Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Zw5K24l1fc9rBnjU0mQIvrXImw.roa
File: 8Zw5K24l1fc9rBnjU0mQIvrXImw.roa (raw, json)
Hash identifier: rDKwM7ijNdQdCSulFna1E56gTcT6A4yzonE/+giqoRg=
Subject key identifier: F1:9C:39:2B:6E:25:D5:F7:3D:AC:19:E3:53:49:90:22:FA:D7:22:6C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182ED78B2226962F41FB23FB3F3939E1052
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Zw5K24l1fc9rBnjU0mQIvrXImw.roa
Signing time: Tue 30 Aug 2022 06:38:06 +0000
ROA not before: Tue 30 Aug 2022 06:38:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 178.215.237.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.120.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.42.35.0/24 maxlen: 24
79.110.48.0/24 maxlen: 24
194.180.38.0/24 maxlen: 24
194.180.37.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
193.25.219.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:78:b2:22:69:62:f4:1f:b2:3f:b3:f3:93:9e:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 30 06:38:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f19c392b6e25d5f73dac19e353499022fad7226c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d3:1e:b0:69:26:1f:4e:85:3f:2d:71:c2:8e:
ce:3a:4f:b4:d0:b1:14:6a:08:61:9d:d5:08:36:83:
9c:6d:b5:12:67:ba:cb:6c:8e:96:0b:17:ec:aa:57:
c0:a4:26:16:ab:11:96:d4:6a:12:da:02:97:77:b0:
be:39:61:df:48:7f:15:08:35:94:ea:9c:46:03:7b:
04:16:2a:29:dd:7b:86:19:96:ac:f5:30:ff:49:19:
a4:24:2c:3a:40:49:d7:23:d5:f0:e6:c0:d5:05:f9:
32:4c:48:2d:86:ac:9e:d7:95:c4:83:67:d0:f2:0e:
bd:fa:c5:cf:01:16:c5:58:b7:45:4d:f8:2d:bd:cb:
30:44:b6:bf:76:cc:63:5b:5a:e5:11:48:90:de:cf:
a7:e3:be:98:7c:f1:e9:d1:a5:81:0e:34:5d:50:f5:
a2:79:18:ca:0d:df:07:15:c0:11:ea:3c:fe:c1:72:
3d:9f:74:57:bd:6c:11:a2:92:85:d3:c0:a4:37:24:
df:d9:ca:41:6a:84:f5:f7:eb:5d:2d:60:b3:f9:6d:
0b:3b:3f:17:09:94:1a:6e:94:7e:f1:b0:20:36:9b:
b7:40:0f:37:cb:7c:4e:4f:c7:2a:38:dd:ae:dc:2d:
13:b4:25:06:e9:98:96:c4:e1:e7:93:bc:d7:43:0e:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:39:2B:6E:25:D5:F7:3D:AC:19:E3:53:49:90:22:FA:D7:22:6C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Zw5K24l1fc9rBnjU0mQIvrXImw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.48.0/24
87.121.220.0/24
178.215.237.0-178.215.238.255
193.25.219.0/24
193.35.18.0/24
193.42.33.0-193.42.35.255
193.58.120.0/22
194.180.37.0-194.180.39.255
Signature Algorithm: sha256WithRSAEncryption
8c:13:a9:f6:94:f0:21:e7:3d:67:32:99:2c:cf:27:2e:ad:3c:
80:d4:f3:f4:70:cd:f0:f0:54:dc:61:11:30:50:0d:66:54:77:
90:cc:a6:76:6c:a4:b3:83:2c:bf:bd:68:00:78:86:12:d8:6e:
98:55:1b:7c:53:a3:20:6d:87:55:48:56:2b:40:b6:09:c7:8e:
1b:67:19:f5:67:72:c8:69:9b:30:91:a7:fd:3c:ec:ca:78:a6:
48:aa:4e:d1:c2:52:23:25:59:bd:8a:05:c2:a6:42:cc:1d:28:
b0:e9:43:3a:aa:91:ed:01:d7:f9:e8:33:f9:d5:e5:4a:fc:e7:
16:43:e7:c4:d8:49:66:c1:13:aa:c8:b6:b2:55:8d:58:3f:fc:
a7:c7:d3:d5:c4:e3:f8:2d:27:3b:11:c9:b9:0c:69:75:7c:e0:
59:60:08:46:bd:0d:fd:27:9f:cb:00:4f:c3:d9:c6:d0:dc:0f:
bc:76:09:b4:b6:9f:95:43:97:f9:19:1c:fe:8f:95:53:e1:25:
21:32:42:a6:d5:9c:30:be:0e:ec:13:b3:cc:93:d6:15:ef:c3:
82:b4:31:c0:f4:a8:5d:56:56:0d:c2:bf:4d:fd:9c:b8:f8:8d:
fe:0f:df:ec:8e:3c:e6:65:f3:bf:8d:75:0a:39:07:8c:99:5e:
47:5c:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org