Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/vIhQhKGDSIGYsBY9HIFWTfYc3os.roa
File: vIhQhKGDSIGYsBY9HIFWTfYc3os.roa (raw, json)
Hash identifier: /paS9RaAiLbPmWaABxBB3OTDZrwLGA29k0eDjzPRAZo=
Subject key identifier: BC:88:50:84:A1:83:48:81:98:B0:16:3D:1C:81:56:4D:F6:1C:DE:8B
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 0A407B7B
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/vIhQhKGDSIGYsBY9HIFWTfYc3os.roa
Signing time: Wed 20 Apr 2022 14:42:37 +0000
ROA not before: Wed 20 Apr 2022 14:42:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 157.167.231.0/24 maxlen: 24
157.167.134.0/24 maxlen: 24
157.167.135.0/24 maxlen: 24
157.167.136.0/21 maxlen: 21
157.167.144.0/21 maxlen: 21
157.167.152.0/24 maxlen: 24
157.167.156.0/24 maxlen: 24
157.167.155.0/24 maxlen: 24
157.167.153.0/24 maxlen: 24
157.167.184.0/21 maxlen: 21
85.115.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171998075 (0xa407b7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Apr 20 14:42:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc885084a183488198b0163d1c81564df61cde8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:82:c5:7b:74:f7:16:de:38:af:7b:01:e9:
ee:e5:b9:77:27:e0:f9:9b:b7:4b:5f:a1:c5:24:ba:
53:ed:eb:2d:6d:7e:fc:ee:0a:89:1d:5c:37:cc:ed:
6a:eb:c6:97:53:e2:45:ea:de:b5:f9:b0:e4:44:f0:
a2:76:80:e3:5f:59:4e:75:74:21:83:9e:ff:55:be:
86:91:d1:2e:42:8f:c9:7f:17:2a:46:29:49:7d:63:
9c:a5:17:28:03:32:6b:d4:17:05:39:dc:74:03:f5:
ed:75:d7:66:08:52:c1:c5:25:51:0f:37:09:ef:4b:
b3:37:77:70:66:7e:c9:e0:88:24:8e:52:d5:4d:62:
a7:a8:57:3c:5e:41:61:fe:f8:6c:02:fb:8e:65:5b:
d8:85:15:d3:b9:bc:ff:e0:7e:b8:b4:56:93:6a:0a:
98:7b:29:46:82:a3:b3:53:33:78:99:e5:16:a7:f5:
e2:e5:e1:ab:9d:b7:a8:1f:d1:ca:9f:27:bd:26:a4:
15:04:09:6a:9c:17:8f:91:57:2a:0e:fb:f0:05:91:
c3:ff:ce:d1:18:18:3a:d8:85:0a:bc:8e:d7:ad:7e:
35:7c:70:3f:c5:f1:dd:5d:72:c2:c6:89:be:95:d8:
60:bc:1a:12:2a:a6:32:97:a3:d3:4b:2d:92:58:66:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:50:84:A1:83:48:81:98:B0:16:3D:1C:81:56:4D:F6:1C:DE:8B
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/vIhQhKGDSIGYsBY9HIFWTfYc3os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.38.0/24
157.167.134.0-157.167.153.255
157.167.155.0-157.167.156.255
157.167.184.0/21
157.167.231.0/24
Signature Algorithm: sha256WithRSAEncryption
58:96:7d:c0:a2:45:8c:f2:b9:c8:ca:f4:07:af:5c:ec:5c:9d:
94:48:18:29:0b:0b:6e:2e:8e:7b:d2:34:b5:5e:c7:ef:ec:9c:
f6:27:93:24:a1:50:60:76:9d:61:d7:be:5e:e4:27:e1:2f:90:
34:6a:ea:0b:c5:ea:be:c2:b7:af:b3:d3:2b:b7:5c:33:80:85:
24:2c:0d:92:76:8a:bb:97:c1:ba:1c:ce:fb:dc:0d:c5:e3:f8:
08:47:35:2a:8f:9b:83:a1:f8:67:08:1d:b2:0e:2c:3f:33:e2:
6a:55:12:7d:18:c2:81:64:fe:ce:14:62:9a:aa:56:4f:a6:bb:
4a:f6:d7:69:29:9d:7e:36:49:a9:10:dc:e8:04:12:e1:46:29:
4e:7e:bc:58:58:cb:8f:03:67:93:ab:db:47:9f:86:71:a9:f3:
ae:9c:fc:ca:b2:61:1f:60:85:d4:6d:80:74:f9:66:43:8e:dc:
d0:d3:98:8b:a3:40:7f:cf:57:c0:e6:a0:06:ed:ec:31:06:62:
03:96:ac:da:74:d2:8e:7c:3c:74:29:3c:4c:b6:00:87:66:23:
17:b7:a2:84:14:aa:3e:ed:5e:2b:f5:15:6a:b4:fb:07:4f:45:
37:1d:d6:c7:80:11:be:f5:83:5c:5b:69:c9:3c:77:16:3f:3d:
9f:d0:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:27 2024 by rpki-client on console-ams.rpki-client.org