Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/ccwzRZTLCKT9PHhsaNusPQZ-upk.roa
File: ccwzRZTLCKT9PHhsaNusPQZ-upk.roa (raw, json)
Hash identifier: guaZ52l2/t1Tky/agsuNSL8UKY5l7Hk+pnvXHPb8r8Y=
Subject key identifier: 71:CC:33:45:94:CB:08:A4:FD:3C:78:6C:68:DB:AC:3D:06:7E:BA:99
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 0E74076E
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/ccwzRZTLCKT9PHhsaNusPQZ-upk.roa
Signing time: Sat 01 Jan 2022 06:59:00 +0000
ROA not before: Sat 01 Jan 2022 06:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197099
IP address blocks: 178.217.136.0/21 maxlen: 21
195.43.84.0/23 maxlen: 23
217.30.4.0/22 maxlen: 22
185.81.107.0/24 maxlen: 24
91.216.149.0/24 maxlen: 24
185.81.106.0/24 maxlen: 24
2a03:63e0::/29 maxlen: 29
2a03:63e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242485102 (0xe74076e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: Jan 1 06:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71cc334594cb08a4fd3c786c68dbac3d067eba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:95:76:a7:d2:92:68:4f:8a:83:d9:56:0b:
b1:ca:d6:ce:c1:3a:7d:62:e7:9e:71:93:93:d1:75:
a7:71:78:01:cf:ab:40:07:08:f1:17:e6:87:4f:be:
b4:98:75:eb:2b:e2:40:a3:0d:c4:2b:39:8a:b8:11:
43:56:28:10:a0:f6:33:5d:87:1a:fc:be:01:76:9c:
63:30:b1:bc:f3:dd:14:14:8f:2b:73:5e:39:f2:10:
b8:96:e3:7e:a1:cd:20:31:57:d5:bb:80:5f:49:41:
d2:69:b1:a4:0f:5a:16:4f:bb:82:ff:a8:8c:e7:0e:
78:54:34:89:9a:1b:0f:37:8a:cb:f8:4a:4f:6f:31:
8e:5f:ad:bd:ac:1a:ac:60:7c:e1:e9:f5:c0:ee:2a:
aa:f6:9a:e0:e1:17:4d:33:29:a4:6f:e0:ee:f0:dd:
8b:0f:84:d2:ec:4d:4a:59:f7:0f:60:ce:12:83:83:
49:f4:35:bb:56:f0:75:a6:cb:4b:a2:10:f2:ca:43:
54:f7:4d:3b:95:b0:b6:f0:c5:08:28:02:ee:46:ac:
2e:b7:c8:e0:1e:73:d1:76:de:b6:6b:98:f8:86:e7:
62:6d:5d:eb:dd:63:51:c3:b8:3d:41:a3:7e:00:71:
a7:24:64:5a:72:94:22:c0:1d:7c:e0:4a:c9:ee:72:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:33:45:94:CB:08:A4:FD:3C:78:6C:68:DB:AC:3D:06:7E:BA:99
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/ccwzRZTLCKT9PHhsaNusPQZ-upk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.149.0/24
178.217.136.0/21
185.81.106.0/23
195.43.84.0/23
217.30.4.0/22
IPv6:
2a03:63e0::/29
Signature Algorithm: sha256WithRSAEncryption
69:bf:17:1a:87:f5:ab:a0:92:61:c0:91:af:cf:eb:70:a9:9c:
a4:33:31:23:01:4b:52:a9:c9:ec:85:8a:a6:00:54:a8:9f:26:
db:b7:cc:09:40:33:f0:1a:31:eb:1f:4d:7f:49:e2:a8:73:57:
74:2f:ac:3f:aa:4d:ec:ed:90:0d:31:96:87:f8:e7:1c:84:f4:
ec:a6:74:84:89:08:1c:61:1a:40:31:cb:90:52:4c:46:5e:58:
d4:2b:b3:cf:0e:14:e9:e9:27:97:10:54:ad:b0:62:7e:b6:1c:
a4:22:73:89:85:70:02:d3:06:20:4e:2b:ac:2a:4c:2d:6d:da:
8e:79:8b:df:5a:41:d9:9e:3f:14:7f:97:a3:bd:e0:bf:00:35:
4e:c0:5d:3e:06:8a:09:0f:e1:f0:21:a8:2e:e0:30:0e:d1:43:
76:b5:21:92:d7:c0:dd:7c:eb:66:0c:56:6a:6d:1f:ba:b5:6d:
9d:0a:c9:c9:44:47:7e:a9:b5:17:1f:83:e9:37:b6:9f:58:4b:
a9:c8:08:c2:f8:1f:b2:f3:01:3b:e9:d9:32:51:17:7a:52:d9:
10:a6:5e:d9:49:46:74:e4:4b:59:55:14:9c:e2:f8:a0:dd:a6:
ef:a1:45:ce:4c:cc:b8:25:a4:16:77:d7:23:ad:06:18:f1:bf:
2f:d4:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:16 2024 by rpki-client on console-ams.rpki-client.org