Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sDf80WQqvQSoiNq1ewSG0ERlpTI.roa
File: sDf80WQqvQSoiNq1ewSG0ERlpTI.roa (raw, json)
Hash identifier: iLogwLPZZ7eOkrKaE5dfgzMNipDUHz7YfNuoDtE1GPE=
Subject key identifier: B0:37:FC:D1:64:2A:BD:04:A8:88:DA:B5:7B:04:86:D0:44:65:A5:32
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 05D80519
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sDf80WQqvQSoiNq1ewSG0ERlpTI.roa
Signing time: Fri 28 Jan 2022 19:54:18 +0000
ROA not before: Fri 28 Jan 2022 19:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208476
IP address blocks: 194.5.98.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
185.244.26.0/24 maxlen: 24
194.5.99.0/24 maxlen: 24
87.237.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98043161 (0x5d80519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 28 19:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b037fcd1642abd04a888dab57b0486d04465a532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:c9:9e:3b:7f:14:64:4f:ba:33:80:0c:6e:
e6:8f:e0:8e:fb:91:51:ec:87:35:6c:07:75:a7:7e:
2b:db:41:28:09:19:bb:d6:3e:17:95:b5:7a:23:3c:
47:a2:6b:f5:1f:99:90:ad:dc:52:db:47:a9:bf:0f:
d2:73:10:45:cd:02:f8:19:fc:57:d0:49:97:13:ae:
15:ce:58:58:62:dc:78:90:7f:6a:33:9e:96:e0:f6:
b3:92:3a:12:d3:68:00:3e:5c:3b:db:23:02:d3:b3:
f8:20:09:fb:1f:cf:e7:2a:6e:08:15:ec:53:60:7e:
41:40:96:a8:7b:a7:40:53:5c:e3:4a:2e:b6:24:83:
b1:f0:38:91:0d:a4:ae:06:a0:af:b9:57:76:dc:1b:
d6:4f:22:06:f2:4c:fe:f1:55:8c:ec:24:10:66:59:
68:30:80:bc:34:c5:e3:18:78:7b:a8:7d:ac:9d:c7:
f9:42:fc:9d:37:a8:3e:c7:a1:52:2c:b3:d3:53:99:
87:9b:ca:f4:1e:07:58:c3:a7:b4:67:6f:f8:13:b1:
78:27:69:c1:20:aa:87:c4:95:a9:54:61:a9:63:3d:
37:55:82:73:83:e2:10:d6:39:62:86:df:8a:0d:1b:
17:5c:52:4f:47:2e:4b:ae:ce:9a:2d:ac:05:a9:64:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:FC:D1:64:2A:BD:04:A8:88:DA:B5:7B:04:86:D0:44:65:A5:32
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sDf80WQqvQSoiNq1ewSG0ERlpTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
185.244.26.0/24
185.244.31.0/24
194.5.97.0-194.5.99.255
Signature Algorithm: sha256WithRSAEncryption
a8:56:14:24:7f:9f:a5:0d:83:23:99:43:76:87:b4:d8:ff:ac:
48:a8:35:54:be:8e:a3:55:83:6d:2f:3d:7e:8c:4f:b4:a2:41:
39:b8:b8:ac:e4:3f:1c:45:5c:31:13:01:30:46:62:54:0d:ce:
8e:da:ae:a0:03:59:be:bb:33:d9:31:a8:76:d1:18:14:fb:47:
62:ef:90:20:73:b9:9f:29:3a:ae:5e:0a:20:24:a3:f2:d4:4f:
cc:35:82:a9:cf:2f:51:d1:02:b4:a0:4b:32:cc:eb:48:6a:dc:
fe:94:87:6b:64:08:e9:ec:40:bf:fb:43:01:72:27:dd:f2:b1:
5e:c7:99:af:b2:0b:49:09:49:96:ad:cc:c4:ee:dd:91:e8:c8:
f9:82:66:6d:07:3d:4f:17:5a:de:1a:41:b3:35:d0:df:51:e4:
76:63:33:a3:3d:3f:1d:46:a0:15:7b:68:d9:61:df:61:c0:6c:
55:b2:28:4f:e5:5f:20:2d:f2:f8:0b:03:57:75:67:77:92:58:
af:98:d2:89:26:7e:02:e7:f4:04:34:4d:98:cf:13:91:35:2c:
a9:f7:e7:4b:aa:73:60:69:0a:e0:32:47:a6:8b:ac:eb:92:18:
7e:b4:3e:c4:41:7b:47:0b:4f:30:aa:2d:dd:e3:df:6d:e3:e9:
31:92:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org