Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/E_h_sI1S561KL75hoY5ga6iWgCI.roa
File: E_h_sI1S561KL75hoY5ga6iWgCI.roa (raw, json)
Hash identifier: 4YQ1Y/O5nd1aMKHEZd5DXksvjqn6RDck8VyOufpSID0=
Subject key identifier: 13:F8:7F:B0:8D:52:E7:AD:4A:2F:BE:61:A1:8E:60:6B:A8:96:80:22
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 35644DE5
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/E_h_sI1S561KL75hoY5ga6iWgCI.roa
Signing time: Tue 08 Mar 2022 17:49:48 +0000
ROA not before: Tue 08 Mar 2022 17:49:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16243
IP address blocks: 217.114.96.0/20 maxlen: 24
185.76.16.0/22 maxlen: 24
77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
2001:1540::/32 maxlen: 48
2001:1541:4100::/40 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895765989 (0x35644de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Mar 8 17:49:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13f87fb08d52e7ad4a2fbe61a18e606ba8968022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:c7:d1:a7:84:d3:36:04:50:9b:c3:1c:8c:
14:8e:21:f5:e7:58:af:ec:4a:70:35:09:4d:88:03:
c5:d6:d6:6a:ff:0c:7d:ce:b7:90:05:51:20:26:cb:
64:d0:0f:42:6c:32:d8:d1:95:10:50:f4:0b:63:c9:
f6:c9:19:d7:d0:5b:3a:c5:ac:1a:29:23:1f:ea:cf:
27:09:1d:35:22:c5:26:36:ad:d0:95:26:b7:c6:23:
52:75:f8:fd:38:bd:da:c6:95:45:75:ec:35:30:65:
f1:33:a0:8e:49:05:2a:24:53:3f:ae:80:42:d7:71:
04:b1:8c:2e:f1:84:25:df:f1:59:bd:af:07:c5:12:
b2:52:34:9a:88:7a:e9:62:ff:d3:ce:a5:bd:62:ef:
52:5e:72:0e:d9:29:24:19:74:2a:7d:3d:a3:7f:a5:
12:1c:54:e7:9f:da:05:d8:97:c9:2b:b1:0e:f5:07:
91:cd:1a:2f:d0:50:e4:47:00:fd:3a:8d:3e:2a:c1:
1b:26:66:66:20:d7:3a:5e:03:ec:fa:b9:14:63:7c:
b4:92:b5:4d:75:63:29:44:f2:ea:74:3e:ee:c1:ba:
ec:fb:fc:08:54:8a:c2:bc:a7:4d:49:56:62:7a:58:
75:c2:da:9d:ef:ba:65:04:0b:66:da:c6:3b:1b:1b:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:7F:B0:8D:52:E7:AD:4A:2F:BE:61:A1:8E:60:6B:A8:96:80:22
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/E_h_sI1S561KL75hoY5ga6iWgCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
2001:1541:4100::/40
Signature Algorithm: sha256WithRSAEncryption
51:9b:0e:bf:23:81:1e:99:a3:4a:3d:bd:0a:3f:bf:42:8b:69:
83:bc:3f:9c:df:87:4b:d4:25:56:bb:e2:ca:59:bc:6b:b9:20:
01:84:2b:f6:8e:4e:88:bd:40:33:48:60:b7:ee:bf:60:2a:92:
0a:95:5d:24:e2:4c:19:63:32:d6:d6:da:cd:13:1f:37:ee:ff:
0a:d2:20:33:3f:47:d9:2b:d4:8a:47:a7:9d:e2:b0:96:af:67:
10:a1:a6:cc:5e:cc:ec:c2:99:5a:02:9f:54:62:15:69:39:2a:
39:bf:cf:10:ae:c8:9a:df:4a:e8:3c:40:c9:f4:f8:20:03:79:
10:de:e5:f3:d7:c5:7e:33:72:e6:bf:1a:5a:5a:91:67:14:32:
d3:a4:4a:e7:7f:b3:54:56:c4:3b:79:cc:fc:21:cd:a0:11:61:
ec:35:f1:22:c9:f7:d8:b6:98:e8:32:60:e1:57:4e:d6:b5:fb:
ff:cc:4b:d1:a2:da:08:db:b8:c0:6c:bd:80:b5:0c:38:18:bb:
c4:db:b0:4e:d8:75:0f:56:2b:29:0d:4a:f0:06:eb:93:59:ad:
f0:8a:3c:71:89:f7:9b:96:4d:1b:d0:24:c5:98:53:cc:7c:b9:
cd:97:95:ea:25:61:94:38:ae:74:ce:a3:ee:95:05:f3:d4:c1:
27:26:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:39 2023 by rpki-client on console-fra.rpki-client.org