Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hM0BlsCBL07TTwRW--RaLCpanxo.roa
File: hM0BlsCBL07TTwRW--RaLCpanxo.roa (raw, json)
Hash identifier: DcOTtD6tPc7MMEgiAG9MDdvA+2uaPKp8TuSwcy4Qxnk=
Subject key identifier: 84:CD:01:96:C0:81:2F:4E:D3:4F:04:56:FB:E4:5A:2C:2A:5A:9F:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C84192C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hM0BlsCBL07TTwRW--RaLCpanxo.roa
Signing time: Sat 01 Jan 2022 01:02:47 +0000
ROA not before: Sat 01 Jan 2022 01:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201133
IP address blocks: 212.73.137.0/24 maxlen: 24
93.123.73.207/32 maxlen: 32
93.123.73.0/24 maxlen: 24
94.156.175.0/24 maxlen: 24
93.123.10.0/24 maxlen: 24
87.121.110.0/24 maxlen: 24
85.217.223.0/24 maxlen: 24
85.217.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478419244 (0x1c84192c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84cd0196c0812f4ed34f0456fbe45a2c2a5a9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:8b:99:90:5c:48:d9:99:56:65:53:fb:28:
a6:6f:e5:14:69:9c:57:04:d1:0d:7b:4b:ce:78:39:
c8:4b:c3:81:08:70:a0:c6:a1:ae:4b:27:e8:19:11:
ba:94:e6:92:3e:5b:93:b1:be:1a:62:2e:c6:d7:d9:
39:3d:6d:5f:4b:84:22:1c:93:20:f9:9d:a1:37:d7:
a8:cf:90:ed:2d:77:0d:7c:99:3e:00:64:c1:40:cc:
3d:84:1d:4b:b9:22:51:be:86:6f:b1:61:05:ca:c0:
5e:50:0a:3b:e3:b3:a0:fb:60:d4:7c:51:d1:28:f5:
fd:b7:59:11:cb:a3:93:50:69:e9:22:50:2f:f1:4b:
08:08:a8:a6:5b:ef:84:d8:44:b9:3a:a8:b3:85:1b:
ef:4f:36:78:31:34:2d:f5:26:a5:96:d9:6a:14:12:
fd:75:67:ca:25:77:6d:d3:12:37:ee:a0:6a:e7:95:
0f:5e:1a:32:4d:48:46:ea:27:8e:d1:ab:51:41:d6:
9e:30:f1:91:18:02:1f:0e:73:7e:6b:2b:d3:74:c4:
87:ce:5f:0c:e7:6e:73:56:91:dd:13:ac:8a:06:f8:
b3:4e:32:97:f9:d5:ba:5c:2a:2a:b0:b3:6d:a2:ca:
13:4d:83:bb:9d:c4:2f:5f:36:7f:5d:b6:36:cb:13:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:01:96:C0:81:2F:4E:D3:4F:04:56:FB:E4:5A:2C:2A:5A:9F:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hM0BlsCBL07TTwRW--RaLCpanxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.222.0/23
87.121.110.0/24
93.123.10.0/24
93.123.73.0/24
94.156.175.0/24
212.73.137.0/24
Signature Algorithm: sha256WithRSAEncryption
78:31:08:20:f4:df:43:8b:29:8a:da:e1:76:78:73:b1:24:2b:
ce:10:94:ae:1a:71:5f:75:2b:da:fe:77:93:ac:dc:8d:f0:ed:
38:31:de:7a:f3:ef:f7:93:8c:1f:96:76:7a:43:67:77:3a:83:
b1:b7:e4:7c:f0:3f:fa:58:5b:af:67:1d:13:e6:18:01:6d:c0:
75:12:94:83:5f:06:6d:85:10:0f:bd:ee:0b:51:a9:bb:ad:5c:
e2:2a:78:1c:4b:5a:4e:fc:4b:09:56:59:72:fb:6b:5b:f8:9d:
84:48:48:d0:6b:06:e4:cd:7f:b4:9b:f0:94:2b:33:e4:b7:a6:
c6:52:5e:78:d2:00:ff:6f:ae:77:56:2e:f6:15:f9:f0:01:9e:
b3:d4:e6:4b:91:52:f3:d1:f6:9b:11:64:66:93:6b:fd:b4:f1:
c2:7a:68:ba:7b:2e:fb:1e:22:ef:cd:bc:62:6a:be:c5:a2:2d:
44:54:9b:6c:c5:5c:b2:eb:47:4e:3a:ef:5a:aa:58:d5:61:a0:
3a:e8:f2:64:d7:37:7f:cb:4d:54:38:57:c4:24:96:1a:db:ea:
4a:bb:70:c9:fe:85:f6:8b:a6:0f:61:41:d8:7a:28:80:91:ea:
4f:aa:34:a3:6a:04:17:5f:8c:e6:62:66:a0:5b:ba:50:1f:b0:
2b:a6:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org