Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cvn6eOiOUl9NEaQ_3xpQVokC6k0.roa
File: cvn6eOiOUl9NEaQ_3xpQVokC6k0.roa (raw, json)
Hash identifier: LCe0MR5rvoI5WXjVXSTUBaqEs4mOaYjW66irzj6LnXY=
Subject key identifier: 72:F9:FA:78:E8:8E:52:5F:4D:11:A4:3F:DF:1A:50:56:89:02:EA:4D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184855D23FE2F0ADD0A663ACB07D4F9069B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cvn6eOiOUl9NEaQ_3xpQVokC6k0.roa
Signing time: Thu 17 Nov 2022 11:33:04 +0000
ROA not before: Thu 17 Nov 2022 11:33:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
178.215.226.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
193.222.98.0/24 maxlen: 24
193.47.63.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:5d:23:fe:2f:0a:dd:0a:66:3a:cb:07:d4:f9:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 17 11:33:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72f9fa78e88e525f4d11a43fdf1a50568902ea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:91:9a:e4:29:e4:ea:7a:29:ec:85:84:d1:
50:fe:ee:79:6a:bc:48:c1:66:85:51:65:48:5a:fb:
83:a7:5e:04:7a:c3:25:a3:82:04:94:9d:d8:8a:07:
d6:38:8f:3c:08:7c:b4:1f:03:67:89:88:f4:58:51:
5d:85:a7:56:5d:aa:79:1c:00:88:66:24:0c:d2:ac:
84:85:3d:49:d4:7c:b2:d1:af:99:c2:e6:68:42:3c:
f5:d5:ae:61:c7:05:4d:72:b4:aa:90:24:2a:5b:97:
87:bf:eb:9a:68:0b:5e:5f:c9:b3:06:c6:ef:29:d3:
1b:28:e8:40:88:e8:9d:76:0c:b4:8f:50:68:d9:b9:
b6:0f:fe:3d:78:88:53:8f:c4:3f:9f:ec:7d:ef:bb:
e2:a8:b6:fe:5c:5c:dd:a1:80:0a:26:16:c9:05:37:
06:d5:03:a4:80:57:8a:2d:4b:4e:cb:e9:98:c8:9d:
a0:98:15:2c:e2:b9:75:43:42:8f:7c:d8:1a:e5:30:
d5:f3:d3:c2:a7:81:5f:ce:86:75:59:c1:6a:ff:31:
c0:93:41:37:20:fa:65:1e:b2:b0:51:af:05:97:a2:
29:9b:14:e3:de:ef:75:fc:03:1c:eb:2f:15:14:9c:
06:9b:7b:50:3c:96:74:cc:6e:5a:47:3c:07:1b:9c:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F9:FA:78:E8:8E:52:5F:4D:11:A4:3F:DF:1A:50:56:89:02:EA:4D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cvn6eOiOUl9NEaQ_3xpQVokC6k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.49.0/24
87.121.124.0/23
94.154.161.0-94.154.163.255
164.40.185.0/24
178.215.226.0/24
185.218.137.0/24
185.218.139.0/24
193.47.63.0/24
193.222.98.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ec:19:9d:39:53:26:ed:f2:b3:8e:1c:47:bb:3a:51:0d:45:
fc:75:d5:de:f6:71:02:6e:49:03:b6:52:34:56:79:f1:26:34:
e6:6b:5c:78:8f:0a:2a:d1:34:ad:c7:8c:bc:23:6f:8d:5c:d8:
46:9c:16:bc:28:9b:d4:e4:d5:89:8e:11:cb:ef:da:2c:22:6f:
34:e5:24:fe:dd:33:5b:f1:5f:18:19:a3:9b:7e:bb:a1:59:da:
21:57:71:78:18:b3:e0:a2:7a:05:16:d3:37:c3:bc:65:b3:96:
01:4a:bb:aa:f0:24:88:ad:7f:0c:a3:9d:d8:50:75:a8:f0:64:
0a:5f:05:01:dc:86:0f:3e:7d:c1:40:30:5f:5c:73:cc:61:ea:
18:51:1d:6b:44:3a:c7:0e:63:ab:ea:c9:ab:64:08:c7:09:2a:
d4:6a:7f:cc:32:b3:41:9f:73:f0:93:de:3b:24:1f:7c:f7:21:
f3:6c:0f:e6:d3:16:c0:1d:b6:18:ef:52:01:2d:56:0a:7a:dc:
ee:36:70:3a:cd:eb:52:c1:4f:4c:f7:e1:00:c1:49:2c:9f:de:
6b:fb:82:90:cc:75:84:8b:42:ea:87:ac:e0:93:00:13:e3:53:
c1:f1:f6:6f:99:86:e2:a0:2f:06:40:e4:70:73:1a:fd:be:31:
f1:1b:19:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org