Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ck4bhr4ekfwiM7K678wIlpRL-NI.roa
File: ck4bhr4ekfwiM7K678wIlpRL-NI.roa (raw, json)
Hash identifier: tyR0n8lLFgznI6XfycgcJj6cCqtAQP7mCPeLd3aAW1Y=
Subject key identifier: 72:4E:1B:86:BE:1E:91:FC:22:33:B2:BA:EF:CC:08:96:94:4B:F8:D2
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 082FB769
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ck4bhr4ekfwiM7K678wIlpRL-NI.roa
Signing time: Wed 29 Jun 2022 08:39:02 +0000
ROA not before: Wed 29 Jun 2022 08:39:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 194.180.110.0/24 maxlen: 24
194.180.115.0/24 maxlen: 24
194.180.150.0/24 maxlen: 24
2a0f:5880::/29 maxlen: 29
2a0f:2a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137344873 (0x82fb769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jun 29 08:39:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=724e1b86be1e91fc2233b2baefcc0896944bf8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:ee:84:c4:05:b5:16:2c:29:52:e8:23:47:
be:ed:f8:b4:c2:2e:80:b1:d7:66:64:b8:57:46:a8:
71:8c:42:71:c3:aa:fe:e3:a5:c9:ab:99:4c:54:99:
4f:d0:cb:1a:dc:56:47:b5:8b:c3:a3:32:7d:d5:dc:
60:ef:0f:57:2f:26:95:79:b7:a9:c1:5d:4d:f2:17:
f0:46:89:a6:fa:e7:1f:ad:5c:c0:11:94:b7:3e:91:
17:01:7b:e0:52:4e:5a:3b:20:2b:08:8f:31:68:bb:
bd:b3:9c:d1:dc:ff:97:3e:fd:ca:9f:2d:85:dc:62:
fa:78:13:cf:d2:c0:68:5f:ba:00:47:41:96:e7:b9:
93:20:46:f7:22:81:f9:1b:c7:23:35:db:0b:aa:c4:
f2:f9:1c:c9:00:be:5c:5d:3f:93:f0:2a:4c:3e:22:
2b:32:b8:94:2e:08:bf:31:5f:5d:21:c7:a4:f4:57:
5f:60:54:7f:e3:59:b8:8b:db:1d:81:56:f6:0a:04:
e5:e2:ba:67:5a:27:eb:6e:2c:2b:27:a6:62:f4:92:
c4:ad:56:72:9b:ef:cc:51:0f:56:96:7b:38:a7:7d:
fd:78:d0:c6:5c:52:ea:b4:7b:69:15:9b:f6:a2:42:
90:d1:82:14:1c:26:b0:32:18:76:c5:5c:88:5b:b7:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4E:1B:86:BE:1E:91:FC:22:33:B2:BA:EF:CC:08:96:94:4B:F8:D2
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ck4bhr4ekfwiM7K678wIlpRL-NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.110.0/24
194.180.115.0/24
194.180.150.0/24
IPv6:
2a0f:2a80::/29
2a0f:5880::/29
Signature Algorithm: sha256WithRSAEncryption
b3:1d:c5:dc:26:e4:ea:b7:ec:9f:29:a6:99:b4:d6:2b:38:2d:
02:1b:b3:7b:4b:3d:c9:12:6f:25:d1:0d:68:7c:33:21:ed:03:
c9:44:25:01:3c:a2:0b:cf:72:b9:4e:5c:34:86:e3:3f:65:2a:
24:97:d9:dc:68:d1:5b:b7:61:64:0e:57:3d:cc:4b:2b:28:6a:
a4:17:69:f3:56:b5:37:e3:de:06:47:7e:07:47:77:3a:60:94:
d6:00:b1:4c:4a:28:50:b0:a8:a8:69:d0:3c:b8:d2:73:52:5b:
a6:b6:ce:2a:2f:ab:84:8e:20:3e:26:fd:0f:a1:f5:e4:85:8e:
b5:fe:91:64:99:c8:f7:99:a2:4e:46:a4:78:db:49:d7:7b:90:
d9:65:6c:c0:3a:be:ce:24:91:08:f0:9e:79:78:ba:05:31:1e:
ab:c8:49:57:1e:69:73:1b:2a:29:d8:e1:2e:a0:fd:08:ff:b7:
c2:ee:53:3b:a0:5a:14:eb:b8:0c:d3:48:0b:10:cd:cb:a6:8c:
9f:4b:56:62:6f:a8:5b:51:61:f5:8b:10:f8:a1:af:06:76:58:
33:93:be:e5:84:c3:15:95:02:35:d1:73:a5:1b:3e:d6:8a:c9:
b4:f7:40:ec:a7:26:a7:bb:33:93:a5:1c:dd:57:98:eb:ab:cb:
25:62:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org