Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/bt3FdbsVHWt8hujFHo47gyCfnG0.roa
File: bt3FdbsVHWt8hujFHo47gyCfnG0.roa (raw, json)
Hash identifier: //7nOI/N1BWdqzz74nsWArTkB2jxUhFIah5FJ/p5fDo=
Subject key identifier: 6E:DD:C5:75:BB:15:1D:6B:7C:86:E8:C5:1E:8E:3B:83:20:9F:9C:6D
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 04C3497E
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/bt3FdbsVHWt8hujFHo47gyCfnG0.roa
Signing time: Thu 12 May 2022 14:31:02 +0000
ROA not before: Thu 12 May 2022 14:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5606
IP address blocks: 128.140.224.0/21 maxlen: 24
176.223.110.0/24 maxlen: 24
188.212.152.0/24 maxlen: 24
185.8.152.0/22 maxlen: 24
109.205.91.0/24 maxlen: 24
109.205.88.0/24 maxlen: 24
109.205.90.0/24 maxlen: 24
109.205.89.0/24 maxlen: 24
109.205.95.0/24 maxlen: 24
188.212.37.0/24 maxlen: 24
188.211.236.0/24 maxlen: 24
194.105.1.0/24 maxlen: 24
2001:4d80::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79907198 (0x4c3497e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: May 12 14:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eddc575bb151d6b7c86e8c51e8e3b83209f9c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:b7:f8:df:83:2f:3c:af:aa:bd:a6:09:a9:
10:7f:bd:1a:53:2f:f4:60:e7:be:b8:e3:db:c1:ce:
0a:cd:14:fd:93:81:75:44:88:e3:ce:10:b8:f4:b1:
34:5e:cc:cf:da:46:83:8b:8f:f3:75:ee:fa:a6:bf:
09:b5:b6:a8:2b:d2:74:87:81:4b:51:c9:5a:2c:35:
2c:24:de:c6:ab:94:fe:73:70:b9:5f:40:03:d8:cb:
02:4a:1f:69:8d:1b:97:95:43:73:f4:af:be:2e:db:
28:b0:11:8e:9b:12:85:68:1b:f5:d3:8b:89:4b:d1:
0c:25:6b:4c:cc:7d:be:e4:7f:ef:c8:33:44:47:c3:
5b:af:71:a4:7f:51:ea:f9:dd:35:9c:0b:c6:32:12:
a7:71:a6:b9:b5:f4:29:f5:13:98:eb:f4:ec:72:c4:
58:1f:f8:0c:f9:86:6e:76:ee:76:3a:fe:b9:39:c7:
c2:21:8a:60:2e:34:08:00:5d:27:23:3d:38:38:05:
8e:98:33:54:bc:74:5f:55:af:f2:6b:c4:12:2c:bf:
41:9a:73:40:1d:f9:42:87:06:1f:ba:a0:7a:fa:0b:
8a:b0:2a:30:0f:cc:20:11:56:fd:86:72:ea:c1:74:
7c:60:9d:61:29:23:f2:7c:0f:be:e5:f8:59:09:05:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:C5:75:BB:15:1D:6B:7C:86:E8:C5:1E:8E:3B:83:20:9F:9C:6D
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/bt3FdbsVHWt8hujFHo47gyCfnG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.88.0/22
109.205.95.0/24
128.140.224.0/21
176.223.110.0/24
185.8.152.0/22
188.211.236.0/24
188.212.37.0/24
188.212.152.0/24
194.105.1.0/24
IPv6:
2001:4d80::/32
Signature Algorithm: sha256WithRSAEncryption
a6:a1:e9:fa:44:5c:e5:4e:8b:47:3a:ed:c2:68:14:f3:e9:35:
23:15:d8:da:41:40:d3:fe:75:25:48:c4:36:36:0d:28:25:74:
45:0f:7c:71:77:1d:f9:63:d9:62:da:4c:30:c6:d6:34:58:3a:
81:c4:fb:2d:c6:07:0b:ea:99:45:e1:bd:a4:c3:2e:0c:47:f6:
ab:b6:7f:f2:46:22:09:49:e9:ca:78:ab:2b:6a:c8:0b:dd:af:
0c:06:05:01:9b:76:e3:0d:05:6b:c8:9d:70:ae:38:be:e1:d4:
54:82:7d:4e:ac:7d:5f:00:09:88:7c:b2:b5:8b:4e:0d:a6:44:
5c:a9:5a:42:21:f4:06:4d:ed:e0:c8:83:58:0c:93:a5:05:92:
f1:e7:32:50:dc:91:9d:af:e7:c6:e2:41:a5:5e:a5:cc:96:6c:
79:b4:7f:1b:cc:d1:b9:0c:cf:01:62:94:17:95:22:85:c1:d0:
85:f4:df:53:df:27:22:b1:35:a5:61:d6:5b:ff:2c:d4:8f:5b:
bf:e0:aa:fe:05:01:28:4d:63:83:80:76:d8:5f:59:36:f7:bc:
6c:05:d5:05:b3:40:78:aa:85:0d:5f:fc:99:13:5b:78:21:34:
c3:a3:48:39:31:f9:f0:00:01:ad:73:4a:26:a8:b9:36:6b:d3:
04:f3:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:34 2023 by rpki-client on console-ams.rpki-client.org