Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/0s1MyUHYOGiNnkijpOvH9JPI82M.roa
File: 0s1MyUHYOGiNnkijpOvH9JPI82M.roa (raw, json)
Hash identifier: oEMtB6hQdIkq8fbRGTwbT7Mo+p9Aem/D0YOL0RNUQLU=
Subject key identifier: D2:CD:4C:C9:41:D8:38:68:8D:9E:48:A3:A4:EB:C7:F4:93:C8:F3:63
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0A1783A8
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/0s1MyUHYOGiNnkijpOvH9JPI82M.roa
Signing time: Sat 01 Jan 2022 13:06:01 +0000
ROA not before: Sat 01 Jan 2022 13:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13189
IP address blocks: 185.94.72.0/22 maxlen: 22
83.172.64.0/19 maxlen: 19
95.140.176.0/20 maxlen: 20
62.101.32.0/21 maxlen: 21
62.101.40.0/22 maxlen: 22
62.101.44.0/22 maxlen: 22
212.112.32.0/19 maxlen: 19
62.101.48.0/22 maxlen: 22
62.101.56.0/21 maxlen: 21
83.172.96.0/19 maxlen: 19
2001:be8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169313192 (0xa1783a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jan 1 13:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2cd4cc941d838688d9e48a3a4ebc7f493c8f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:4b:89:f4:cf:e8:fa:e6:34:dd:d1:19:61:
22:fe:0e:5c:c4:6f:27:bc:22:35:87:5c:86:f0:d3:
20:88:e2:a2:3f:88:f0:6c:45:ec:6c:fc:4b:56:ae:
16:9b:59:34:09:45:7a:13:af:62:9e:33:99:51:06:
87:8e:57:87:ed:01:2e:a9:85:2a:2d:cd:a0:11:c0:
15:6d:fa:b2:c5:f9:18:69:1f:9e:8a:70:9b:69:ca:
2b:4a:5e:38:cb:8a:d1:4f:80:6f:c7:58:8e:99:6f:
f1:ff:68:1e:0b:5d:11:2a:46:e1:88:41:05:fe:61:
96:96:52:0c:09:0e:0b:d8:b8:72:21:c7:35:37:56:
56:b3:dd:7e:6e:0f:d9:b9:f1:98:25:ab:8c:b6:ee:
c3:6c:aa:9f:d6:11:38:37:05:47:51:67:1f:18:d4:
f3:f7:cd:08:0a:dd:96:4b:8a:08:d8:5f:01:0c:be:
1e:e8:00:46:34:2d:20:9b:6f:41:15:39:2f:8a:c9:
ef:60:34:d7:95:d9:f8:7b:c6:c9:d4:56:69:fa:8e:
c6:f7:eb:8d:fc:91:ca:3f:16:e7:95:7f:35:87:75:
44:ef:b2:5a:87:79:da:b7:a1:f2:d6:a3:62:60:03:
da:e4:db:b0:57:c2:2f:74:95:82:83:38:ce:f5:c0:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:4C:C9:41:D8:38:68:8D:9E:48:A3:A4:EB:C7:F4:93:C8:F3:63
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/0s1MyUHYOGiNnkijpOvH9JPI82M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.32.0-62.101.51.255
62.101.56.0/21
83.172.64.0/18
95.140.176.0/20
185.94.72.0/22
212.112.32.0/19
IPv6:
2001:be8::/32
Signature Algorithm: sha256WithRSAEncryption
39:2d:76:7e:79:0e:44:82:d5:8f:2d:38:a2:44:47:35:58:a3:
2e:4b:88:79:7c:19:49:9a:c9:9d:85:db:ba:15:aa:72:1e:bf:
de:87:3b:0a:7f:46:20:33:aa:c4:bd:33:1c:59:08:15:dc:d8:
5f:96:98:b0:66:45:8e:e4:a4:f7:5e:f0:ee:52:24:c8:8e:12:
19:8f:53:3b:23:ea:b0:d1:8a:55:cc:ba:5d:37:d0:74:3a:ce:
27:fd:0f:21:02:25:07:3f:69:c9:75:80:b2:e5:c6:fc:3a:50:
fa:28:e6:fc:e8:95:3a:cd:b0:dd:d0:50:03:61:30:81:12:f6:
1d:e1:26:46:41:5a:99:2c:64:82:02:d6:82:22:87:37:1c:7d:
f1:66:2c:a3:1c:f6:78:29:6e:3f:54:01:de:96:8f:9e:44:ab:
bc:67:cc:da:0e:b2:68:5c:d1:c5:e5:78:15:ef:9d:e5:dd:97:
ff:3a:bb:b9:81:f3:6e:94:6f:35:b8:01:6f:ee:d8:89:2a:24:
2c:85:1c:b2:c3:df:bf:61:65:98:49:c8:79:57:1b:23:5c:0f:
62:cd:83:46:7b:1f:f0:b8:ac:13:2a:08:82:b4:3f:2a:19:11:
19:1f:af:65:38:03:b8:f0:05:3e:f5:c5:e4:ab:52:1c:aa:cf:
ff:5d:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:31 2024 by rpki-client on console-fra.rpki-client.org