Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/hVFV-p0QfPu8BJTVMGti3vzrwtI.roa
File: hVFV-p0QfPu8BJTVMGti3vzrwtI.roa (raw, json)
Hash identifier: 4L4Nvg7rQIDEiF5v4knLD5heetrsMBpNuJszajM8vhM=
Subject key identifier: 85:51:55:FA:9D:10:7C:FB:BC:04:94:D5:30:6B:62:DE:FC:EB:C2:D2
Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial: 3713C098
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/hVFV-p0QfPu8BJTVMGti3vzrwtI.roa
Signing time: Sat 01 Jan 2022 06:01:17 +0000
ROA not before: Sat 01 Jan 2022 06:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7342
IP address blocks: 185.16.140.0/22 maxlen: 24
193.178.175.0/24 maxlen: 24
193.219.31.0/24 maxlen: 24
46.19.248.0/21 maxlen: 24
2a01:8300::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924041368 (0x3713c098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
Validity
Not Before: Jan 1 06:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=855155fa9d107cfbbc0494d5306b62defcebc2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:14:01:4d:28:f7:71:30:8e:4f:a4:0e:3c:
0e:54:df:27:e3:57:bd:b3:07:a6:e6:de:f8:89:20:
ae:d6:b8:ed:b0:b7:c9:32:75:62:c0:63:75:89:fa:
72:3a:02:bd:0c:87:d2:c9:c3:4d:f6:2b:d0:b5:23:
c3:5d:44:cd:e6:31:0e:2b:f4:04:7d:ff:aa:e6:2d:
89:30:15:96:89:c7:03:33:b3:b4:f9:8f:99:21:fa:
8e:fa:db:04:fc:1b:27:c8:70:f7:a7:87:31:37:c2:
44:38:90:17:3e:da:15:63:ec:39:ad:5b:50:d9:0d:
cb:b9:be:6a:83:5c:09:74:02:ad:c1:30:a5:78:82:
b8:5a:be:7b:8b:f6:30:03:2e:2d:b8:fd:53:a2:45:
b0:1a:f0:f1:5c:2c:3b:4a:56:29:a9:60:c9:de:4c:
30:db:e5:11:05:9e:7c:c6:94:68:d9:02:75:16:29:
13:ae:9b:c2:69:52:37:07:6a:ee:64:b0:d6:5e:90:
8d:7c:fa:8a:a3:af:c1:cc:ee:5e:05:87:ee:d3:c6:
20:1e:d8:29:a4:05:1e:e1:82:df:be:73:f7:1e:55:
82:5c:f0:b4:6e:ee:2c:98:1e:46:4c:9e:d3:82:69:
02:40:f0:4c:02:bb:23:ac:ef:9e:f9:ec:23:a4:2d:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:55:FA:9D:10:7C:FB:BC:04:94:D5:30:6B:62:DE:FC:EB:C2:D2
X509v3 Authority Key Identifier:
keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/hVFV-p0QfPu8BJTVMGti3vzrwtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.248.0/21
185.16.140.0/22
193.178.175.0/24
193.219.31.0/24
IPv6:
2a01:8300::/32
Signature Algorithm: sha256WithRSAEncryption
91:3c:76:a6:81:0f:2e:80:ec:0f:4c:59:86:dd:cf:03:f4:2c:
46:49:42:0e:19:ca:08:0b:3a:12:80:8e:d8:e1:a6:a7:99:b1:
88:05:20:33:97:14:ad:56:fc:5c:a5:68:6a:37:f6:35:84:96:
80:37:12:ac:16:35:9b:0b:c6:28:54:8b:5e:8a:4b:27:da:43:
f2:38:1c:3e:c8:78:41:a3:1b:4a:a0:48:97:e5:68:d9:d4:d0:
c0:d6:b4:86:0d:28:e2:30:5e:87:40:c6:0e:86:46:f5:2d:9f:
8c:85:fb:d2:92:47:51:8c:5a:c1:68:b5:29:46:1d:09:85:01:
12:9b:e1:78:46:36:66:34:f9:30:6c:18:a2:77:f2:e1:2a:ea:
ad:17:8a:c5:31:bc:2d:d3:f3:81:26:55:d2:c6:be:aa:94:aa:
f6:08:e3:64:37:52:dd:23:38:0c:1c:43:8e:cc:a0:4c:fe:b1:
34:9e:36:ba:12:b5:e9:e0:bc:9d:f6:9a:25:76:ef:1e:c4:0a:
f3:3b:61:69:67:32:7e:ec:f7:fe:98:c4:95:5b:74:42:05:0a:
00:62:29:78:de:ab:ce:33:b4:d2:24:a9:14:7d:88:e7:81:2f:
d2:9c:3d:5a:83:7b:83:32:a5:44:76:48:de:c0:08:0b:f7:a6:
43:3f:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:00 2024 by rpki-client on console-ams.rpki-client.org