Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-UcsxOKflsIYueLDCB5Lh9Ynzpc.roa
File: 1-UcsxOKflsIYueLDCB5Lh9Ynzpc.roa (raw, json)
Hash identifier: F18sYxXdd9YESSNHlewPvl8HAkyRmYbTHlqzhu4wj3s=
Subject key identifier: F9:47:2C:C4:E2:9F:96:C2:18:B9:E2:C3:08:1E:4B:87:D6:27:CE:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182A1768659DFE2EF81BF687FEBDFDFB0FE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-UcsxOKflsIYueLDCB5Lh9Ynzpc.roa
Signing time: Mon 15 Aug 2022 12:24:35 +0000
ROA not before: Mon 15 Aug 2022 12:24:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 178.215.224.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
83.219.98.0/23 maxlen: 24
193.42.34.0/23 maxlen: 24
37.139.130.0/23 maxlen: 24
94.154.174.0/23 maxlen: 24
193.25.218.0/23 maxlen: 24
193.25.217.0/24 maxlen: 24
109.206.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:76:86:59:df:e2:ef:81:bf:68:7f:eb:df:df:b0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 15 12:24:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9472cc4e29f96c218b9e2c3081e4b87d627ce97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:cc:b2:6d:ee:e7:7d:6a:46:f3:ac:7a:57:
29:7d:85:99:2f:a6:a2:04:0b:b1:96:cb:c9:75:19:
59:be:c6:24:83:4b:06:02:04:8c:cc:f0:e0:f8:72:
ae:7c:ff:81:45:0e:5e:78:85:f4:2a:60:ad:44:8d:
af:ff:6c:44:ef:f1:3a:a9:00:3f:af:5c:7d:dd:ef:
02:1c:84:12:4d:98:89:f9:30:7e:d1:7d:5f:56:4c:
3a:fd:03:9a:a0:81:d5:8a:f0:89:78:ef:2d:23:b9:
d6:c6:07:e8:9d:16:ac:a1:62:92:c6:95:c8:d5:63:
af:12:2d:4d:35:81:96:3d:6d:f5:08:b6:9e:9e:1a:
f2:cc:fc:23:39:56:38:cb:2b:2f:14:9e:4b:f5:ae:
41:17:69:af:b0:24:1f:e2:ab:d0:69:d5:4f:fd:b4:
63:b8:39:47:a5:8f:85:52:cf:c9:16:de:5b:d6:ad:
7c:d6:88:ef:4e:08:32:2d:0d:cb:71:ae:4a:9b:02:
b9:91:8f:55:56:56:d0:ab:58:46:b7:b0:1a:2f:21:
72:8b:14:30:28:14:23:ba:3a:b6:38:f1:d2:85:fc:
dd:93:08:70:40:16:60:39:1c:2d:da:09:53:d6:47:
77:02:32:bf:64:87:ac:e5:6c:bf:54:32:a3:ac:47:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:2C:C4:E2:9F:96:C2:18:B9:E2:C3:08:1E:4B:87:D6:27:CE:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-UcsxOKflsIYueLDCB5Lh9Ynzpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.130.0/23
83.219.98.0/23
84.54.48.0/24
94.154.174.0/23
109.206.239.0/24
178.215.224.0/24
178.215.237.0-178.215.238.255
185.218.137.0/24
193.25.217.0-193.25.219.255
193.42.34.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:41:63:d1:f8:b9:26:24:d8:a3:27:4c:a5:f6:90:76:1c:21:
14:1c:92:54:98:15:a4:4b:27:16:54:58:80:a0:d7:a4:8c:83:
34:8a:ac:0a:2d:37:de:c5:c5:fc:45:d1:72:db:4e:a0:a1:81:
8e:04:3a:f7:89:21:99:b1:00:84:20:b7:0c:99:7e:ea:1d:84:
fd:bb:03:9a:d3:b6:e9:0b:c1:0f:0b:33:00:7c:4b:31:b6:75:
da:66:6e:d0:0c:b2:94:7b:5d:8c:95:ad:27:54:ea:b8:c7:f8:
ec:24:66:15:a0:63:a9:b6:d9:f3:63:11:38:16:67:5a:a8:c8:
a6:cc:dd:e7:1c:74:02:7b:3a:d1:7e:ac:c6:05:77:b1:e6:6f:
12:fd:d1:ee:1d:49:d4:19:c4:c5:a9:99:99:c7:bc:4c:22:06:
fb:93:a3:1d:0f:b5:b8:1d:c5:34:81:36:d6:20:cf:8e:41:0c:
1d:91:03:5f:87:6a:f5:04:e7:85:97:ef:7f:b4:1d:f0:7e:c4:
85:5f:d2:39:ea:be:31:2a:d6:bc:96:11:c4:40:25:d1:83:2c:
6a:de:51:1d:48:68:c0:b9:fd:22:11:e1:01:bd:55:e6:c7:ae:
2f:ca:16:66:0f:40:44:bd:89:b0:f5:7f:d7:7d:45:fe:ba:9c:
68:86:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org