Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/RBjSvZxQf--29YNi2J-9SeSKWdE.roa
File: RBjSvZxQf--29YNi2J-9SeSKWdE.roa (raw, json)
Hash identifier: kWx+f6drtaJOBY4UAQmZs85S8ZlpflPyyUmiYvbhCR4=
Subject key identifier: 44:18:D2:BD:9C:50:7F:EF:B6:F5:83:62:D8:9F:BD:49:E4:8A:59:D1
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 0DC2E1E0
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/RBjSvZxQf--29YNi2J-9SeSKWdE.roa
Signing time: Sat 01 Jan 2022 10:05:40 +0000
ROA not before: Sat 01 Jan 2022 10:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 46.31.200.0/21 maxlen: 24
185.48.76.0/22 maxlen: 24
37.18.136.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230875616 (0xdc2e1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Jan 1 10:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4418d2bd9c507fefb6f58362d89fbd49e48a59d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:b4:a6:46:85:ee:7d:7f:57:67:a2:a5:56:
6d:8f:bd:ce:24:5f:40:cb:3d:36:c4:27:4b:95:94:
19:5d:cf:46:e8:62:67:16:bc:d2:ff:75:a3:c5:32:
24:6a:8b:90:80:43:6a:60:30:c6:b8:1e:49:db:d5:
dc:b0:a3:20:50:db:73:c5:03:4a:ed:ad:8d:04:e5:
cf:bc:65:70:41:c1:99:a4:6e:57:6a:7f:31:dc:ca:
a4:dd:8e:bc:b1:55:6a:b5:6a:98:ff:7c:18:d6:93:
b8:b2:22:8b:c8:bb:a2:95:d6:47:0c:20:8a:3b:18:
3e:6c:c2:4b:e8:9c:9b:86:66:dd:7e:8e:37:b6:5a:
8c:e9:5d:1c:b0:47:a8:9c:74:82:5e:80:fb:89:ed:
ec:c2:bd:d6:5d:97:33:32:82:98:a9:a6:fa:80:77:
28:6a:59:8b:78:6a:fa:34:bf:bc:5f:d4:91:e7:46:
18:1e:13:f9:bd:48:4a:2c:db:d6:0b:46:61:e7:bf:
ce:69:cc:0b:47:cb:2f:7d:e7:2b:67:04:7d:27:0b:
33:b3:9d:78:d8:86:82:3f:f8:a0:f6:0f:11:35:68:
12:ef:b2:a5:04:dd:12:e5:e8:13:23:30:e7:01:03:
06:4a:c4:7b:05:88:d9:c4:72:06:4a:7c:38:56:ef:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:D2:BD:9C:50:7F:EF:B6:F5:83:62:D8:9F:BD:49:E4:8A:59:D1
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/RBjSvZxQf--29YNi2J-9SeSKWdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.136.0/21
46.31.200.0/21
185.48.76.0/22
Signature Algorithm: sha256WithRSAEncryption
07:2e:ad:aa:69:89:ac:e5:bf:23:da:32:de:9f:08:c2:b7:00:
f1:e1:d9:83:90:db:04:4b:76:cf:92:76:51:8d:94:46:aa:98:
95:83:aa:65:e8:46:10:8f:a1:b8:7b:54:4b:ac:41:6d:5c:25:
7e:68:a1:77:77:14:3d:d8:50:fa:3a:51:6c:2d:1c:60:ed:d0:
95:8c:53:5c:55:15:02:33:2b:27:79:37:bd:1e:0e:ec:ab:5e:
38:f9:13:3e:21:56:43:ec:e1:2c:62:d8:e7:69:99:c1:40:47:
49:b8:d8:d8:a5:71:39:4a:9d:8b:da:60:f0:27:99:fa:1d:50:
94:bb:53:da:b1:30:32:35:cd:ce:7b:ec:e3:bb:ca:1e:65:52:
8a:00:f0:c5:33:c2:ed:e1:e5:da:f9:c4:d5:89:2f:3b:b6:64:
fc:ca:43:1f:95:31:86:fd:c2:1a:ce:eb:92:52:ea:e1:e1:6c:
4a:dd:a0:6b:1f:fe:6a:c1:17:59:43:14:dd:49:e2:aa:28:21:
3c:20:fd:ae:90:44:2b:8a:94:d3:9c:6a:66:9b:3a:bd:46:19:
1a:b5:8f:07:1d:af:06:46:59:9e:dc:c9:7f:7e:c9:ea:9d:98:
33:55:3d:85:d1:82:2e:99:ca:20:35:dd:f2:53:b4:14:cb:5f:
96:f3:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-fra.rpki-client.org