Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WIsXpaayg7H9PzCLhvxiln-mHPM.roa
File: WIsXpaayg7H9PzCLhvxiln-mHPM.roa (raw, json)
Hash identifier: JIODBg93IOFZc2jk8Lw+m6Pt/s+z5Y+aS926zDanrWM=
Subject key identifier: 58:8B:17:A5:A6:B2:83:B1:FD:3F:30:8B:86:FC:62:96:7F:A6:1C:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01830E52CF467DDF7ADF97A5C8ED071A97D8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WIsXpaayg7H9PzCLhvxiln-mHPM.roa
Signing time: Mon 05 Sep 2022 15:44:11 +0000
ROA not before: Mon 05 Sep 2022 15:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 85.217.145.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
185.252.178.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
185.254.37.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
185.225.73.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
37.139.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:52:cf:46:7d:df:7a:df:97:a5:c8:ed:07:1a:97:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 15:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=588b17a5a6b283b1fd3f308b86fc62967fa61cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:db:44:a9:99:35:4f:41:43:a3:42:8a:73:
14:b4:da:de:30:ed:9d:0e:51:9c:7b:72:db:23:8e:
35:49:3e:78:d3:49:7b:78:13:bd:a0:39:0e:35:75:
10:10:03:10:aa:55:16:f3:44:2c:7b:13:e6:6c:9d:
08:08:58:10:75:0a:c8:1e:6e:0e:fc:17:01:b8:86:
ea:ed:2a:d1:97:2f:03:3b:55:86:b3:83:ce:38:40:
79:f1:0f:cc:3d:33:bb:bf:97:96:40:f5:d1:30:01:
fc:39:84:26:14:09:5f:2d:c1:c7:0e:06:2b:1f:b6:
d4:f0:3d:20:c2:20:5b:ce:9a:af:8f:aa:83:e2:84:
89:4a:f1:db:74:95:04:06:21:e9:92:4b:29:5e:7a:
7e:99:34:a4:c4:a1:67:cf:b2:4d:8b:b3:9c:b7:74:
57:e8:ba:00:13:ad:05:21:f5:20:b8:b7:af:1c:f4:
b1:16:fd:44:94:31:68:b6:0a:9c:bf:68:da:ba:0b:
96:d4:2d:39:04:b6:6f:06:1d:9b:04:21:df:16:fd:
c9:3a:c6:66:48:27:a7:31:c7:14:42:54:5b:b6:00:
05:7a:23:d1:59:4b:21:61:db:30:ce:be:27:9b:4c:
21:ce:8e:9f:d4:43:e3:4e:fb:ec:8c:cb:8e:1a:ca:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8B:17:A5:A6:B2:83:B1:FD:3F:30:8B:86:FC:62:96:7F:A6:1C:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WIsXpaayg7H9PzCLhvxiln-mHPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.128.0/23
79.110.62.0/24
80.76.51.0/24
85.31.46.0/24
85.217.145.0/24
109.206.241.0/24
185.216.71.0/24
185.225.73.0/24
185.246.220.0/24
185.252.178.0/24
185.254.37.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
26:25:b2:fa:ce:b2:fd:27:16:e2:1e:c1:22:60:7b:c5:b8:58:
91:03:55:ef:bc:b4:d9:d7:c0:d2:42:76:79:7d:68:84:13:43:
02:a7:0a:7a:23:e2:ad:ca:c4:2b:eb:ec:61:a6:fb:8a:35:da:
d6:a8:6f:1f:67:57:5c:c0:71:f6:6a:00:02:39:4b:ee:f4:49:
6d:85:c3:45:51:02:d6:0c:f3:d7:e2:7d:fa:17:91:62:33:bd:
1f:f8:bf:07:85:b1:57:b1:65:4a:58:bf:c4:a4:b0:2a:c4:36:
a9:c1:ad:f1:d1:ad:00:90:cf:14:58:97:94:ac:58:03:84:a6:
d7:30:89:67:3f:1d:db:95:4b:ab:2d:9f:ed:29:2b:54:16:d7:
3c:69:4d:cd:35:38:70:48:38:48:e7:3d:13:81:0c:b0:d3:91:
4c:58:ba:4c:cf:c2:d2:1b:16:71:5b:64:06:82:2b:66:1d:33:
2c:a9:26:d9:e6:d8:d4:b2:1c:0a:27:d6:3d:e6:4a:78:85:6c:
b5:c6:d6:46:0d:c4:96:c1:cd:bc:37:ad:40:7c:42:83:1d:1c:
ca:2a:eb:7a:d3:ce:bd:d7:68:5e:35:80:9e:38:80:d1:05:4c:
93:e2:f9:c4:b1:dd:c5:94:8e:63:7e:ab:5b:c7:86:15:93:16:
3c:be:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org