Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OAowF4t_3-oNy7pJmTo5VWRbEAI.roa
File: OAowF4t_3-oNy7pJmTo5VWRbEAI.roa (raw, json)
Hash identifier: m2r+TgPkbQn1371Gy0fA54MVj33Ibv7WyQRE6ZwDNLw=
Subject key identifier: 38:0A:30:17:8B:7F:DF:EA:0D:CB:BA:49:99:3A:39:55:64:5B:10:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184AD78E263ECA90418AB7544756391871B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OAowF4t_3-oNy7pJmTo5VWRbEAI.roa
Signing time: Fri 25 Nov 2022 06:28:11 +0000
ROA not before: Fri 25 Nov 2022 06:28:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 194.55.224.0/24 maxlen: 24
84.54.50.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
193.42.34.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
194.180.51.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
94.154.162.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:78:e2:63:ec:a9:04:18:ab:75:44:75:63:91:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 25 06:28:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=380a30178b7fdfea0dcbba49993a3955645b1002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:0a:55:42:95:5c:74:8f:22:a0:2c:41:93:
d4:45:cf:24:af:45:9f:84:01:28:b7:9f:5a:ad:eb:
71:9e:36:95:24:7b:ec:10:22:c6:1a:65:c5:73:ab:
0f:1b:bd:94:0c:8d:75:57:5d:32:fe:b3:06:ef:ad:
76:4a:da:51:e8:ce:3c:b4:c8:a7:00:1f:6e:ca:12:
96:f7:0b:f2:02:e5:8c:46:6e:93:4b:e1:b6:6d:b3:
f3:b3:b0:59:94:12:f5:b5:d3:64:0d:73:e4:dc:aa:
e7:38:6a:0a:b2:76:7b:9d:34:5f:64:14:c0:56:66:
8b:fc:67:6d:9e:53:0b:6a:cd:86:e4:87:d1:54:ec:
82:b4:19:ea:1e:69:cd:1b:de:09:ce:0e:1f:25:8f:
d6:ec:8a:04:c9:0f:00:c4:e1:05:a7:ce:8f:ad:22:
cd:fc:8e:d1:a5:ac:07:10:19:d3:a8:c0:ff:62:c2:
7c:03:a5:ca:93:78:70:d5:73:89:21:c9:b5:c9:d9:
42:8b:c1:eb:2d:69:fe:86:93:e3:18:f3:a0:66:34:
77:2c:44:a0:56:fe:15:00:f6:4c:0e:4d:41:26:22:
ca:47:f7:bd:25:4a:5a:24:3a:fd:cd:db:ef:f5:4c:
f6:b4:68:f2:21:a8:ab:c0:7d:e1:85:9b:d5:d0:14:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:30:17:8B:7F:DF:EA:0D:CB:BA:49:99:3A:39:55:64:5B:10:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OAowF4t_3-oNy7pJmTo5VWRbEAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.96.0/24
84.21.173.0/24
84.54.50.0/24
87.121.220.0/24
94.154.162.0/24
178.215.226.0/24
193.42.34.0/24
193.47.60.0/24
193.47.63.0/24
194.55.224.0/23
194.55.227.0/24
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:99:01:61:22:f7:ed:ff:68:c1:5d:f7:29:23:5c:45:57:2f:
fb:fb:5b:c0:6a:08:0b:7b:75:8a:9f:44:ae:3d:77:64:e4:b5:
68:06:cf:f9:83:59:4e:e2:24:83:f5:a3:c5:a9:8f:6b:25:35:
ae:89:3b:17:57:0a:01:0e:62:be:af:21:62:af:00:db:a0:c0:
7d:cc:0a:63:d6:6a:d7:09:a4:6e:b3:5d:a2:61:7b:87:d1:2e:
fc:74:a6:34:57:c7:ae:ff:36:2c:fe:69:06:50:7e:28:a8:c4:
f8:9f:f1:01:75:39:55:6a:e5:c5:3c:f9:c7:0b:6e:f2:0d:38:
54:2c:29:da:88:10:87:57:ad:87:12:ef:2a:f7:5e:f7:d4:d7:
a9:68:bb:d0:2c:f4:28:90:39:20:a5:63:b2:47:49:bd:76:bb:
83:91:8b:9f:e6:c6:13:17:29:1c:c6:17:85:fd:26:b0:65:c1:
d6:7e:1f:42:63:3e:4b:9d:bb:bf:2d:7c:a6:d7:21:fd:fb:8c:
8a:de:c3:60:a9:48:69:2f:c1:01:66:c5:48:ca:31:fc:3c:35:
c5:f2:2d:e8:b2:22:e8:26:64:e9:43:fe:61:73:1a:f4:f5:22:
0f:7d:82:c2:0e:a3:f5:93:40:0a:69:fa:94:b5:00:c7:16:86:
f9:f4:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-ams.rpki-client.org