Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SR88MwB1npXGyO1lbpWWcDvD9D0.roa
File: SR88MwB1npXGyO1lbpWWcDvD9D0.roa (raw, json)
Hash identifier: oC6BmgnJkWd03ATFICkBQBtP3z/cJuXExIEVvqVY9yM=
Subject key identifier: 49:1F:3C:33:00:75:9E:95:C6:C8:ED:65:6E:95:96:70:3B:C3:F4:3D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018529568BBC3242C6EE285B0A6DAE92FEDC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SR88MwB1npXGyO1lbpWWcDvD9D0.roa
Signing time: Mon 19 Dec 2022 07:43:35 +0000
ROA not before: Mon 19 Dec 2022 07:43:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
45.139.107.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:56:8b:bc:32:42:c6:ee:28:5b:0a:6d:ae:92:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 19 07:43:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=491f3c3300759e95c6c8ed656e9596703bc3f43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:ce:af:e6:2a:22:86:d5:89:0d:8a:11:20:
0c:d6:7e:6b:8e:19:44:c8:fc:b5:da:c8:54:50:9d:
d4:7b:84:36:39:2e:62:06:f8:8a:80:2d:cc:96:88:
32:79:b5:f5:c5:14:37:ac:d2:b2:5d:c0:d0:0d:14:
44:64:03:cf:63:0b:c0:4c:e7:6c:f3:24:ad:3b:24:
1f:aa:1b:a9:e2:6a:4c:c8:40:bc:22:da:b9:80:45:
7e:b1:ac:43:0b:91:b9:24:bd:b1:4b:4d:bf:bc:52:
ca:12:8e:97:bd:e3:f4:0c:e0:7e:39:9d:a9:0f:4e:
db:d1:43:c8:0c:e7:89:fc:77:ed:d5:d6:29:6a:8b:
c8:10:05:74:ba:a0:de:9c:dc:4b:d1:5e:9d:39:bc:
5a:59:d7:d2:d1:de:ce:71:ff:d6:b1:0a:2a:b1:48:
87:85:e7:3d:4b:9e:c4:45:8e:d5:21:cb:17:dd:7a:
4e:37:af:85:c5:7d:38:a1:99:16:0b:2d:f9:03:f6:
02:3d:2d:16:9c:a0:7e:1d:78:23:a1:e8:b1:bc:66:
f3:30:99:2c:96:72:46:42:b1:4a:67:a3:0f:fa:a4:
f5:15:7a:c6:6d:d8:c5:89:c2:71:75:1e:64:a7:63:
d1:f2:86:c7:55:61:93:3f:a3:66:48:d7:37:38:56:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:3C:33:00:75:9E:95:C6:C8:ED:65:6E:95:96:70:3B:C3:F4:3D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SR88MwB1npXGyO1lbpWWcDvD9D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.107.0/24
80.76.48.0/24
85.31.45.0/24
85.31.47.0/24
87.120.87.0/24
94.154.172.0/24
178.215.225.0/24
178.215.227.0/24
178.215.239.0/24
185.216.69.0-185.216.70.255
193.35.19.0/24
194.55.224.0/23
Signature Algorithm: sha256WithRSAEncryption
46:8f:52:e5:46:f4:0f:17:fc:b9:64:af:c8:cf:47:9a:c8:e7:
5f:3e:62:42:2e:42:ec:1a:91:af:32:e4:19:ec:7c:4d:e6:36:
74:6f:e6:96:48:8f:d1:4d:3f:6f:f6:41:c1:0a:31:fe:1d:72:
0d:16:47:4e:af:d2:00:6f:e3:47:74:42:10:df:e4:18:26:a8:
cf:96:a6:d4:d8:5f:13:27:a6:27:03:54:71:28:d0:18:29:ce:
16:14:29:24:04:d6:44:4a:1c:e1:80:7d:09:b7:11:68:4f:a9:
ec:d4:29:a7:ff:56:f1:c7:39:56:52:fa:a5:3f:20:5c:ab:df:
9f:64:62:ec:d5:f0:2d:09:86:bb:09:a4:45:aa:40:c1:a2:b1:
20:06:31:4f:17:7e:10:fc:74:ba:da:a1:52:1b:13:8b:da:99:
f3:61:fb:a8:15:d1:25:a0:7f:ec:9e:42:dd:d3:4d:b2:b9:6a:
4b:d5:ac:0e:1c:67:d5:78:de:73:cb:88:7c:2a:f6:3c:97:e9:
2e:b3:83:c2:94:bb:e1:5c:2e:99:47:51:21:d4:d1:10:d3:f5:
08:61:94:77:2a:3d:5f:0a:cd:60:7d:c9:b9:ed:85:b5:bc:40:
50:e8:cb:19:53:93:26:4f:49:ce:54:1f:bd:bd:4d:28:39:ef:
10:18:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org