Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/o-ide7E9BodKLcZCwZMv8APquyU.roa
File: o-ide7E9BodKLcZCwZMv8APquyU.roa (raw, json)
Hash identifier: vAQQAfU/qlwp9nM1FmSg3+FbA7YNFR9CRUUm1+kwOFU=
Subject key identifier: A3:E8:9D:7B:B1:3D:06:87:4A:2D:C6:42:C1:93:2F:F0:03:EA:BB:25
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 01828C2613A5A8D495679278B46F5E149695
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/o-ide7E9BodKLcZCwZMv8APquyU.roa
Signing time: Thu 11 Aug 2022 09:04:41 +0000
ROA not before: Thu 11 Aug 2022 09:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206189
IP address blocks: 213.217.24.0/22 maxlen: 22
185.220.44.0/22 maxlen: 22
185.196.56.0/22 maxlen: 22
193.27.246.0/23 maxlen: 23
193.161.220.0/22 maxlen: 22
193.27.248.0/23 maxlen: 23
2a09:5000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:26:13:a5:a8:d4:95:67:92:78:b4:6f:5e:14:96:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Aug 11 09:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3e89d7bb13d06874a2dc642c1932ff003eabb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:d3:f4:09:41:8c:f7:dd:70:14:36:9a:6f:
5c:c8:e6:1f:ea:ed:22:97:15:f9:3c:70:6e:2f:28:
30:3b:0b:aa:c8:f6:3d:7a:96:b8:4d:42:00:2d:3f:
0b:eb:0c:79:01:b9:13:b3:a1:22:bc:70:56:ee:4a:
4e:8a:a6:74:91:ce:bf:df:3a:92:55:8f:8f:b1:43:
e1:df:30:5e:a5:bb:90:3f:07:6a:02:37:6f:77:e7:
1a:68:8e:b4:b7:6f:92:79:bb:ae:31:eb:f8:0d:37:
a0:4e:d9:e9:00:64:03:b8:95:da:64:83:0d:b8:7e:
29:8e:68:f3:bd:dd:19:9d:43:b4:fb:51:84:38:2c:
c8:75:da:67:d2:20:76:33:22:bc:41:cb:6f:fc:e9:
44:e5:a9:92:e0:bb:d3:0e:90:d9:11:7e:61:11:c6:
fd:78:d8:c7:73:99:84:d1:bc:27:1b:07:ab:3f:81:
04:c6:22:7d:36:3f:6b:e7:92:66:ee:34:8f:93:8b:
e9:4d:5a:a6:67:25:08:11:34:85:3c:b3:89:20:57:
3b:f3:67:69:f5:8f:78:22:32:de:7e:95:0c:0f:b3:
d6:ba:62:fc:98:48:e9:68:fc:46:d8:ed:22:e2:4f:
bf:1f:b7:7e:ae:59:14:db:a4:5a:36:f7:d9:9a:05:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:9D:7B:B1:3D:06:87:4A:2D:C6:42:C1:93:2F:F0:03:EA:BB:25
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/o-ide7E9BodKLcZCwZMv8APquyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.56.0/22
185.220.44.0/22
193.27.246.0-193.27.249.255
193.161.220.0/22
213.217.24.0/22
IPv6:
2a09:5000::/29
Signature Algorithm: sha256WithRSAEncryption
7e:ca:99:f3:97:58:8f:57:55:eb:bd:50:84:e2:fb:a6:ef:e4:
1d:e9:ac:80:07:bb:35:8d:d8:15:19:78:20:7c:07:cb:a4:c5:
f2:f0:61:76:c9:eb:d4:02:14:1b:74:d3:8b:77:2e:6a:de:ae:
f6:d3:98:2d:04:fa:10:85:a5:53:68:e0:66:b6:e4:d9:14:ac:
4e:c4:59:12:e1:18:71:c9:dd:ea:f2:6e:82:6c:c3:71:7e:ed:
ce:1c:f0:c0:ad:df:da:d3:2a:d5:14:0c:c6:95:ca:36:b0:63:
de:52:3b:76:ce:ac:de:bc:57:b4:c7:12:64:68:f1:ae:f7:56:
3c:ce:03:21:2a:a5:b7:97:03:9f:d7:87:8d:14:58:f3:b6:55:
ab:4c:10:88:2f:cc:3c:e3:c5:ef:6a:6c:fc:4e:54:1c:6b:50:
ca:cf:51:e7:b8:61:76:bd:8b:3a:32:c0:ca:62:3d:57:36:4e:
18:dc:1e:28:ef:30:87:b3:50:fb:86:a8:77:2c:24:54:62:4b:
22:c0:57:b8:49:44:46:e1:cd:a7:a3:14:c1:3b:89:b3:8e:9c:
e7:3e:bd:e4:fa:ed:f2:7e:29:ee:2e:0a:f9:6f:19:af:19:b2:
1f:cd:97:ba:8a:73:81:b4:70:36:e7:ed:a3:ef:3a:65:4b:04:
61:68:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:35 2024 by rpki-client on console-fra.rpki-client.org