Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/A5uC4zaet022ykxYbhRkQBN1IDA.roa
File: A5uC4zaet022ykxYbhRkQBN1IDA.roa (raw, json)
Hash identifier: YsXMeqZKqBvPXIkuHfQy75l9E/BU76yGDVFmiEvuKi4=
Subject key identifier: 03:9B:82:E3:36:9E:B7:4D:B6:CA:4C:58:6E:14:64:40:13:75:20:30
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 018321220D9AE7B37D0355ACFAD592E6600F
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/A5uC4zaet022ykxYbhRkQBN1IDA.roa
Signing time: Fri 09 Sep 2022 07:23:43 +0000
ROA not before: Fri 09 Sep 2022 07:23:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 194.180.110.0/24 maxlen: 24
194.180.115.0/24 maxlen: 24
194.180.150.0/24 maxlen: 24
194.180.154.0/24 maxlen: 24
2a0f:5880::/29 maxlen: 29
2a0f:2a80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:22:0d:9a:e7:b3:7d:03:55:ac:fa:d5:92:e6:60:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Sep 9 07:23:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=039b82e3369eb74db6ca4c586e14644013752030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:11:7e:a3:f0:35:f2:97:d3:32:bb:03:5f:
45:8e:e8:75:ba:bd:14:6b:e4:3d:66:f5:f9:e0:06:
06:c8:25:7d:bd:d7:1e:b4:96:d7:86:ec:a2:94:23:
32:f2:2a:3d:d8:e9:3b:f3:08:67:be:f4:79:73:8f:
2e:7e:26:f0:26:e4:e7:6f:7c:f2:df:8a:e8:79:65:
73:a5:54:50:7c:10:cc:6f:df:29:2d:1a:6c:6c:61:
7b:15:9c:86:3a:20:80:a4:d2:d6:ce:07:28:d6:c1:
e1:25:e6:5f:ce:15:91:d1:44:dc:89:6b:33:e8:cc:
c5:0b:5e:b4:31:11:ca:5d:71:78:7b:5c:f8:a4:6b:
79:fe:eb:22:a4:29:67:c3:98:5a:00:f8:e9:22:28:
0c:aa:0d:4b:c1:16:58:2c:3f:4f:fd:df:c0:f0:02:
16:ad:cd:8d:6d:81:83:3b:20:96:e5:43:c4:9a:74:
9c:d7:70:e3:fd:9e:50:f4:7f:b0:e8:7f:11:03:8d:
11:3a:f0:7b:f6:db:d5:87:cc:07:03:d8:62:2e:15:
5d:59:18:4e:6b:51:09:f3:15:2d:60:fd:aa:8e:22:
2e:44:46:28:c7:69:ea:a4:6f:77:5a:ec:22:ee:0f:
55:8b:36:c9:ef:50:6d:ec:a9:40:bb:35:f6:f6:7a:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:82:E3:36:9E:B7:4D:B6:CA:4C:58:6E:14:64:40:13:75:20:30
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/A5uC4zaet022ykxYbhRkQBN1IDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.110.0/24
194.180.115.0/24
194.180.150.0/24
194.180.154.0/24
IPv6:
2a0f:2a80::/29
2a0f:5880::/29
Signature Algorithm: sha256WithRSAEncryption
8c:01:f9:b9:b8:b7:da:80:54:01:37:4a:7d:7f:ef:4e:95:b6:
13:ef:fd:b6:f8:9c:03:9c:ea:14:dc:ba:4e:83:6b:da:fc:49:
3c:d0:47:29:8d:fd:52:87:78:80:02:8e:9e:0f:61:0e:21:b0:
32:81:6d:e4:bd:91:9f:3a:71:15:ee:16:5f:69:f9:3b:05:31:
30:f1:50:28:ac:bd:c6:9b:8c:1a:02:ba:0d:97:1f:8c:71:03:
73:05:5f:0f:05:cb:9d:da:ed:ca:0d:98:6a:5a:6f:22:90:74:
cf:5a:6a:3d:39:cb:38:44:0d:dd:b7:3c:ce:3f:96:30:c6:da:
9b:fb:17:06:b9:66:77:86:17:66:53:1d:32:35:93:af:d1:91:
71:cf:5f:99:10:d1:9c:33:7c:e9:78:35:d5:99:5d:fe:7d:05:
df:f0:0b:70:01:5d:be:d3:e7:47:35:5b:96:8a:81:d4:d5:a3:
77:43:59:55:4a:27:65:f7:b8:4d:be:d2:c1:e8:96:71:52:a5:
92:b0:c1:c0:5d:3f:f0:0b:92:fb:a5:c6:15:7c:5e:4f:b9:d2:
8b:88:08:d6:1e:af:64:f4:85:28:41:99:a5:ad:d9:7b:80:94:
d2:06:68:4a:dc:7d:54:1d:ba:ff:7f:fc:84:3a:ba:b2:2f:f5:
8b:ee:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-fra.rpki-client.org