Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/oFnA7RP_WiA2K4nln4c-QTcrfHw.roa
File: oFnA7RP_WiA2K4nln4c-QTcrfHw.roa (raw, json)
Hash identifier: MeMqbkHQZKod/b2SQIg5w0D4ccpOcadIZE0/WgiRnFk=
Subject key identifier: A0:59:C0:ED:13:FF:5A:20:36:2B:89:E5:9F:87:3E:41:37:2B:7C:7C
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 08107F02
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/oFnA7RP_WiA2K4nln4c-QTcrfHw.roa
Signing time: Sat 01 Jan 2022 07:52:40 +0000
ROA not before: Sat 01 Jan 2022 07:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199669
IP address blocks: 185.195.170.0/23 maxlen: 24
91.109.200.0/21 maxlen: 24
46.29.118.0/23 maxlen: 24
185.10.44.0/24 maxlen: 24
185.10.44.0/22 maxlen: 24
2a03:ec0::/48 maxlen: 64
2a03:ec0:1::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135298818 (0x8107f02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jan 1 07:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a059c0ed13ff5a20362b89e59f873e41372b7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:66:9d:49:d9:5c:9b:3d:3a:c9:c6:6a:86:
a2:80:79:65:64:21:eb:cf:c5:df:3c:e4:39:75:36:
a3:75:ae:f7:07:45:53:31:a1:a2:df:f6:ce:c0:97:
1c:83:fe:e0:ba:58:f3:a6:a6:48:bd:1f:52:92:dc:
1a:b1:7e:90:d5:ad:04:7f:01:7d:99:8e:38:42:6b:
9d:92:0e:c9:3e:fd:25:6b:8d:32:08:3e:fc:1f:c6:
9b:af:08:cc:96:83:ba:39:cb:23:56:ec:56:a6:84:
c9:01:8f:db:ff:ce:7b:a4:a1:08:29:99:6a:8b:7a:
a3:f6:e5:1e:b9:ce:c5:63:ae:55:4a:c7:0c:d7:f7:
18:ee:a4:a4:01:65:85:2f:3a:cd:93:d6:af:e6:c0:
1f:61:7e:84:b2:ed:22:e8:92:ae:6f:21:81:e5:7c:
7f:a6:c4:9a:2f:d0:40:88:c2:d7:83:8e:2b:a1:a0:
65:67:dd:a8:6d:f9:34:ef:ef:3e:63:93:27:19:8c:
4a:6f:cb:b6:bd:54:97:01:cb:a2:e2:04:6b:ba:7f:
8b:28:32:23:57:aa:a3:ba:95:bc:0a:22:7e:65:57:
2f:ba:37:46:34:83:3a:e3:58:a5:02:01:69:14:49:
9f:a9:63:8b:e9:eb:a0:a5:03:58:93:6c:95:f3:65:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:59:C0:ED:13:FF:5A:20:36:2B:89:E5:9F:87:3E:41:37:2B:7C:7C
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/oFnA7RP_WiA2K4nln4c-QTcrfHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.118.0/23
91.109.200.0/21
185.10.44.0/22
185.195.170.0/23
IPv6:
2a03:ec0::/47
Signature Algorithm: sha256WithRSAEncryption
6d:0e:26:11:8d:af:d9:eb:ae:36:3d:d2:24:68:9f:f8:b7:e2:
92:a9:ce:3a:31:b1:2f:55:68:0f:11:c8:8f:22:14:d4:e9:29:
57:84:79:fb:b3:ba:e3:1b:62:f7:ba:1b:99:07:d0:43:54:e6:
c2:db:de:fd:04:a0:3e:a9:1b:7e:c7:b0:fe:e6:fd:e8:f2:d7:
42:03:07:2e:41:a3:b3:8f:53:bc:68:8a:a7:7d:62:6d:05:bd:
09:3b:8b:99:b5:95:c5:ae:b4:62:ef:bf:cf:2f:e8:92:f1:3a:
d9:d6:4f:bd:27:22:d2:82:9b:09:ff:21:17:b8:c2:05:5e:dc:
a0:80:71:a7:80:b3:8f:8c:a7:11:0d:0c:97:31:66:60:33:a6:
c5:3c:3c:2a:a5:fe:f0:0c:97:8d:1a:0c:01:f6:ff:5a:51:b7:
40:e3:5a:83:30:5b:28:8e:2c:f0:53:2f:d2:61:c5:f4:19:2b:
54:45:73:b6:fe:53:02:28:d4:89:2c:cf:e3:2c:23:37:97:5d:
ff:ba:a9:bf:8e:80:21:65:cb:b3:dc:ba:82:8b:c9:18:8e:e8:
75:13:d6:9f:98:f8:0f:2a:51:ba:0d:f0:6f:fa:ec:39:d2:8b:
69:45:f2:b4:6c:22:b1:6c:9b:31:35:05:14:79:71:fa:0e:1c:
02:88:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org