Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vRfbVDv_VxbYFD03vPCABEpIvcs.roa
File: vRfbVDv_VxbYFD03vPCABEpIvcs.roa (raw, json)
Hash identifier: 8b4gcpU8wJyXqofOc8z1NyhGdRnvm3olAsznJvQrbq4=
Subject key identifier: BD:17:DB:54:3B:FF:57:16:D8:14:3D:37:BC:F0:80:04:4A:48:BD:CB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182078D80AB6F3292A7BF2A71F83F8342E2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vRfbVDv_VxbYFD03vPCABEpIvcs.roa
Signing time: Sat 16 Jul 2022 15:08:10 +0000
ROA not before: Sat 16 Jul 2022 15:08:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 212.87.204.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
94.154.160.0/24 maxlen: 24
94.154.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:07:8d:80:ab:6f:32:92:a7:bf:2a:71:f8:3f:83:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 16 15:08:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd17db543bff5716d8143d37bcf080044a48bdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:77:d0:c2:56:54:d6:78:dd:a9:62:d0:72:
e7:57:ad:a4:af:10:19:dc:36:dc:cb:50:43:e1:a9:
51:40:e5:58:8d:6d:af:f8:14:8d:8a:a6:28:d9:93:
87:ee:a5:2e:8c:c1:30:59:f9:4d:17:a5:ae:18:14:
dd:7a:3d:f8:c1:32:be:91:6c:b9:53:af:c6:53:b9:
43:be:99:8c:0e:d4:91:b3:7c:55:31:44:27:c1:44:
27:89:88:81:0b:93:1f:a2:d0:5f:30:1c:52:0f:99:
38:13:91:97:7c:82:48:94:d0:15:41:31:c5:8b:db:
ea:7e:96:d3:8a:29:de:fe:e5:69:77:46:54:da:df:
2c:c9:0f:32:f7:1d:ab:b3:07:62:fd:f7:15:32:56:
a2:11:dc:8e:a9:13:af:8c:27:d3:39:81:e6:3f:2a:
04:c8:11:f7:56:cd:f9:ec:a0:33:36:59:b4:9c:25:
2a:3f:bc:94:9e:f8:d3:5f:8a:08:e9:33:b9:8a:c7:
50:64:e2:d1:49:f0:e9:36:4b:89:9e:c2:f8:b5:68:
bc:1c:a7:50:3a:a0:6e:ae:3f:9b:58:e5:09:17:ef:
06:7f:58:a3:63:5b:05:91:da:55:c0:29:48:ca:15:
6e:0d:c3:d8:97:76:f0:3e:97:65:17:49:b7:c9:30:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:17:DB:54:3B:FF:57:16:D8:14:3D:37:BC:F0:80:04:4A:48:BD:CB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vRfbVDv_VxbYFD03vPCABEpIvcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.62.0/24
80.76.51.0/24
85.31.44.0/24
85.31.46.0/24
94.103.124.0/24
94.154.160.0/24
94.154.173.0/24
109.206.241.0-109.206.242.255
185.216.71.0/24
185.218.138.0/24
185.225.74.0/24
185.246.222.0/23
194.48.250.0/24
194.55.186.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e1:97:f9:ac:ff:db:7e:15:ab:4a:c0:84:d4:ef:bd:7b:f8:
62:c7:8c:f4:71:ba:7e:27:72:f2:f3:08:ba:f8:cd:73:1e:45:
b1:e5:11:be:c2:87:cd:42:23:b2:9d:70:36:cf:17:c9:3b:07:
85:19:6b:38:db:1a:3b:d4:e2:69:31:96:b8:f0:ff:3b:0d:71:
9a:c4:81:dd:8c:18:86:e3:40:d4:7d:80:f3:f2:ba:9f:d8:74:
9e:66:18:37:95:11:4d:8c:7d:7f:af:c6:30:43:b9:09:51:c5:
44:27:91:e8:1f:94:46:fa:c1:ae:43:30:53:99:56:6d:17:9d:
19:b7:85:d0:df:69:c6:ce:d5:6e:33:15:37:03:fd:7e:24:03:
2b:f4:27:d5:29:5e:c9:ae:6f:42:28:2c:23:4d:58:00:f4:13:
ab:a1:b6:5b:cd:3b:7e:98:a3:f8:eb:0d:d5:64:d7:02:e1:3b:
df:8c:a8:c1:d2:71:6c:71:5b:57:9e:2e:49:12:ad:4a:de:f3:
05:6d:6d:01:7d:b1:bf:89:e8:a2:6d:40:cc:60:3e:0a:4c:00:
ed:ee:e9:8f:1c:ea:ae:e6:4e:1b:b0:32:77:93:60:03:ee:e6:
94:61:cf:6b:83:39:5b:cc:56:80:0c:ff:5e:33:31:75:4b:9f:
39:93:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org