Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/VYeOFIXfx1fjDY9GolLIZp2U_L4.roa
File: VYeOFIXfx1fjDY9GolLIZp2U_L4.roa (raw, json)
Hash identifier: YhM3PlKhPSA024lOgSS2TwWi3fzx7UArXsIg2AW6Mro=
Subject key identifier: 55:87:8E:14:85:DF:C7:57:E3:0D:8F:46:A2:52:C8:66:9D:94:FC:BE
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 1AEA261C
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/VYeOFIXfx1fjDY9GolLIZp2U_L4.roa
Signing time: Tue 14 Jun 2022 09:28:44 +0000
ROA not before: Tue 14 Jun 2022 09:28:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8339
IP address blocks: 202.170.80.0/21 maxlen: 24
82.149.96.0/19 maxlen: 24
195.202.128.0/19 maxlen: 24
62.40.128.0/17 maxlen: 24
178.18.160.0/20 maxlen: 24
94.16.32.0/19 maxlen: 24
185.100.96.0/22 maxlen: 24
141.98.176.0/22 maxlen: 24
95.143.224.0/20 maxlen: 24
195.230.160.0/19 maxlen: 24
82.218.0.0/16 maxlen: 24
194.106.224.0/19 maxlen: 24
89.104.0.0/19 maxlen: 24
195.202.160.0/19 maxlen: 24
92.62.16.0/20 maxlen: 24
81.217.0.0/16 maxlen: 24
2a00:1b38::/32 maxlen: 32
2a02:e200::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451552796 (0x1aea261c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jun 14 09:28:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55878e1485dfc757e30d8f46a252c8669d94fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:f3:04:5f:6a:9c:d2:06:5f:4c:57:87:3b:
70:d3:f5:65:5c:7a:d7:e0:49:2d:cf:a5:8f:0c:1e:
bc:74:f0:b2:36:1d:56:f9:2e:29:7d:d9:cf:5e:70:
d6:25:b4:73:b4:2f:25:a4:9f:03:0c:82:21:89:59:
01:7c:6f:bb:eb:35:c7:62:ea:55:bf:08:43:24:bf:
5e:93:dc:01:e3:f0:23:71:dd:eb:49:22:a1:0a:b5:
d8:49:5b:f8:c3:67:21:4b:e7:3c:ba:3b:8c:4a:fa:
51:9b:37:73:95:7e:47:34:5c:ac:5b:60:0d:28:05:
a6:90:cf:7b:c5:6f:37:a9:e4:a8:98:73:1c:03:3d:
af:3e:a6:2b:6f:ac:ed:bf:9b:bb:77:24:8a:53:f3:
be:53:3c:87:b9:0d:8f:b2:23:5b:90:f6:be:3f:c1:
c6:9e:f9:2f:9c:66:d8:6f:e1:9b:63:14:20:c7:b3:
0a:c4:5c:91:b4:8c:2e:02:fd:88:4a:97:fd:bb:45:
a2:4a:62:b3:48:ed:fc:58:b1:c1:55:d7:21:04:c8:
bb:f3:04:f1:e1:f2:a3:72:f9:13:a9:06:60:d6:47:
dd:54:bb:3e:33:e7:fe:5b:31:ca:d6:a4:8b:49:e5:
7a:63:e1:cd:37:37:c0:fa:85:89:91:17:f8:5a:69:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:8E:14:85:DF:C7:57:E3:0D:8F:46:A2:52:C8:66:9D:94:FC:BE
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/VYeOFIXfx1fjDY9GolLIZp2U_L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.40.128.0/17
81.217.0.0/16
82.149.96.0/19
82.218.0.0/16
89.104.0.0/19
92.62.16.0/20
94.16.32.0/19
95.143.224.0/20
141.98.176.0/22
178.18.160.0/20
185.100.96.0/22
194.106.224.0/19
195.202.128.0/18
195.230.160.0/19
202.170.80.0/21
IPv6:
2a00:1b38::/32
2a02:e200::/30
Signature Algorithm: sha256WithRSAEncryption
75:84:cb:e4:fa:c5:e7:c2:95:8d:81:bb:a2:c8:9c:49:38:a0:
b7:f2:86:92:ab:14:50:ee:1e:95:b4:5c:b0:67:01:34:1d:83:
98:31:80:29:f5:dd:93:a6:d5:99:60:5b:30:06:b8:dd:83:bf:
3f:68:f2:1b:79:94:7c:7a:7e:3b:52:70:c0:c6:f3:9e:18:99:
de:4b:02:88:a7:b9:b7:91:19:fe:8e:cd:0c:1c:4f:8c:fe:fb:
67:9a:c7:6a:0c:36:6f:13:bd:a3:a9:f2:84:20:46:6b:6b:93:
38:ad:ec:cb:a0:6f:d5:87:1c:4e:09:e5:da:92:62:69:12:06:
0b:ac:52:87:e9:e6:f4:ae:88:e2:ae:32:95:f2:d5:d1:a4:48:
02:50:bd:5c:b0:91:3b:cd:67:ee:45:df:0c:50:15:15:a5:39:
c5:69:b6:82:d1:ca:ee:f9:f6:e0:da:65:c3:45:1b:9a:1f:73:
f4:87:c2:f5:db:65:63:17:a4:15:0b:39:3b:46:e4:ab:a9:c8:
fd:7c:47:17:1e:9a:1e:1e:d0:75:37:6c:d6:b2:95:f5:9a:6f:
99:92:cf:e0:46:00:3e:01:41:7e:cc:62:86:0b:c0:04:56:ff:
2a:2a:43:53:f5:74:9b:b9:2e:65:de:e4:82:3a:f8:4d:fa:22:
16:99:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org