Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/4nEUojiuJFNdeL-XfhfxXO5_HsA.roa
File: 4nEUojiuJFNdeL-XfhfxXO5_HsA.roa (raw, json)
Hash identifier: iQDr0r9MTQNXwfK6GWwyQjefLcyooss+5Y3vE5HDo8M=
Subject key identifier: E2:71:14:A2:38:AE:24:53:5D:78:BF:97:7E:17:F1:5C:EE:7F:1E:C0
Certificate issuer: /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial: 0183601650323EB7B1A424A0014A2BB24612
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/4nEUojiuJFNdeL-XfhfxXO5_HsA.roa
Signing time: Wed 21 Sep 2022 12:46:58 +0000
ROA not before: Wed 21 Sep 2022 12:46:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29650
IP address blocks: 79.140.128.0/20 maxlen: 24
212.84.40.0/21 maxlen: 24
84.51.224.0/19 maxlen: 24
45.139.240.0/22 maxlen: 24
212.78.224.0/19 maxlen: 24
82.195.128.0/19 maxlen: 24
2001:1bd8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:16:50:32:3e:b7:b1:a4:24:a0:01:4a:2b:b2:46:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Validity
Not Before: Sep 21 12:46:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e27114a238ae24535d78bf977e17f15cee7f1ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:91:1a:26:72:0d:b4:d4:64:b8:23:74:4b:
0b:5f:85:66:8c:aa:ba:db:49:36:cb:46:ae:64:cd:
53:15:a5:b5:b9:78:53:60:f6:7e:ed:97:a3:99:ed:
8b:db:0b:40:46:d5:68:af:e6:63:f6:34:c7:80:90:
a1:92:d0:57:67:f0:4f:3f:ee:8b:d1:4c:e5:45:64:
75:75:8b:b9:62:81:c4:14:36:44:5b:02:2e:3c:23:
c2:39:f1:02:9d:53:57:39:0f:cb:95:b5:ec:de:16:
e9:59:d8:5c:66:78:21:37:f0:15:f2:37:09:15:ff:
bd:cb:aa:ce:10:e1:67:87:1b:3b:be:07:eb:28:77:
8e:1a:c8:44:c4:19:43:b7:e6:2f:61:09:c7:b1:98:
86:04:2c:dd:4a:2f:17:f9:18:36:3d:20:7b:0b:e9:
87:3b:88:0a:69:f0:e5:02:92:4d:2f:59:52:36:aa:
d2:ee:85:8c:00:13:5d:e2:2b:2e:b7:a6:15:e8:f7:
ef:2c:9c:f3:66:45:a4:a4:48:5c:d3:c2:1b:d9:d1:
3d:06:36:d6:f3:75:e3:53:27:86:c9:f4:e8:df:86:
81:24:b0:8f:61:56:69:12:ec:de:8c:46:c0:6c:4c:
6a:3c:b8:29:48:30:82:38:b7:19:fb:68:4e:f4:a1:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:14:A2:38:AE:24:53:5D:78:BF:97:7E:17:F1:5C:EE:7F:1E:C0
X509v3 Authority Key Identifier:
keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/4nEUojiuJFNdeL-XfhfxXO5_HsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.240.0/22
79.140.128.0/20
82.195.128.0/19
84.51.224.0/19
212.78.224.0/19
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
2e:b9:e6:f7:c6:83:bd:99:aa:a1:b5:a1:19:fe:70:d8:f8:c6:
42:a4:84:21:3c:34:18:11:e2:e0:5d:c3:fe:f3:e5:e6:6a:c6:
01:ba:36:62:a1:a7:b6:02:9a:ef:76:a9:99:89:e8:cf:cf:d3:
49:fc:7b:a1:6d:71:f2:04:df:c8:c2:e5:ff:e5:da:21:13:63:
0b:1f:23:8d:07:5d:34:65:5f:d5:53:42:27:19:57:da:78:bf:
81:82:d9:f7:42:c9:64:ff:6f:38:3e:ec:09:9a:5c:04:71:11:
45:6e:07:99:55:dc:16:41:09:0f:07:b9:dc:e1:83:b9:1a:bf:
7d:1e:d7:ec:93:78:7a:a8:05:8a:83:28:77:bf:90:74:ff:1c:
ca:b5:24:35:79:b8:0d:4e:e0:29:2d:82:0e:35:ea:b4:60:32:
7b:b8:c6:00:28:1f:87:bb:7b:28:ea:bd:21:ad:ad:e7:50:ff:
96:ab:23:21:87:a5:10:10:56:d7:90:3a:f3:d5:63:98:aa:9b:
c1:50:4f:71:99:e3:90:67:09:d6:95:24:c7:f6:57:54:9c:ff:
e8:32:e2:83:ec:cd:fc:66:cd:7b:65:24:14:8d:6d:e2:ba:b6:
04:44:58:ae:0a:09:96:03:e8:1b:08:8c:07:76:c6:c1:2a:fa:
35:5d:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:26 2023 by rpki-client on console-fra.rpki-client.org