Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/4EVIWCcc7qEvaCv5rsXpd1jrQ1s.roa
File: 4EVIWCcc7qEvaCv5rsXpd1jrQ1s.roa (raw, json)
Hash identifier: JN6guKI9ptj5oHJwm9xPg4A/Rb+wLe1Wz+0VL+LwATE=
Subject key identifier: E0:45:48:58:27:1C:EE:A1:2F:68:2B:F9:AE:C5:E9:77:58:EB:43:5B
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 018243903FC7566379C6A616284FF63E72E8
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/4EVIWCcc7qEvaCv5rsXpd1jrQ1s.roa
Signing time: Thu 28 Jul 2022 06:48:23 +0000
ROA not before: Thu 28 Jul 2022 06:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41436
IP address blocks: 185.167.98.0/24 maxlen: 24
185.167.96.0/24 maxlen: 24
185.167.97.0/24 maxlen: 24
185.167.99.0/24 maxlen: 24
185.229.225.0/24 maxlen: 24
185.229.224.0/24 maxlen: 24
185.229.227.0/24 maxlen: 24
113.30.188.0/24 maxlen: 24
113.30.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:90:3f:c7:56:63:79:c6:a6:16:28:4f:f6:3e:72:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jul 28 06:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0454858271ceea12f682bf9aec5e97758eb435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:5b:d7:90:14:5b:ce:fa:8d:d7:6c:14:6d:
5e:44:32:0e:ea:b3:de:37:bd:06:af:f4:ba:62:dc:
a3:d6:d5:70:1d:09:e9:5c:3e:7d:af:c7:a7:d8:61:
1a:63:47:ec:8f:18:c9:7c:e5:2b:9c:37:d8:d3:0d:
a6:6d:15:54:a2:45:6c:c4:ef:c2:49:83:7b:37:52:
37:e9:dd:26:65:e0:e0:7d:82:12:d3:28:34:c4:1e:
17:2f:02:71:c5:85:7a:b4:87:95:ec:df:ba:20:87:
bc:88:cd:9b:42:e2:46:49:4b:96:fc:06:ab:03:cf:
1e:1e:58:ab:b7:64:4f:82:cb:11:6b:51:4b:79:3e:
5b:a6:ea:e5:00:5e:ff:22:4a:a7:14:d4:7d:f9:6a:
ce:ea:93:6a:ad:d5:44:00:e7:0f:f6:0d:94:0e:54:
7f:5e:36:77:52:24:56:07:cf:33:1a:dd:84:a5:1b:
b8:b2:a3:ea:5a:70:30:55:22:80:6b:62:e4:29:01:
c5:32:39:21:b3:57:1f:ed:26:f5:f8:4c:39:0c:5d:
6d:12:c1:7c:7a:69:5d:59:97:f8:84:4c:cc:50:d1:
f5:3f:b5:82:cd:93:3a:f8:46:49:1c:59:c4:9e:54:
a6:c6:f4:95:75:ab:7c:b8:bd:85:37:84:16:90:81:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:48:58:27:1C:EE:A1:2F:68:2B:F9:AE:C5:E9:77:58:EB:43:5B
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/4EVIWCcc7qEvaCv5rsXpd1jrQ1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.30.188.0/23
185.167.96.0/22
185.229.224.0/23
185.229.227.0/24
Signature Algorithm: sha256WithRSAEncryption
80:49:3d:db:55:5c:66:82:68:b1:f7:d4:e7:d1:51:27:10:20:
43:e8:c3:5d:cb:e1:e4:d4:45:fc:40:70:3b:d2:dd:59:52:18:
df:ee:b4:30:a3:f1:26:d1:9e:99:8e:0c:b9:d8:8c:58:cc:f2:
e9:6b:4b:8f:e6:36:fd:03:e0:09:b2:c8:e9:fb:2b:ff:7d:0f:
66:15:1e:d6:45:98:14:45:f8:30:b8:9a:5c:b0:6e:c2:fd:ce:
7b:cd:6e:03:45:0c:88:62:c9:55:d2:81:69:25:38:52:b7:ca:
72:50:83:b3:df:d4:52:8e:4a:1f:1b:99:8e:98:b0:96:cf:93:
ad:a5:15:36:40:42:56:c2:0e:e3:bb:72:e5:f2:03:4c:30:a2:
c8:3c:a6:13:29:1f:76:56:67:a5:05:f4:53:f9:0f:e0:6d:f5:
6d:fe:70:6c:2a:49:cf:f5:6f:40:52:4a:94:53:aa:c9:e3:7a:
d7:47:52:18:eb:5c:0e:72:0c:3b:d8:0d:65:18:58:ae:05:3f:
1e:a1:c7:3d:d5:c1:69:67:36:06:14:e6:de:c3:90:d2:42:29:
ba:7c:63:64:37:25:d4:e5:6a:62:ac:7d:de:87:eb:6a:08:dd:
d2:1f:44:50:fa:68:4c:80:1b:9f:92:81:94:f4:f1:ff:c2:c9:
c0:ff:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:48 2024 by rpki-client on console-fra.rpki-client.org