Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/lFI03dKZNBR_YyFBORpwJbiyFvs.roa
File: lFI03dKZNBR_YyFBORpwJbiyFvs.roa (raw, json)
Hash identifier: /MmSVI1ouqCUmy1FLHNLljSs7/ssrJZyMbwprHYlVJQ=
Subject key identifier: 94:52:34:DD:D2:99:34:14:7F:63:21:41:39:1A:70:25:B8:B2:16:FB
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 018316AE420C8C983D959CA5BD9B5D7C53BF
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/lFI03dKZNBR_YyFBORpwJbiyFvs.roa
Signing time: Wed 07 Sep 2022 06:41:02 +0000
ROA not before: Wed 07 Sep 2022 06:41:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200590
IP address blocks: 188.94.152.0/23 maxlen: 24
77.240.44.0/22 maxlen: 24
87.255.200.0/23 maxlen: 24
89.223.2.0/24 maxlen: 24
194.76.124.0/22 maxlen: 24
89.223.0.0/24 maxlen: 24
79.143.20.0/22 maxlen: 24
5.188.152.0/22 maxlen: 24
178.238.78.0/23 maxlen: 24
84.252.156.0/22 maxlen: 24
5.188.64.0/22 maxlen: 24
94.126.201.0/24 maxlen: 24
185.97.112.0/22 maxlen: 24
87.255.196.0/22 maxlen: 24
87.255.194.0/23 maxlen: 24
93.190.240.0/22 maxlen: 24
2a06:580::/29 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:ae:42:0c:8c:98:3d:95:9c:a5:bd:9b:5d:7c:53:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Sep 7 06:41:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=945234ddd29934147f632141391a7025b8b216fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:c8:5d:e4:a1:38:37:6a:11:87:2e:ba:b9:
71:03:57:25:4e:97:7c:2c:29:ad:c4:05:43:ed:91:
98:bc:ae:92:a5:98:e3:97:2d:e2:75:8f:38:9d:49:
68:cc:d7:a1:75:d1:a4:a0:8f:be:9d:55:11:51:a4:
92:71:1f:1a:8c:ff:54:43:6a:3e:9c:5a:88:44:c5:
f0:5c:24:84:b8:08:ec:56:6d:9d:63:9e:5a:f1:4d:
05:0c:04:67:81:e8:f8:0e:25:b0:25:c0:4f:9c:a8:
e9:bb:bc:83:66:c2:d8:d9:f5:5f:9f:82:e8:3f:88:
a4:de:a0:e8:2c:d3:7e:bf:8b:79:f1:72:ab:36:13:
8d:4f:af:94:f1:4a:11:ed:6d:ea:8c:4a:0f:e7:20:
ba:19:db:07:46:60:a5:c6:fd:0e:11:19:7e:59:3b:
79:bc:b4:2a:3f:be:db:a4:72:70:09:5b:31:e7:c2:
a7:a9:d1:e4:f3:10:21:07:9f:3a:52:d2:e2:85:f4:
82:8c:8c:55:7e:9f:30:d9:92:bb:fb:e8:97:42:06:
50:3f:3f:59:db:79:4e:99:bd:23:66:15:c7:58:82:
84:aa:7f:5f:67:97:c1:3e:4b:4f:75:cf:c5:38:0f:
e2:c8:72:bf:4d:e7:87:e0:46:ce:30:ae:b5:54:5d:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:52:34:DD:D2:99:34:14:7F:63:21:41:39:1A:70:25:B8:B2:16:FB
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/lFI03dKZNBR_YyFBORpwJbiyFvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.64.0/22
5.188.152.0/22
77.240.44.0/22
79.143.20.0/22
84.252.156.0/22
87.255.194.0-87.255.201.255
89.223.0.0/24
89.223.2.0/24
93.190.240.0/22
94.126.201.0/24
178.238.78.0/23
185.97.112.0/22
188.94.152.0/23
194.76.124.0/22
IPv6:
2a06:580::/29
Signature Algorithm: sha256WithRSAEncryption
69:6e:e0:d4:c2:1f:80:26:b0:60:e6:04:2f:4f:f8:81:7a:d4:
6a:76:00:0b:55:6e:c1:d3:1b:2e:45:3a:88:54:99:1c:40:be:
35:63:73:38:e8:86:2b:1a:89:8a:3b:48:70:a6:33:7f:81:5b:
9d:37:d3:26:b2:40:00:6f:bc:f2:7a:82:36:c0:e6:f6:e8:41:
dd:fd:50:a9:fb:93:be:de:f7:2b:57:ce:9b:7e:d9:ef:79:9c:
32:23:d9:c6:d2:20:f8:04:1b:d9:d8:d1:b6:3c:e8:86:5b:c2:
cb:99:75:3b:b6:25:09:eb:cd:f5:ce:f2:27:9e:b9:fb:c2:19:
23:ce:42:db:c2:ed:c4:9b:60:43:14:9e:c7:69:6f:fc:d9:68:
3c:f1:10:97:94:1c:11:5b:e1:38:c0:e6:0d:dd:4a:f8:fd:eb:
7a:4b:13:08:03:98:46:00:17:7b:74:f9:18:8b:6e:69:7f:7f:
01:fe:ba:cb:51:05:95:04:2b:3a:f8:a5:5b:04:37:6d:e3:c9:
de:32:69:ba:3a:36:d5:d6:20:7a:33:18:94:45:c5:78:32:d8:
be:48:ba:b9:f3:c8:38:f2:5b:6b:6e:a9:98:45:fa:9b:4a:d3:
2a:6c:fd:6d:dc:20:7f:87:1c:69:d8:12:a0:3a:b6:27:11:92:
99:86:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:25 2024 by rpki-client on console-ams.rpki-client.org