Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/Ho3LMjVjf2aUdDnbuvGtmczMdEA.roa
File: Ho3LMjVjf2aUdDnbuvGtmczMdEA.roa (raw, json)
Hash identifier: m2tFhS0AOj8vl00EzSotctXwarTAY465xSf/y/Qr8oM=
Subject key identifier: 1E:8D:CB:32:35:63:7F:66:94:74:39:DB:BA:F1:AD:99:CC:CC:74:40
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 01853E72FEA4D5F8AC00140EEE2E62104710
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/Ho3LMjVjf2aUdDnbuvGtmczMdEA.roa
Signing time: Fri 23 Dec 2022 10:06:41 +0000
ROA not before: Fri 23 Dec 2022 10:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202617
IP address blocks: 185.159.0.0/24 maxlen: 24
185.159.1.0/24 maxlen: 24
185.159.0.0/22 maxlen: 22
185.159.2.0/24 maxlen: 24
93.113.103.0/24 maxlen: 24
93.113.109.0/24 maxlen: 24
2a07:b0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:72:fe:a4:d5:f8:ac:00:14:0e:ee:2e:62:10:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Dec 23 10:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e8dcb3235637f66947439dbbaf1ad99cccc7440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4d:38:e7:ae:28:33:12:70:86:1f:64:7e:37:
3c:1d:49:2e:e2:27:47:0d:f7:11:1c:bb:84:30:10:
b7:cc:d8:33:c9:fb:9f:7c:0a:cb:be:8e:d2:73:ae:
d7:a8:a4:a7:f8:58:ce:ea:ba:af:09:39:f5:b4:f1:
fb:6f:37:49:68:62:0d:fa:10:51:d9:52:4b:0a:c5:
a3:4e:07:cc:61:48:6d:b4:4f:6d:fa:c7:2c:bf:9e:
03:c7:41:86:99:d1:75:cb:22:c9:b5:b3:df:31:fc:
0c:8c:65:8d:9b:00:c2:a8:02:1d:b3:85:94:d5:50:
45:f8:8a:f4:12:76:92:6e:6d:ce:92:90:7f:bc:22:
b6:1a:33:bd:21:3b:8d:69:52:3c:c0:08:77:40:99:
12:f5:57:55:1f:89:9e:66:1a:06:52:17:01:86:c5:
cf:30:89:e2:d9:a9:6b:d4:fb:e4:4b:8c:92:14:32:
3c:ff:6a:a0:77:f2:2e:39:cb:c3:d1:34:65:dc:b9:
a6:4e:92:88:63:a1:21:c1:3c:db:08:11:7e:8b:38:
f4:f0:8d:2c:24:f7:ad:a5:9a:6f:d1:d9:1c:46:77:
7d:fd:17:ee:6a:dd:87:13:03:e2:4f:5a:d4:d5:ef:
81:59:a1:0f:e7:03:e8:2d:a2:2a:40:f8:d0:d0:53:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8D:CB:32:35:63:7F:66:94:74:39:DB:BA:F1:AD:99:CC:CC:74:40
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/Ho3LMjVjf2aUdDnbuvGtmczMdEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.103.0/24
93.113.109.0/24
185.159.0.0/22
IPv6:
2a07:b0c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:b6:fc:c7:9a:61:87:e0:b1:e5:ae:e4:9d:56:fe:f3:84:13:
fb:58:cc:78:59:f3:23:eb:11:2a:4d:44:ea:7c:0d:ce:27:5c:
e1:41:33:5f:ec:0e:71:7e:63:8c:7e:06:48:ab:69:bd:6d:f4:
3b:6e:66:ca:f4:4f:4d:89:fb:49:98:a9:04:fb:9d:11:e3:7f:
d3:f1:47:8f:59:26:75:76:bb:e7:41:54:c2:95:2b:74:7c:50:
a9:fe:94:c6:c8:c7:09:cb:a0:81:95:2f:d4:e0:2c:a9:a9:d1:
13:77:5d:21:8f:1e:d8:59:8c:1f:43:95:43:d9:0e:f8:10:3a:
a2:e6:b4:f3:6f:23:ff:29:d3:a6:cc:2f:51:f1:3a:60:eb:16:
a8:d9:3d:ac:84:04:6b:42:fe:a6:1b:82:d4:fc:27:0a:20:bd:
84:93:5c:c6:84:2f:bb:5f:11:ff:af:11:3f:98:6f:a4:4c:28:
bf:79:72:40:de:0e:8f:b1:f9:84:55:a7:44:99:93:cb:ca:0f:
cf:eb:36:82:34:2d:59:4f:b7:b2:4b:a5:2f:42:de:8f:60:94:
f5:a6:0a:05:73:ed:71:84:99:22:ce:46:d1:60:e4:db:71:cb:
b4:49:32:ca:ba:67:05:ee:bb:bd:47:55:bc:be:b5:34:54:c4:
91:77:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:44 2024 by rpki-client on console-ams.rpki-client.org