Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/4Wbdk5hr7PJ670BxfG0wZgDSMUM.roa
File: 4Wbdk5hr7PJ670BxfG0wZgDSMUM.roa (raw, json)
Hash identifier: la60uqeq8A9ebYH/gbN+85+pqPFuBgOP5NYDao1rxGE=
Subject key identifier: E1:66:DD:93:98:6B:EC:F2:7A:EF:40:71:7C:6D:30:66:00:D2:31:43
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 0A52B849
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/4Wbdk5hr7PJ670BxfG0wZgDSMUM.roa
Signing time: Sat 01 Jan 2022 10:59:33 +0000
ROA not before: Sat 01 Jan 2022 10:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39806
IP address blocks: 195.190.149.0/24 maxlen: 24
195.190.150.0/24 maxlen: 24
195.190.154.0/24 maxlen: 24
195.190.157.0/24 maxlen: 24
185.166.232.0/23 maxlen: 24
185.166.235.0/24 maxlen: 24
185.166.234.0/24 maxlen: 24
2a0b:2200::/29 maxlen: 64
2a0f:c140::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173193289 (0xa52b849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Jan 1 10:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e166dd93986becf27aef40717c6d306600d23143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:7a:79:e2:51:ab:d4:e1:89:17:af:da:32:
3c:bf:c7:0f:91:4c:ef:34:a3:23:51:65:11:24:21:
80:8c:fb:ba:c0:56:0d:a9:e4:85:b5:3a:d5:bc:b9:
6b:25:8f:e9:25:e9:4e:0f:35:8b:a3:8e:d0:2a:c2:
5e:6b:81:a0:4c:8c:83:76:a4:27:b2:43:ca:95:90:
bd:48:53:05:f5:c3:bd:dd:c2:87:ff:e0:23:4f:31:
eb:b4:c5:f5:ad:f7:de:64:bf:9d:39:fe:43:43:89:
82:a4:ea:52:93:63:50:67:0a:f0:d8:56:a4:9f:f4:
ec:2b:6e:c9:df:7a:1c:fc:ae:c5:b4:c7:c0:53:31:
be:81:25:41:5d:0f:48:16:21:ac:b9:ee:04:5e:82:
7b:22:cd:d8:d8:8c:39:e1:e0:8c:61:a1:8b:bd:99:
38:fa:21:d0:f0:60:a2:8c:a1:10:82:9e:e5:1d:37:
0e:63:99:f9:75:46:cf:0a:4b:f2:ed:d5:ec:5d:22:
58:96:cc:d7:70:1e:48:a5:e7:51:8d:31:1c:7c:7c:
45:60:9e:a1:ac:9e:db:58:c2:09:91:30:29:16:70:
0e:ca:2b:2a:d1:d6:8e:d3:44:ed:7e:3a:7c:2f:db:
27:eb:f2:7a:86:49:57:69:a5:b7:41:6c:53:d9:46:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:66:DD:93:98:6B:EC:F2:7A:EF:40:71:7C:6D:30:66:00:D2:31:43
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/4Wbdk5hr7PJ670BxfG0wZgDSMUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.232.0/22
195.190.149.0-195.190.150.255
195.190.154.0/24
195.190.157.0/24
IPv6:
2a0b:2200::/29
2a0f:c140::/29
Signature Algorithm: sha256WithRSAEncryption
a2:63:3b:33:8a:03:cd:44:2f:e7:06:db:22:9e:d2:ba:54:26:
bf:d8:25:57:c0:37:a6:d4:a9:24:82:23:82:db:53:95:7b:fd:
2d:4d:f7:7a:12:e5:51:70:38:52:fb:cf:13:65:4f:7f:37:3a:
db:b9:c3:39:14:cb:4f:3d:0e:4e:51:86:49:fb:ec:c3:b6:a7:
1f:f2:5f:f8:cc:cc:2d:8f:1f:88:45:39:0d:81:0d:bd:98:cd:
ac:dc:05:e1:df:b2:76:86:a3:7d:01:53:d7:89:f3:4f:24:e7:
df:96:ac:35:53:a6:bb:39:ee:52:07:11:cf:1d:a1:1b:36:ae:
6e:10:f0:59:8f:ec:68:35:7f:7a:42:d2:25:01:91:f6:00:4a:
55:7f:d1:8e:42:12:66:02:43:34:25:79:35:9c:47:6d:16:eb:
98:c2:26:25:76:d4:cc:5d:35:4f:90:90:11:4c:b9:90:f7:33:
87:d8:28:e1:e2:13:84:00:af:de:32:ed:26:f4:a3:32:5d:bc:
55:3b:bc:53:d4:0d:ad:80:cd:5c:7c:97:ea:16:12:ee:21:9f:
40:2a:11:d4:f6:1b:6b:44:ce:7a:95:fe:99:7e:8d:56:4d:38:
40:62:24:73:fe:23:69:8e:cd:e0:e9:86:25:5b:10:21:02:86:
45:14:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org