Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/RhymcRIlndmCwkzrLLMeESEpiuw.roa
File: RhymcRIlndmCwkzrLLMeESEpiuw.roa (raw, json)
Hash identifier: AWZ3/Lev8WlOkxLcRB4BrTdUKtIsQ4MRDBC14HPubA0=
Subject key identifier: 46:1C:A6:71:12:25:9D:D9:82:C2:4C:EB:2C:B3:1E:11:21:29:8A:EC
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0184EC086CF9FEF9A9A07337FAB5F6973867
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/RhymcRIlndmCwkzrLLMeESEpiuw.roa
Signing time: Wed 07 Dec 2022 10:01:25 +0000
ROA not before: Wed 07 Dec 2022 10:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54994
IP address blocks: 163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:08:6c:f9:fe:f9:a9:a0:73:37:fa:b5:f6:97:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Dec 7 10:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=461ca67112259dd982c24ceb2cb31e1121298aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:29:a6:a4:60:ba:a9:c1:35:9b:5d:df:6c:
8b:50:22:5e:b1:ae:0d:0c:d2:71:b4:59:ff:f1:1a:
30:03:8a:17:2b:30:35:26:8e:fd:09:f0:03:9a:ef:
f9:73:a4:18:35:11:ed:99:13:bc:6e:f7:cf:cd:bd:
d8:6b:53:c4:e1:72:db:b7:72:8d:e2:70:e3:5b:b5:
20:be:b3:4d:58:39:03:3d:a9:55:64:e3:c6:43:f2:
0f:c1:85:e5:53:5f:73:04:a0:ae:46:19:2a:7e:6e:
c2:67:02:43:92:0a:8b:12:2f:23:42:d1:b5:1a:60:
a0:af:db:ae:e4:6c:55:ba:23:dd:7e:a5:cf:2a:b3:
bf:4a:0d:f9:8c:71:6c:ea:f8:6a:95:1a:24:e9:82:
d6:0f:73:86:fa:77:9e:4f:07:55:e5:25:c2:72:3b:
90:41:a1:63:02:46:95:d7:01:d2:59:aa:2e:0b:fe:
ca:e6:ac:66:77:b3:73:cf:31:52:38:82:0e:55:3f:
e6:3c:2f:c9:70:39:8f:63:65:17:cf:24:18:46:da:
b0:19:70:22:d2:cf:47:d3:71:7d:7c:71:93:3b:2c:
7d:f3:14:50:54:a5:24:76:ba:d3:58:1f:63:c9:14:
13:46:5a:2e:66:13:71:00:3a:b6:e7:19:75:16:b7:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:A6:71:12:25:9D:D9:82:C2:4C:EB:2C:B3:1E:11:21:29:8A:EC
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/RhymcRIlndmCwkzrLLMeESEpiuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.135.0/24
148.253.34.0/24
148.253.231.0-148.253.235.255
148.253.237.0/24
163.171.64.0/24
163.171.67.0/24
163.171.166.0/24
163.171.177.0/24
163.171.182.0/24
163.171.188.0/24
163.171.222.0/24
163.171.231.0/24
163.171.252.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0d:86:53:aa:47:1e:10:b7:f9:77:d1:ea:71:74:37:b0:59:
34:ba:d0:2c:ec:0c:b1:b4:0c:f8:6f:7c:c8:ec:48:be:11:ad:
a3:5f:5c:c4:4a:12:ee:c9:78:17:75:07:16:e2:5e:a8:3a:de:
e7:7e:c3:b4:90:3e:67:8f:ef:4e:1a:f4:98:55:5d:f1:ee:bf:
ab:0a:83:1f:e5:39:82:23:cf:21:a7:3b:a9:c3:f9:c3:31:53:
0e:2f:ad:6c:28:36:5e:1c:d7:20:bd:90:a4:bf:d7:dc:c1:95:
a2:f4:8b:c6:38:cb:b6:f0:fa:6b:89:f0:04:b7:02:aa:3f:80:
67:01:4c:09:3f:a3:db:8e:96:45:ad:a7:98:9f:ca:63:20:25:
87:45:c2:00:d7:9e:51:61:73:9e:27:a5:06:39:dc:1e:55:c5:
79:65:df:27:5e:1c:29:fa:14:cb:1e:bc:93:6f:18:69:30:31:
a8:55:7c:f1:b7:b5:26:12:42:32:a4:a6:80:fc:7b:2b:05:70:
9c:85:f6:e1:0d:9b:5f:94:9a:c7:12:dc:bf:cc:53:f4:bb:4a:
92:1b:30:38:d6:76:86:3c:0e:b7:b7:fc:50:41:44:cd:50:d8:
0b:e8:ce:88:e7:ad:a1:bd:4d:fd:59:5a:72:1e:93:15:8c:41:
5d:32:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org