Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/R8bxTbemuJHI6W2p-v5td35KrJU.roa
File: R8bxTbemuJHI6W2p-v5td35KrJU.roa (raw, json)
Hash identifier: ZtcS9/Oika9NVDsqN3l6sP3yj/FLH8sMwjjCefyqbJA=
Subject key identifier: 47:C6:F1:4D:B7:A6:B8:91:C8:E9:6D:A9:FA:FE:6D:77:7E:4A:AC:95
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 0181FBE138682A8D7D768A93F49E817B5785
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/R8bxTbemuJHI6W2p-v5td35KrJU.roa
Signing time: Thu 14 Jul 2022 08:44:10 +0000
ROA not before: Thu 14 Jul 2022 08:44:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57395
IP address blocks: 176.98.165.0/24 maxlen: 24
176.98.166.0/24 maxlen: 24
176.98.160.0/24 maxlen: 24
176.98.161.0/24 maxlen: 24
176.98.162.0/24 maxlen: 24
176.98.163.0/24 maxlen: 24
176.98.164.0/24 maxlen: 24
176.98.167.0/24 maxlen: 24
185.254.0.0/24 maxlen: 24
185.181.170.0/24 maxlen: 24
185.181.171.0/24 maxlen: 24
185.181.168.0/24 maxlen: 24
2a0b:33c0:114::/48 maxlen: 48
2a0b:33c0:118::/48 maxlen: 48
2a0b:33c0:113::/48 maxlen: 48
2a0b:33c0:51::/48 maxlen: 48
2a0b:33c0:107::/48 maxlen: 48
2a0b:33c0:2::/48 maxlen: 48
2a0b:33c0:10::/48 maxlen: 48
2a0b:33c0:50::/48 maxlen: 48
2a0b:33c0:6::/48 maxlen: 48
2a0b:33c0:3::/48 maxlen: 48
2a0b:33c0:1::/48 maxlen: 48
2a0b:33c0:117::/48 maxlen: 48
2a0b:33c0:112::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:e1:38:68:2a:8d:7d:76:8a:93:f4:9e:81:7b:57:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Jul 14 08:44:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47c6f14db7a6b891c8e96da9fafe6d777e4aac95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:a2:af:bc:78:6d:72:a7:02:d5:31:0d:d5:
b4:c5:a3:6a:1f:69:70:b7:fd:f0:b6:32:80:09:5e:
c6:dd:b6:8f:7a:b6:5d:29:4c:9c:e7:14:76:84:8d:
e8:7a:c1:a3:c0:07:23:d9:aa:62:21:54:cb:7a:a8:
1e:88:e8:16:6d:9d:e6:fd:35:42:6f:41:68:9a:b3:
b1:f2:8f:90:2b:39:d4:e5:36:bf:6b:d1:1a:21:9c:
8d:b0:bb:fe:92:20:7e:29:51:33:bb:71:fb:52:26:
ce:2a:e6:d1:e4:8a:2a:6a:16:83:f4:9c:50:23:1f:
b9:b4:c9:b3:6b:6e:eb:53:ad:36:df:d0:92:18:64:
91:98:1a:57:fd:2b:e5:6a:87:9b:ad:e4:93:4c:39:
cc:ca:ab:bf:5c:a7:72:cd:2d:84:55:4e:d0:b5:98:
b8:d4:46:bb:ed:57:44:54:15:e4:ed:4a:64:a4:0e:
ec:78:d6:80:24:bc:bc:36:48:da:a1:1a:b0:f0:6f:
7c:13:bd:b2:69:70:b5:c6:7c:8f:94:41:67:2f:16:
1d:d4:ac:59:0c:18:b2:fd:6e:e2:f4:64:34:0b:f9:
1e:2d:6e:79:be:72:3f:4c:f9:5a:9b:39:37:ac:ef:
11:cb:ef:f4:f7:12:83:3f:5c:06:16:cb:7c:cd:1d:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:F1:4D:B7:A6:B8:91:C8:E9:6D:A9:FA:FE:6D:77:7E:4A:AC:95
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/R8bxTbemuJHI6W2p-v5td35KrJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.160.0/21
185.181.168.0/24
185.181.170.0/23
185.254.0.0/24
IPv6:
2a0b:33c0:1::-2a0b:33c0:3:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:6::/48
2a0b:33c0:10::/48
2a0b:33c0:50::/47
2a0b:33c0:107::/48
2a0b:33c0:112::-2a0b:33c0:114:ffff:ffff:ffff:ffff:ffff
2a0b:33c0:117::-2a0b:33c0:118:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:17:45:ce:47:2e:20:f6:88:73:38:20:23:fb:a5:82:ed:67:
29:e2:0a:64:8e:70:6b:50:b3:00:35:83:b8:5e:20:73:f2:73:
cc:bc:13:69:28:69:e6:32:4a:28:d1:43:48:0d:68:1b:d6:12:
92:17:3c:2b:62:1a:17:c2:2c:35:14:e8:84:84:32:00:40:a2:
52:48:0d:4c:ca:36:d3:4d:bc:87:b5:a7:eb:e9:75:3c:82:e5:
8c:7b:44:2e:bf:d2:b4:13:f8:bc:64:61:96:80:d6:ba:3b:b4:
33:2a:b4:dc:1c:b1:da:2d:e7:93:d8:c4:18:c9:ce:39:2a:bc:
0c:ce:80:09:39:b4:3e:14:17:ae:fc:f6:a1:19:ee:80:50:9d:
50:96:80:90:5a:c7:b0:af:e6:8e:43:d0:17:a7:d9:91:59:50:
45:b7:1e:97:00:c2:d2:93:ea:4e:6b:af:02:75:d5:3b:8b:d1:
79:eb:fa:ac:9a:a6:a4:44:70:8b:13:3d:50:98:41:6c:c0:45:
db:30:16:c5:46:2b:c4:d0:db:64:ec:88:3e:8f:96:33:a1:4b:
2f:38:66:0c:f6:22:8f:0a:a0:cb:03:4d:56:f6:e4:39:aa:ea:
3a:cf:83:a2:f0:4e:8c:52:36:21:1d:5c:7f:5c:58:71:c3:a6:
ac:0c:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:08 2024 by rpki-client on console-ams.rpki-client.org