Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aHWyB_DNzOTmLTJIa5OHVmdhz04.roa
File: aHWyB_DNzOTmLTJIa5OHVmdhz04.roa (raw, json)
Hash identifier: ctDs9xs2Zv79cGRy0ih/mCW5tNNuLORAb1b/ak9QOYY=
Subject key identifier: 68:75:B2:07:F0:CD:CC:E4:E6:2D:32:48:6B:93:87:56:67:61:CF:4E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183C111073533BFCA752AA25298A7C2042C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aHWyB_DNzOTmLTJIa5OHVmdhz04.roa
Signing time: Mon 10 Oct 2022 08:44:22 +0000
ROA not before: Mon 10 Oct 2022 08:44:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.31.45.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
82.115.208.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
193.35.19.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
84.54.49.0/24 maxlen: 24
194.55.224.0/24 maxlen: 24
194.55.225.0/24 maxlen: 24
178.215.225.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
178.215.239.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
87.120.84.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
193.25.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:11:07:35:33:bf:ca:75:2a:a2:52:98:a7:c2:04:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 08:44:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6875b207f0cdcce4e62d32486b9387566761cf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:be:10:c1:67:9c:4a:bb:15:3b:70:3c:fc:
c2:ff:2c:c5:a0:e1:c8:aa:87:bb:68:a5:d5:e0:f0:
cb:86:53:c0:ce:e6:1a:27:0c:35:06:72:08:00:ec:
56:12:12:41:25:b8:ac:62:b8:67:eb:35:03:a0:01:
d9:aa:9c:58:1e:33:ea:b2:b7:e5:41:43:0d:be:f9:
fa:ef:fa:b5:0a:34:6c:11:be:fc:ba:c2:e3:16:84:
10:46:ad:2c:cf:d8:4d:75:a8:f4:a4:76:d1:b9:32:
5a:0b:38:66:69:04:a3:fe:93:55:f1:02:c1:d0:34:
06:4e:25:49:65:f0:ee:9f:88:ad:90:d6:7c:48:15:
fd:99:96:d4:ba:0f:9f:67:0b:11:5c:f9:89:15:68:
63:85:2a:77:ea:b8:45:9a:d1:0f:0a:8d:10:4e:b6:
50:85:d9:f2:96:92:1e:18:9d:37:6b:84:78:0c:e2:
c4:23:15:68:ef:fa:52:ed:c6:64:90:39:13:05:8a:
cb:1a:6e:e0:98:38:ed:78:f9:30:71:2c:35:5a:b8:
33:b1:ed:c9:51:75:aa:81:c3:aa:f5:70:19:fe:f1:
8c:93:0a:9c:c9:9e:fd:e9:ab:c0:0b:a5:e9:ea:c3:
8e:76:d9:e1:ca:a9:95:86:c7:0b:9f:85:bf:04:bf:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:B2:07:F0:CD:CC:E4:E6:2D:32:48:6B:93:87:56:67:61:CF:4E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aHWyB_DNzOTmLTJIa5OHVmdhz04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
82.115.208.0/24
82.115.211.0/24
84.21.172.0/23
84.54.49.0/24
85.31.45.0/24
85.31.47.0/24
87.120.84.0/24
87.120.87.0/24
94.154.172.0/24
178.215.225.0-178.215.227.255
178.215.239.0/24
185.216.69.0-185.216.70.255
185.246.221.0/24
193.25.217.0-193.25.218.255
193.35.19.0/24
193.47.63.0/24
194.55.224.0/23
194.55.227.0/24
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
86:05:15:26:cc:85:68:a1:b1:60:34:35:d6:e2:ef:93:df:1a:
69:82:20:ed:2f:f0:a5:86:c3:fa:b1:35:fc:63:3b:69:6d:72:
15:ba:26:aa:c5:42:44:c0:7e:96:38:29:b1:f2:02:ed:d1:aa:
d6:ee:60:60:2c:6c:72:4e:e4:8d:c8:be:76:3d:01:40:e6:c0:
57:a5:0f:cf:f5:09:fa:ab:aa:13:49:bc:c7:ca:37:b8:ce:7c:
18:36:99:dc:de:7b:d2:7a:4d:91:dd:c5:33:54:60:5f:3d:5f:
b2:5d:82:df:89:11:89:c2:70:8f:32:15:bb:e9:f4:64:e1:c5:
f7:29:7d:7d:1f:f7:8e:40:d4:62:e8:23:d6:f9:d7:41:6a:ec:
3c:01:1b:4d:d2:c5:9e:de:25:07:e5:74:0f:25:9d:8e:3d:ac:
04:45:d2:eb:fb:c1:5f:91:d6:48:f4:11:91:e8:01:83:8a:65:
c6:67:ed:da:35:63:a8:e1:82:f3:e6:5f:46:5e:32:4b:d8:b1:
93:54:d0:83:44:b4:01:5f:1c:43:b4:86:a0:53:6b:61:c6:4a:
b8:71:82:eb:32:5c:bb:bd:48:c7:8c:82:ff:d9:d2:d3:43:ec:
ea:96:6d:d4:a5:32:83:9a:df:f2:4e:f7:ad:50:d6:59:18:3b:
8c:8f:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org