Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iA-oA9PL75l28XGFPxMiHOJBHxc.roa
File: iA-oA9PL75l28XGFPxMiHOJBHxc.roa (raw, json)
Hash identifier: j7sahys/OSiOFPmWDLQrk5eOW63fccvi+SuWgLI9vu0=
Subject key identifier: 88:0F:A8:03:D3:CB:EF:99:76:F1:71:85:3F:13:22:1C:E2:41:1F:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018475406EDD2E4D9DC154AF4F9C27A7926E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iA-oA9PL75l28XGFPxMiHOJBHxc.roa
Signing time: Mon 14 Nov 2022 08:27:47 +0000
ROA not before: Mon 14 Nov 2022 08:27:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 212.87.204.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:40:6e:dd:2e:4d:9d:c1:54:af:4f:9c:27:a7:92:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 08:27:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=880fa803d3cbef9976f171853f13221ce2411f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:a4:f9:26:a4:eb:97:9f:c0:85:2e:7f:df:
75:ff:ee:41:56:0a:d7:1d:c9:08:94:8a:13:ae:22:
69:ac:9c:67:ec:d4:b6:75:c0:38:27:6e:d0:8d:cd:
99:87:cd:d7:ca:e9:19:cf:bf:01:e2:a3:f7:fb:fb:
4b:72:ad:e4:6a:97:61:02:ab:db:69:0b:7e:ac:a3:
22:69:21:c6:3e:cb:ef:b3:5c:ca:1d:97:16:8b:4c:
ab:d3:14:8e:1c:bf:c7:e9:58:35:50:34:1c:88:07:
ee:aa:42:9a:7d:8a:67:f9:0d:89:dc:cf:33:88:32:
6e:75:fd:5c:1b:aa:cb:73:b8:f8:22:c6:78:94:a4:
93:55:ca:f9:60:89:00:31:ba:9b:ce:14:d1:1f:0c:
e8:45:b2:d6:4e:a7:3d:3a:8f:00:0b:1a:e9:ff:5a:
9f:2b:a2:4e:bc:f2:65:4c:bc:21:0a:a0:c9:0e:56:
41:5b:12:a2:59:3e:0d:bd:83:3e:66:71:1a:16:d8:
f9:f1:9f:37:16:e9:28:05:b4:57:97:66:c9:8f:da:
ae:46:99:f4:29:c4:9d:d4:64:17:7b:05:19:a9:34:
d4:1a:08:86:17:c7:5d:47:e2:04:25:7c:20:5b:40:
96:a1:05:15:77:c3:87:0e:90:15:1d:5b:1d:2b:ac:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:A8:03:D3:CB:EF:99:76:F1:71:85:3F:13:22:1C:E2:41:1F:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iA-oA9PL75l28XGFPxMiHOJBHxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
109.206.237.0/24
109.206.242.0/24
185.218.138.0/24
185.225.74.0/24
185.246.222.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c0:1f:da:10:1f:7b:86:73:a2:33:37:cf:61:78:dd:bd:3a:
1a:2b:a7:77:48:ad:87:28:73:f6:7a:4d:bf:c1:f9:b8:65:a8:
fd:41:ab:0b:b3:22:81:db:7b:36:04:2d:98:8f:40:f2:ca:bf:
49:75:75:d8:f3:4c:49:8d:b5:7a:1b:50:35:ca:67:b0:00:76:
d5:03:65:3b:f3:12:a9:73:7e:0d:bd:33:e7:0f:7f:cb:7c:07:
7c:02:4b:94:46:35:be:62:d7:9c:d6:1a:4c:f8:86:1b:f4:88:
f9:1b:54:a3:c4:1e:83:08:68:45:5e:2f:41:1d:ad:49:ad:fa:
4a:b2:7c:12:22:bc:95:60:c4:a9:e9:e8:37:02:ae:fa:1a:40:
13:e7:06:61:a8:ad:a3:36:44:c6:f6:70:ba:ef:c0:c7:03:d0:
1e:a1:4f:6d:1e:29:19:3c:cf:2e:9d:97:b9:db:55:2a:7a:06:
92:04:e9:6e:5a:81:db:28:9a:94:a9:3e:4e:c2:08:c9:31:e3:
f0:4d:6e:92:2e:4d:f8:45:9c:1b:64:6e:eb:06:6b:b4:99:07:
ff:2b:4e:86:e6:7a:6a:5b:d9:c1:f3:9f:45:09:fc:2a:2a:ff:
31:d3:4b:24:74:a5:ca:90:8c:ea:72:99:70:db:56:d1:c7:bf:
98:fa:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org