Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/_RyK_qlJCq-NdNhacCj_G-08_GI.roa
File: _RyK_qlJCq-NdNhacCj_G-08_GI.roa (raw, json)
Hash identifier: JBDeRd5u1IbLx3kNivorplm+GaK5R/VTrEf6elCFpmk=
Subject key identifier: FD:1C:8A:FE:A9:49:0A:AF:8D:74:D8:5A:70:28:FF:1B:ED:3C:FC:62
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 1454FEB8
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/_RyK_qlJCq-NdNhacCj_G-08_GI.roa
Signing time: Sat 01 Jan 2022 07:53:25 +0000
ROA not before: Sat 01 Jan 2022 07:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 81.92.217.0/24 maxlen: 24
94.46.244.0/22 maxlen: 22
81.92.218.0/23 maxlen: 23
94.46.184.0/22 maxlen: 22
91.109.112.0/21 maxlen: 21
94.46.192.0/22 maxlen: 22
94.46.207.0/24 maxlen: 24
81.92.192.0/22 maxlen: 22
94.46.220.0/22 maxlen: 22
185.99.252.0/22 maxlen: 22
185.109.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341114552 (0x1454feb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jan 1 07:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd1c8afea9490aaf8d74d85a7028ff1bed3cfc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:4e:9f:dd:42:b7:77:4b:d2:da:b4:88:2c:
93:61:3f:6c:26:d9:1e:a8:d2:d0:27:44:47:08:ae:
6d:a0:97:be:cc:4a:a2:2d:d4:60:e2:ca:87:35:7a:
26:57:a7:f4:1e:88:ad:e6:9c:e5:eb:ab:42:50:cb:
2c:12:82:a5:1b:8e:1f:4e:93:a1:00:2f:59:ad:1d:
a7:cb:78:e4:65:b0:0e:4d:d2:ec:20:61:33:b7:3d:
e0:0d:32:a5:f9:64:ff:9d:92:56:0a:9a:35:de:1c:
1e:bf:e3:c5:43:30:fe:48:6f:12:2f:8f:17:e6:88:
d8:29:fd:10:19:9a:92:f1:a0:14:13:45:08:33:e3:
62:ad:15:7c:45:a9:fb:db:ce:3d:ee:0c:40:d7:3b:
33:3a:dd:70:8a:f1:d1:9f:67:6b:e8:24:6a:6a:d3:
c0:92:9a:52:91:d2:a9:5f:de:91:ce:3c:1f:92:69:
f5:7e:6d:c0:4f:f1:ee:e3:a6:17:2d:81:55:be:c0:
3c:d2:bf:ba:95:89:d6:de:2f:a8:2e:0a:fb:25:95:
2c:78:cd:94:73:57:c0:94:dd:ee:67:a3:ee:3d:3e:
76:66:be:3e:f8:b0:3c:70:60:6b:ce:56:20:29:58:
42:9d:2d:b1:ef:48:2c:1e:fb:03:46:5b:42:0e:c9:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:8A:FE:A9:49:0A:AF:8D:74:D8:5A:70:28:FF:1B:ED:3C:FC:62
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/_RyK_qlJCq-NdNhacCj_G-08_GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.192.0/22
81.92.217.0-81.92.219.255
91.109.112.0/21
94.46.184.0/22
94.46.192.0/22
94.46.207.0/24
94.46.220.0/22
94.46.244.0/22
185.99.252.0/22
185.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:c1:07:aa:3b:60:9d:a4:f3:4f:f7:05:b0:84:0e:da:b4:d6:
3f:33:a6:53:aa:9d:7f:70:9e:81:97:7c:71:50:7a:39:17:1b:
06:ff:f8:a0:5e:4c:e6:00:0a:d6:e9:0e:de:9e:ea:b4:a8:c5:
fa:05:1a:de:91:86:b7:df:7a:c9:4e:d9:45:e0:7f:3e:83:d9:
30:a6:0a:ed:55:51:d8:73:70:b8:56:93:58:fe:41:f5:c2:26:
4a:c3:5c:a1:a6:7d:75:b0:9d:e6:2e:c7:1e:31:06:02:4f:20:
7a:7a:40:4a:2d:ce:a8:49:b4:8e:8e:f9:11:c5:6f:30:ac:71:
43:31:c8:b5:3b:58:56:a4:03:46:0f:7a:2b:09:6a:f2:a4:40:
01:a3:84:26:8e:8f:80:3f:70:8f:91:bf:58:6f:80:bf:64:5c:
d1:a0:2d:7c:ec:7f:4e:74:57:89:d0:75:20:0a:d7:94:ba:5f:
d8:8a:06:59:9f:49:86:ff:a4:04:bb:91:76:ab:ee:83:9a:4f:
f9:8f:26:40:58:10:c7:26:54:fa:fd:e1:30:0f:d7:02:3d:2f:
c9:8c:f6:f4:33:1d:94:ae:45:a6:b0:ca:30:47:c1:81:ff:27:
9e:53:43:77:12:6f:88:62:5e:8b:ad:96:3a:5e:fb:fb:bd:57:
6d:ec:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:45 2023 by rpki-client on console-ams.rpki-client.org