Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/obb0GXH3V5h72F1aLLH8LMYGkQg.roa
File: obb0GXH3V5h72F1aLLH8LMYGkQg.roa (raw, json)
Hash identifier: iSHx6juaoV+JAmjEf34iM0j4ET5azyAzuaP3xNImX5M=
Subject key identifier: A1:B6:F4:19:71:F7:57:98:7B:D8:5D:5A:2C:B1:FC:2C:C6:06:91:08
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 41066D34
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/obb0GXH3V5h72F1aLLH8LMYGkQg.roa
Signing time: Sat 01 Jan 2022 13:54:50 +0000
ROA not before: Sat 01 Jan 2022 13:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20771
IP address blocks: 88.210.192.0/18 maxlen: 18
37.233.128.0/17 maxlen: 17
80.241.244.0/22 maxlen: 22
80.241.252.0/24 maxlen: 24
185.19.96.0/22 maxlen: 22
185.19.96.0/23 maxlen: 23
185.19.98.0/23 maxlen: 23
80.241.184.0/24 maxlen: 24
212.72.130.0/24 maxlen: 24
85.117.32.0/19 maxlen: 19
85.117.32.0/20 maxlen: 20
85.117.48.0/20 maxlen: 20
134.90.0.0/17 maxlen: 17
89.232.0.0/19 maxlen: 19
78.139.128.0/18 maxlen: 18
176.73.0.0/16 maxlen: 16
2a02:23f0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090940212 (0x41066d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Jan 1 13:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1b6f41971f757987bd85d5a2cb1fc2cc6069108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:0a:0d:81:a2:18:63:0d:3c:6d:33:ec:7a:
9b:66:34:08:38:28:a9:8e:0b:97:d1:df:3d:c8:6f:
45:d0:ee:1e:8b:e6:45:9b:0c:c0:6a:3e:45:a9:f7:
7f:ab:04:e5:36:20:9a:c6:c1:2c:09:a9:73:7a:a9:
2a:2b:c8:9d:cc:0e:17:e6:ff:f2:43:e1:1e:e5:c9:
84:be:6c:06:a7:0c:c9:5c:81:ea:f8:e6:95:6b:cb:
78:fe:b5:61:15:dd:9e:18:f4:df:b9:e5:b0:f3:bb:
a3:b3:4e:3d:ac:1a:fb:be:10:f7:02:21:e9:ce:5f:
90:c0:c5:f5:c7:1f:97:45:0e:a8:9d:6d:98:4d:c0:
2e:b3:17:d5:6a:08:85:3f:47:0f:c6:78:d4:77:b6:
0a:93:77:a1:69:0b:eb:26:4b:9d:70:fe:0a:dc:f8:
a8:a2:13:cb:62:1a:05:b4:01:4d:fb:63:99:a7:e1:
e7:e7:72:41:19:e9:a0:9e:13:96:ea:e2:9e:02:80:
70:5d:ac:2c:9a:c2:2d:4e:07:f9:eb:3b:7a:8b:f5:
df:4e:1b:40:7d:09:4e:03:9a:66:d9:a4:fd:de:8b:
5e:10:07:1d:15:45:ff:47:91:89:e1:e4:47:e0:31:
82:15:83:89:b1:94:7b:7a:aa:11:a0:82:09:37:8a:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B6:F4:19:71:F7:57:98:7B:D8:5D:5A:2C:B1:FC:2C:C6:06:91:08
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/obb0GXH3V5h72F1aLLH8LMYGkQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.128.0/17
78.139.128.0/18
80.241.184.0/24
80.241.244.0/22
80.241.252.0/24
85.117.32.0/19
88.210.192.0/18
89.232.0.0/19
134.90.0.0/17
176.73.0.0/16
185.19.96.0/22
212.72.130.0/24
IPv6:
2a02:23f0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:15:af:3f:5b:d4:88:fa:fa:95:df:14:1b:cf:63:0f:a5:cf:
ab:93:4f:8c:d6:9b:bc:a9:bb:1b:80:1f:ad:3d:c2:d0:aa:11:
80:4f:39:47:7e:88:49:f6:a2:aa:b3:95:37:22:ea:49:66:b4:
f1:5d:3d:9c:36:31:74:bf:1e:13:01:9a:89:47:10:20:01:4f:
f2:ad:06:09:42:ba:4c:f2:6f:72:8e:75:19:52:92:be:01:f4:
c6:d7:fb:08:51:88:cb:b4:3c:4a:2c:67:68:2a:5a:d2:55:3d:
4e:8e:a5:5d:c5:fc:7a:d3:05:0f:fe:c1:d3:f5:d4:90:0a:f7:
47:23:f2:3b:0e:74:c9:6e:61:65:ba:81:19:a3:ce:c8:ca:58:
d8:7a:02:c5:b3:54:64:da:98:11:d0:7f:73:dd:c5:1b:e0:14:
4c:bc:50:a0:84:6f:af:aa:64:fe:31:56:05:0b:08:d6:ef:df:
4e:d6:1c:63:83:f6:17:b5:d9:7f:a7:48:64:ed:71:ed:b3:3e:
7b:75:b1:4b:07:56:ca:1c:27:e8:d1:cc:20:79:a6:08:2e:63:
08:56:af:11:c7:07:11:d6:4c:8d:b0:f8:64:4b:a9:5e:97:f7:
dc:af:ff:08:77:c6:da:69:8a:44:3a:b1:cd:24:b8:93:c0:86:
97:20:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:02 2024 by rpki-client on console-ams.rpki-client.org