Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/sRkPXHBsJJv7zVrBNtLu3SDJe_M.roa
File: sRkPXHBsJJv7zVrBNtLu3SDJe_M.roa (raw, json)
Hash identifier: 30EyQKfxcpf+sM3n/okRyZOk7QHNaN6kPAUQu5XDDGc=
Subject key identifier: B1:19:0F:5C:70:6C:24:9B:FB:CD:5A:C1:36:D2:EE:DD:20:C9:7B:F3
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 015519
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/sRkPXHBsJJv7zVrBNtLu3SDJe_M.roa
Signing time: Fri 01 Jul 2022 09:59:20 +0000
ROA not before: Fri 01 Jul 2022 09:59:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61307
IP address blocks: 185.97.250.0/23 maxlen: 23
185.97.248.0/23 maxlen: 23
185.97.248.0/22 maxlen: 22
31.24.56.0/21 maxlen: 21
31.24.56.0/22 maxlen: 22
85.196.224.0/19 maxlen: 19
31.24.60.0/22 maxlen: 22
93.185.240.0/20 maxlen: 20
93.185.240.0/21 maxlen: 21
93.185.248.0/21 maxlen: 21
85.196.192.0/19 maxlen: 19
85.196.192.0/18 maxlen: 18
2a03:4360::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87321 (0x15519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Jul 1 09:59:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1190f5c706c249bfbcd5ac136d2eedd20c97bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:ea:9b:01:46:92:58:b9:5d:0f:4c:e0:e9:
18:6b:a4:e1:2f:19:81:42:63:6c:83:f6:56:6a:bc:
f4:cd:e5:7a:37:e2:54:c4:54:75:e3:ab:0a:e3:0a:
80:c0:eb:3a:07:0b:46:a3:1a:af:2f:4b:97:11:ef:
8d:ac:46:f6:58:e8:3c:b8:cd:f5:19:34:6f:36:c1:
08:63:fd:a3:00:32:40:87:e3:69:c2:ef:e4:4c:1c:
7d:ea:9c:43:17:08:7d:1e:17:87:de:0a:89:43:8c:
23:bd:ad:af:6a:f0:88:17:1b:1a:8b:0a:78:97:8b:
2b:8d:de:91:cf:29:97:ae:1b:a5:10:12:bb:2c:98:
d6:57:cc:66:c6:f2:aa:f4:e5:98:78:01:06:dd:e8:
c5:77:74:2d:c3:5a:c9:d2:38:89:a7:e5:7c:37:81:
ee:4d:7d:7d:8f:7c:73:6f:e8:f4:91:c6:c0:87:8c:
6d:b5:7d:e7:b9:51:0f:51:9d:ef:c5:c9:7e:02:8d:
d1:5a:02:5b:6b:2f:28:08:44:d6:d7:ce:0c:f8:c8:
84:02:44:a8:60:82:d1:26:36:8d:27:9b:d6:17:13:
1e:c3:0a:34:cb:ef:ef:78:f5:b4:a7:ed:df:70:af:
22:a9:58:1b:65:1c:97:d7:0b:73:19:db:de:f1:51:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:0F:5C:70:6C:24:9B:FB:CD:5A:C1:36:D2:EE:DD:20:C9:7B:F3
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/sRkPXHBsJJv7zVrBNtLu3SDJe_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.56.0/21
85.196.192.0/18
93.185.240.0/20
185.97.248.0/22
IPv6:
2a03:4360::/32
Signature Algorithm: sha256WithRSAEncryption
92:12:c6:41:c1:b2:0c:c5:76:39:c9:25:ad:31:36:34:f1:d9:
36:18:ee:53:fc:bf:ce:bb:2b:a8:92:49:12:b0:b5:5a:6c:47:
eb:f7:70:b7:a2:d0:3a:e7:12:8c:0e:b1:86:e8:0d:d7:e6:53:
ba:8b:e4:12:49:3c:0b:f1:8d:48:21:ca:fa:61:6a:80:86:a1:
0e:67:16:a7:64:1f:40:05:bd:a2:0e:69:40:40:19:19:9b:76:
06:7d:30:ed:99:c1:bd:25:5b:22:0e:78:d9:72:e3:51:03:bc:
d7:41:af:22:dc:ac:89:a6:ed:0c:47:7c:f0:e3:d2:5a:67:8c:
19:65:01:19:c5:b5:32:f0:0c:b0:9b:d1:54:6c:db:9f:8c:74:
7b:fd:e2:54:d5:4a:16:22:b5:2c:39:98:03:fd:f3:d5:8e:49:
cc:26:5c:38:11:49:bb:73:1b:63:5b:53:bb:d4:11:45:83:32:
e6:39:6f:7e:15:03:52:a5:b4:10:04:ab:a3:3e:e8:31:51:f3:
2a:7a:5f:70:8e:04:ec:8f:1d:7a:4e:e2:30:19:7e:89:db:e3:
5a:89:17:74:8a:a5:9b:69:af:4c:b5:ec:b6:a2:19:1f:6f:2f:
07:e8:e1:48:b9:76:47:8e:bd:8e:84:76:0d:e0:5b:e2:dd:66:
d3:02:8e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:54 2024 by rpki-client on console-fra.rpki-client.org