Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/iOl0ixGybm-fJN1FFhZBOCnfAlI.roa
File: iOl0ixGybm-fJN1FFhZBOCnfAlI.roa (raw, json)
Hash identifier: KuBdiCz9u0KeBQYR1PkaAOrBQ4pm2IJwtFwRbuFdIXc=
Subject key identifier: 88:E9:74:8B:11:B2:6E:6F:9F:24:DD:45:16:16:41:38:29:DF:02:52
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 1C250751
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/iOl0ixGybm-fJN1FFhZBOCnfAlI.roa
Signing time: Sat 28 May 2022 15:41:13 +0000
ROA not before: Sat 28 May 2022 15:41:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20904
IP address blocks: 84.240.64.0/19 maxlen: 19
149.126.176.0/21 maxlen: 21
84.240.96.0/19 maxlen: 19
188.64.0.0/21 maxlen: 21
185.25.76.0/22 maxlen: 22
185.67.80.0/22 maxlen: 22
37.35.80.0/21 maxlen: 21
80.75.96.0/20 maxlen: 20
93.174.192.0/21 maxlen: 22
80.75.106.0/24 maxlen: 24
46.254.208.0/21 maxlen: 21
2a00:74a0::/32 maxlen: 32
2a00:1a58::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472188753 (0x1c250751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: May 28 15:41:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88e9748b11b26e6f9f24dd451616413829df0252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:81:19:8a:d4:42:5f:e2:a7:cc:65:dc:d6:
01:c7:e9:93:b2:25:a9:20:d0:e7:97:20:bf:db:03:
3f:b9:57:b9:73:43:96:26:2a:b4:61:75:ae:e2:fe:
1a:85:db:63:41:df:4a:df:06:bb:2c:fd:80:a5:9f:
b1:04:55:2b:ea:71:82:5b:37:d1:01:0c:fd:36:9f:
ee:1d:e6:e9:72:31:90:b6:9c:8b:1e:03:7b:61:85:
c7:b5:35:4b:64:0f:b4:c7:1e:16:45:1e:e1:72:28:
5e:c3:85:cc:71:87:54:22:f4:55:75:13:f3:6f:23:
ef:c3:48:77:aa:48:47:38:30:f5:53:98:c7:3e:79:
2b:84:5f:91:71:da:c3:ef:fd:e4:f2:90:e7:a0:2c:
10:d6:aa:a1:b5:01:40:81:ac:c2:3f:10:d0:01:85:
1b:46:af:b4:b0:c0:0d:e8:b8:87:bd:f8:63:1b:39:
c0:35:d3:fb:2a:a4:ab:1c:87:0c:54:d2:48:09:64:
a9:c5:d5:83:02:fd:4e:76:0e:22:f9:26:7a:5e:31:
3f:7f:ae:32:8d:19:6d:29:c2:b6:2f:cd:8f:b7:ab:
dc:d4:b8:83:a3:7a:f3:37:00:52:2c:85:f7:49:07:
a0:5d:0e:e2:28:39:10:b1:6b:86:4a:62:a8:ee:7d:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E9:74:8B:11:B2:6E:6F:9F:24:DD:45:16:16:41:38:29:DF:02:52
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/iOl0ixGybm-fJN1FFhZBOCnfAlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.80.0/21
46.254.208.0/21
80.75.96.0/20
84.240.64.0/18
93.174.192.0/21
149.126.176.0/21
185.25.76.0/22
185.67.80.0/22
188.64.0.0/21
IPv6:
2a00:1a58::/32
2a00:74a0::/32
Signature Algorithm: sha256WithRSAEncryption
15:52:e2:f8:5d:7e:ce:16:d5:18:35:3c:5e:b0:1b:65:be:5e:
b0:03:5f:e8:19:ec:c2:43:9f:8a:4c:58:fa:86:26:8e:3f:b8:
f5:6c:b8:33:f7:c4:91:74:ba:72:c2:d1:a9:19:d8:53:10:db:
bb:53:e5:bd:ff:6d:bf:0f:b2:9d:e3:7b:bc:f9:aa:ca:0b:f9:
07:49:8d:e6:4a:e3:b9:f3:fb:06:8c:8c:98:2b:9d:a9:0a:73:
f4:de:e3:94:be:76:8c:d5:52:d5:92:76:db:cf:99:7e:c3:77:
14:bd:d4:b8:f3:f0:d7:d4:e5:76:5b:c3:c3:f2:38:e8:9c:82:
1b:03:f1:ec:a4:70:95:1c:04:a0:b5:45:66:fb:92:fe:c1:92:
1e:a3:13:2a:74:2e:9e:37:9f:00:a6:7e:6d:fd:c4:8d:cd:b5:
bd:4f:97:ab:57:16:12:da:88:35:0e:7c:ef:b7:c2:6f:35:12:
d4:54:6b:3c:d6:36:75:60:2d:87:7f:92:b3:02:0c:f2:7d:86:
36:58:19:ea:57:9b:41:aa:e1:3d:d6:d9:47:2a:a4:0b:2c:f4:
f8:c2:ad:b5:51:c1:e5:f0:2d:4e:28:6f:94:af:0e:bf:f6:13:
d8:19:f9:d3:31:42:37:90:53:ee:75:41:36:67:40:c5:06:aa:
0e:47:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org