Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/64eL-2DRDeT5lcdh2ArbcVYdHXk.roa
File: 64eL-2DRDeT5lcdh2ArbcVYdHXk.roa (raw, json)
Hash identifier: XjzJ+hDmg3uwhVQCmAqE1wmOJEK+C29HeplyHy7dHKw=
Subject key identifier: EB:87:8B:FB:60:D1:0D:E4:F9:95:C7:61:D8:0A:DB:71:56:1D:1D:79
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 2701B785
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/64eL-2DRDeT5lcdh2ArbcVYdHXk.roa
Signing time: Sat 01 Jan 2022 15:00:42 +0000
ROA not before: Sat 01 Jan 2022 15:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60192
IP address blocks: 95.105.82.0/24 maxlen: 24
95.105.82.0/23 maxlen: 23
95.105.80.0/24 maxlen: 24
95.105.83.0/24 maxlen: 24
95.105.80.0/23 maxlen: 23
95.105.80.0/22 maxlen: 22
95.105.81.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
171.25.177.0/24 maxlen: 24
185.162.32.0/23 maxlen: 23
185.162.35.0/24 maxlen: 24
185.162.32.0/22 maxlen: 22
185.162.33.0/24 maxlen: 24
185.162.34.0/24 maxlen: 24
185.162.34.0/23 maxlen: 23
185.162.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654423941 (0x2701b785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 15:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb878bfb60d10de4f995c761d80adb71561d1d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:4c:2d:c6:cd:19:ef:a9:5e:f8:6d:33:91:
aa:e1:28:80:9c:cb:4d:2e:f2:13:11:01:2d:54:12:
12:07:82:59:5e:ba:8a:97:97:b6:4d:15:6b:a6:53:
13:c5:00:2f:64:b3:8e:1d:f2:1c:8d:f3:bd:38:b6:
ae:73:34:43:25:15:2b:e5:5a:2d:90:e9:4c:08:b6:
b4:64:88:e6:fd:16:3e:eb:7c:a1:d8:54:ac:c7:fe:
3f:0d:03:45:9b:d0:1c:b1:9b:43:35:35:fc:9a:3b:
33:1a:1c:1e:df:a4:1d:d1:97:87:8f:9b:64:c4:64:
af:76:ef:e1:ed:41:ea:75:64:cc:c3:11:f3:2d:ae:
ed:c0:7a:d0:41:82:b1:a8:d9:a0:f7:9e:80:76:30:
f0:c1:36:34:7e:70:7e:62:01:63:0e:c7:86:45:09:
cb:41:78:a5:6e:3d:5f:1a:1e:0d:5b:05:cb:2e:1a:
6f:26:02:3e:77:bf:00:7f:68:58:41:a4:a7:8a:1c:
44:94:5a:07:1e:38:0a:d2:7b:22:cd:71:dc:1d:b2:
01:e3:8c:48:20:ad:b5:3b:5e:94:c2:46:db:6f:20:
0e:17:ec:bd:7f:dc:23:20:8b:43:e0:28:1e:61:33:
02:8b:ef:2e:17:bc:a0:7f:3b:a6:56:a2:18:4e:a9:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:87:8B:FB:60:D1:0D:E4:F9:95:C7:61:D8:0A:DB:71:56:1D:1D:79
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/64eL-2DRDeT5lcdh2ArbcVYdHXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.105.80.0/22
171.25.177.0/24
185.162.32.0/22
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:35:19:b9:7c:25:1e:0e:53:50:75:d5:1c:e6:b1:56:92:bf:
bb:35:34:2c:e4:28:d5:1e:38:11:7f:a9:a7:38:ff:2d:4b:09:
10:26:12:8c:46:ef:b2:73:0b:ea:f7:66:a6:2d:61:12:36:0f:
77:da:3a:36:d2:6a:cd:3c:80:54:10:69:51:c5:63:be:86:2c:
6c:f5:14:4e:ed:60:64:85:03:08:5d:54:e9:88:94:5f:8c:89:
98:60:2e:71:e9:39:ec:03:2b:37:ba:97:f2:5c:ec:d7:f7:a4:
b9:78:1b:2c:23:9e:66:0b:7d:67:51:d6:73:c5:88:82:cc:17:
d5:84:a4:85:a5:80:48:c9:52:ce:4a:3b:47:65:5b:c1:04:58:
55:44:c0:1c:29:b1:9d:73:27:80:89:7f:d2:74:eb:ef:e5:aa:
e6:22:87:98:08:72:33:dd:0c:26:87:b1:e6:78:2c:7b:8a:e7:
3a:4d:42:77:45:69:af:da:03:aa:fc:5b:18:77:54:ea:0b:8f:
8d:0f:b0:1f:55:6b:8d:57:cb:79:fd:2a:f9:c1:bb:da:fe:c3:
c8:88:46:34:0a:89:f9:49:85:5f:2c:1b:d6:65:a9:3c:51:41:
e9:dd:c1:50:5b:f0:9b:6c:20:48:09:d4:a5:7e:db:35:82:b9:
19:73:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org