Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/Liu5ID6mPmuylMJE3jSOiY87gDE.roa
File: Liu5ID6mPmuylMJE3jSOiY87gDE.roa (raw, json)
Hash identifier: tRxPC7I8wysHqcxzUUwcdDhFl4ROjVJCivra2naXHvM=
Subject key identifier: 2E:2B:B9:20:3E:A6:3E:6B:B2:94:C2:44:DE:34:8E:89:8F:3B:80:31
Certificate issuer: /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial: 0183F06B15DD087B55A631885AF199FFB069
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/Liu5ID6mPmuylMJE3jSOiY87gDE.roa
Signing time: Wed 19 Oct 2022 13:24:53 +0000
ROA not before: Wed 19 Oct 2022 13:24:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8301
IP address blocks: 178.208.192.0/19 maxlen: 24
217.65.48.0/20 maxlen: 24
212.120.224.0/19 maxlen: 24
195.244.192.0/19 maxlen: 24
195.244.204.0/24 maxlen: 24
185.74.74.0/24 maxlen: 24
185.74.72.0/22 maxlen: 24
185.74.75.0/24 maxlen: 24
2a01:8c40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:6b:15:dd:08:7b:55:a6:31:88:5a:f1:99:ff:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Validity
Not Before: Oct 19 13:24:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e2bb9203ea63e6bb294c244de348e898f3b8031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:5f:33:56:5d:65:ff:4f:29:84:ff:d3:b0:
94:bd:f0:14:32:59:aa:0f:2b:a1:5e:2e:54:f3:55:
5f:63:4f:21:51:2b:0c:7a:56:78:57:6b:8e:60:25:
0e:18:65:ec:ab:67:de:d8:6b:3d:ca:7f:ca:6b:93:
a6:13:da:de:77:63:21:2f:cf:a0:90:07:e8:c3:e8:
ed:e2:98:70:b4:fa:c1:6b:15:f8:97:f7:70:cc:28:
a4:10:e6:11:ef:70:1a:94:01:eb:de:82:0e:47:e2:
cf:6f:ed:32:76:2e:0f:83:c9:ab:71:56:7d:77:0b:
60:cd:98:7b:aa:3a:37:d7:ad:6e:72:f5:74:c1:e9:
cb:a1:10:64:fe:d0:84:af:75:73:d4:c6:52:64:b9:
1f:65:e2:16:8a:74:b2:5a:ba:50:41:93:b6:6d:df:
c3:ec:df:32:5c:50:27:dd:1b:90:3c:d2:83:43:b4:
d5:6d:98:2a:9f:ea:97:56:45:94:37:ee:ce:1c:fe:
e7:33:6f:d4:08:60:cc:6c:a9:36:70:23:c6:f6:4b:
a5:c7:6a:6f:12:7f:c0:ac:a7:2c:52:58:08:db:15:
fe:c2:57:7c:4f:58:f3:05:0e:d6:51:76:97:95:70:
ad:d7:03:d2:75:8e:1f:c0:d3:70:6d:0c:b1:63:dc:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:B9:20:3E:A6:3E:6B:B2:94:C2:44:DE:34:8E:89:8F:3B:80:31
X509v3 Authority Key Identifier:
keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/Liu5ID6mPmuylMJE3jSOiY87gDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.192.0/19
185.74.72.0/22
195.244.192.0/19
212.120.224.0/19
217.65.48.0/20
IPv6:
2a01:8c40::/32
Signature Algorithm: sha256WithRSAEncryption
02:ed:47:53:46:02:6d:3c:3e:65:d6:17:e1:3f:ce:09:c5:62:
92:d5:25:93:e5:09:ee:eb:35:ff:e4:0d:07:4e:f3:35:cc:30:
c4:7c:2d:7d:16:d1:f1:ee:7a:ee:8d:3b:41:81:f9:51:b0:cf:
66:8f:dd:34:cb:6a:96:74:d0:3a:a2:47:54:63:50:87:34:28:
92:b6:2a:52:62:ea:43:e9:a2:a7:3c:08:c1:ab:41:26:68:2d:
ee:51:da:03:fc:f3:82:95:41:6c:cb:95:2a:d2:0c:4d:a6:d5:
cd:b2:7c:a4:4c:b6:60:bd:f4:e7:e8:06:5d:b1:4e:c0:b6:e1:
fd:0b:6d:69:c3:09:70:d4:57:1e:43:16:a8:98:86:ab:2b:e2:
c6:8a:ec:23:bc:7a:17:6b:5f:69:37:e3:ba:a5:b4:4d:38:3c:
bc:f1:14:66:0e:75:93:6c:5c:24:66:ea:97:76:10:52:e3:51:
67:3c:89:a6:60:69:00:8d:86:f7:d7:20:8d:f0:fb:03:72:31:
6a:eb:68:03:6d:87:7a:f1:a3:59:be:4f:f9:b0:bf:20:10:54:
60:1e:ad:56:45:b9:58:e9:6b:08:43:ad:36:e0:cd:98:da:0b:
13:82:11:38:65:8c:0b:8a:f4:c3:fe:14:5c:bc:94:13:16:9a:
a4:b1:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:44 2024 by rpki-client on console-fra.rpki-client.org