Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/pLZ2s1Hv6wLb_tdZ7eiueaDDwh0.roa
File: pLZ2s1Hv6wLb_tdZ7eiueaDDwh0.roa (raw, json)
Hash identifier: OEQaubTDy2okLbKkSXfoxje1pMLyNIi7j99puGuYFTU=
Subject key identifier: A4:B6:76:B3:51:EF:EB:02:DB:FE:D7:59:ED:E8:AE:79:A0:C3:C2:1D
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 1BBAF3D5
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/pLZ2s1Hv6wLb_tdZ7eiueaDDwh0.roa
Signing time: Sat 01 Jan 2022 12:57:50 +0000
ROA not before: Sat 01 Jan 2022 12:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31510
IP address blocks: 212.56.160.0/19 maxlen: 19
185.72.72.0/22 maxlen: 22
83.175.126.0/24 maxlen: 24
156.67.200.0/21 maxlen: 21
156.67.200.0/24 maxlen: 24
83.175.64.0/18 maxlen: 18
83.175.86.0/24 maxlen: 24
2a02:6180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465236949 (0x1bbaf3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Jan 1 12:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4b676b351efeb02dbfed759ede8ae79a0c3c21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:68:0b:78:9f:5d:24:11:3a:78:43:80:a5:
e7:2b:9f:87:34:f2:1a:dd:15:12:a6:3f:2c:2d:5a:
6f:3d:28:f1:ea:a3:9b:e7:4a:c0:51:a9:9b:d3:b3:
3f:a7:30:2d:f4:ac:2f:04:75:46:ac:35:e4:88:da:
ec:66:5e:6c:0c:7c:fe:f8:6c:5c:16:fa:3b:d9:b0:
76:e3:15:c8:ab:01:f3:10:a4:af:2b:6f:f2:5e:1c:
f6:2d:eb:6d:fb:21:78:0a:7c:a8:0b:a2:9f:c9:54:
ec:e4:09:26:2d:d9:82:e5:2e:a5:2f:44:ef:8f:41:
cd:0a:e0:1b:66:80:23:a2:dd:22:16:3b:cd:fc:48:
e2:90:a4:e6:53:9e:cd:8d:00:80:db:47:78:b4:2c:
30:19:8d:67:5b:c7:4f:53:63:f1:34:fd:d1:76:d8:
b9:ac:b6:2f:cf:53:64:5c:ed:a8:f0:ac:d5:0b:af:
c9:75:17:de:d2:10:40:2f:fd:0b:1c:db:c8:f7:c3:
13:e8:b5:6d:47:49:42:be:59:67:c7:3a:90:d5:fb:
1e:d5:2a:1e:52:5f:23:7f:73:c1:cd:07:98:56:af:
38:13:6d:72:df:12:3e:74:b7:ea:fd:b2:e0:37:09:
b7:cb:bd:77:23:c9:e3:96:e6:f0:93:b7:d0:4e:34:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:76:B3:51:EF:EB:02:DB:FE:D7:59:ED:E8:AE:79:A0:C3:C2:1D
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/pLZ2s1Hv6wLb_tdZ7eiueaDDwh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.64.0/18
156.67.200.0/21
185.72.72.0/22
212.56.160.0/19
IPv6:
2a02:6180::/32
Signature Algorithm: sha256WithRSAEncryption
36:33:89:4f:97:11:ee:9f:33:41:93:5e:14:8c:d0:8d:1a:d0:
1c:64:99:8a:d4:62:f5:63:1f:a9:85:9a:78:e6:dc:4d:e3:9a:
f0:c1:ff:e9:eb:4a:fc:e5:5c:b9:14:47:69:9d:1f:f7:cf:d3:
68:52:e9:3b:c3:72:9c:94:53:06:c3:a8:3e:5a:b0:75:dd:17:
13:f4:73:64:ec:6c:74:44:bd:39:6e:ad:4b:cd:bb:bc:1f:f5:
9d:72:97:b3:60:6c:7a:6a:d2:51:05:4b:1f:de:1e:e0:4c:2b:
28:62:bf:62:72:b4:07:78:5d:42:83:60:e6:de:55:0b:82:e9:
54:d8:21:7f:b8:57:97:2f:1b:13:e4:a3:fb:d3:23:7e:4b:a8:
c1:b1:9a:61:07:f3:58:1b:d5:00:c0:9e:f4:bf:48:3b:8b:91:
9b:3a:49:12:62:b6:75:4d:1f:95:a9:af:8f:c7:d7:24:50:fb:
8c:73:4a:2a:fc:8b:c3:8f:3c:a3:a0:3d:3c:06:ec:b9:e6:9a:
41:6e:91:a7:94:57:e0:11:dc:ab:0f:46:67:bb:c2:7d:8e:77:
dc:ba:9b:19:ad:b3:9b:a3:15:3b:53:39:0d:c3:31:64:19:a1:
b5:14:a8:5a:1e:c4:30:e0:64:37:de:a9:b9:1f:f9:08:f8:d6:
9e:ef:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:23 2024 by rpki-client on console-ams.rpki-client.org