNEWa3zMvklzxdr-lF7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.76.0/24
194.8.6.0/24
213.21.218.0/24
213.21.222.0/24
Signature Algorithm: sha256WithRSAEncryption
02:50:10:a6:25:60:58:63:98:67:d5:de:56:4d:26:a7:7e:ca:
1b:1f:35:b9:61:9c:9c:8c:44:2c:e5:62:38:e2:2d:64:24:ac:
cf:f0:f1:f3:4b:48:5c:05:d2:e7:db:f1:1f:f2:5c:13:04:d2:
d3:73:d7:14:19:d7:19:4f:9c:f5:5d:c4:1b:2d:74:a5:da:a3:
b6:ab:d2:ea:86:1e:f5:5e:e2:3e:6b:db:56:fe:3e:f2:92:15:
50:c7:28:34:45:b9:32:d8:ee:ce:18:17:b3:f6:d0:15:df:3e:
08:fa:8b:b6:ec:fa:f5:03:72:75:59:7d:78:c1:a4:c4:28:38:
c6:d3:3d:03:8e:b8:4e:77:53:ff:f5:4b:04:a6:cf:9b:66:5c:
8d:a5:60:19:6a:f0:a7:a7:62:a6:aa:d1:7f:d4:02:fc:48:7a:
b4:22:de:e8:06:aa:85:69:ac:9f:79:4c:dd:5b:ff:ca:32:1d:
3c:46:d2:f6:2a:7e:36:d6:38:23:66:da:2a:7a:e0:73:d5:86:
ac:0f:5e:b6:2a:c2:24:92:3d:42:6a:9f:25:e6:e7:d2:2d:a7:
f3:a4:e2:0d:b7:7b:58:88:9a:ed:e0:df:ca:a7:0e:f9:76:de:
ec:11:ea:15:8b:92:d0:bb:1a:88:37:1f:70:dc:d4:20:13:5f:
db:98:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org