Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/jRi38Bvn9cJ0AAydJAJr73NNubs.roa
File: jRi38Bvn9cJ0AAydJAJr73NNubs.roa (raw, json)
Hash identifier: 0fSojEY9PiIQZuLeikO9upaH3vPDbz2HWCt3n5CwhOI=
Subject key identifier: 8D:18:B7:F0:1B:E7:F5:C2:74:00:0C:9D:24:02:6B:EF:73:4D:B9:BB
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 01369229
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/jRi38Bvn9cJ0AAydJAJr73NNubs.roa
Signing time: Sat 01 Jan 2022 09:55:00 +0000
ROA not before: Sat 01 Jan 2022 09:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48940
IP address blocks: 176.115.48.0/20 maxlen: 20
62.122.96.0/22 maxlen: 22
62.122.96.0/21 maxlen: 21
62.122.100.0/22 maxlen: 22
94.231.160.0/20 maxlen: 20
94.231.160.0/21 maxlen: 21
94.231.168.0/21 maxlen: 21
46.148.96.0/21 maxlen: 21
46.148.96.0/20 maxlen: 20
176.115.32.0/19 maxlen: 19
176.115.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20353577 (0x1369229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Jan 1 09:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d18b7f01be7f5c274000c9d24026bef734db9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:57:66:64:2a:1b:33:7e:b9:f8:b7:45:17:11:
2e:b0:b7:be:a7:f9:85:8a:37:f9:6e:a6:93:4d:f5:
16:92:a9:3d:ee:6e:69:b0:ea:6f:df:bf:05:68:e6:
d7:94:a1:45:2d:f6:67:52:d1:e9:57:37:0f:a3:f6:
ad:28:29:28:9f:c8:0a:b8:88:0b:5d:0c:52:dc:00:
ee:90:1a:14:83:8e:ff:1f:63:78:26:32:a8:0b:e5:
35:61:69:ea:f1:72:81:b9:9f:e6:63:76:64:be:c2:
bd:97:b9:34:60:89:d6:47:8e:af:77:e3:fa:43:fd:
82:60:fe:54:c0:f5:6b:a8:6f:48:2d:4e:68:2c:5f:
5f:57:7f:44:8f:e7:6f:3e:96:f0:ca:b8:8c:8e:2d:
fe:51:8b:8b:1e:f1:6a:e9:df:0a:46:95:70:fb:46:
74:ad:9d:9d:31:97:8a:1c:db:bb:9c:39:08:dc:fb:
af:e9:50:30:31:07:89:fc:c0:2d:47:c6:5f:0f:42:
50:a4:c7:40:6c:05:71:ef:92:7a:68:59:38:a7:b5:
f2:fd:d3:6b:0d:42:08:f8:1f:01:5f:94:da:74:7f:
32:b7:69:2e:35:f3:a8:07:01:76:23:db:c6:98:8e:
49:33:0b:5b:32:01:86:d8:aa:58:da:39:ed:cd:94:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:18:B7:F0:1B:E7:F5:C2:74:00:0C:9D:24:02:6B:EF:73:4D:B9:BB
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/jRi38Bvn9cJ0AAydJAJr73NNubs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.96.0/20
62.122.96.0/21
94.231.160.0/20
176.115.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:ba:c0:7b:39:ee:93:14:df:c5:ef:6e:df:a5:b3:d6:15:98:
48:71:db:f7:b0:a1:66:d1:76:d8:59:b8:f4:15:21:47:6b:b7:
44:49:de:9b:71:ea:d7:1b:6a:0a:c7:45:b5:ea:52:17:05:0f:
83:31:92:6c:18:c1:57:39:e1:85:09:7b:c2:6e:ce:b3:fe:22:
dd:53:97:04:46:71:69:f8:d5:a5:5b:f6:7f:da:aa:a1:2d:5d:
3f:f4:e1:6a:2a:94:6e:95:ea:b2:8a:85:8b:0b:ea:4a:bb:ae:
0f:67:e3:21:1c:21:e7:70:6b:24:03:80:c5:a2:d0:3e:af:03:
ac:88:8c:3e:a3:11:ea:d0:08:b6:f3:32:10:79:20:2f:0e:39:
9d:7e:e7:86:0a:98:81:be:dc:ee:ad:96:cd:a7:ee:b1:18:24:
a3:8f:9f:05:01:3d:bb:24:01:5a:6a:7e:5e:28:5b:46:17:95:
7f:ca:b6:4e:1d:9c:dd:d2:66:c5:77:08:0b:15:ae:59:dd:85:
8d:a0:d8:1a:aa:63:7e:c2:b7:10:4a:43:6d:a0:bc:53:42:ae:
31:d2:22:c0:f6:53:39:9d:fb:e3:f1:17:96:cb:0b:bd:be:55:
0d:ef:0f:f0:82:82:f5:87:8c:f2:21:d9:ea:54:9f:b8:9a:c9:
30:66:2b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:06 2023 by rpki-client on console-ams.rpki-client.org