Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GI6QGsrRU--Dk2KtPcsbUn8eLHY.roa
File: GI6QGsrRU--Dk2KtPcsbUn8eLHY.roa (raw, json)
Hash identifier: H3MiuoLQ65bVJjrhfRYCznepve4AXtXTF3J4oF1WKZo=
Subject key identifier: 18:8E:90:1A:CA:D1:53:EF:83:93:62:AD:3D:CB:1B:52:7F:1E:2C:76
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0182581676CEF544AC7CD8BBD8E9A606CC57
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GI6QGsrRU--Dk2KtPcsbUn8eLHY.roa
Signing time: Mon 01 Aug 2022 06:27:23 +0000
ROA not before: Mon 01 Aug 2022 06:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 159.148.246.0/23 maxlen: 23
85.254.178.0/23 maxlen: 23
85.254.174.0/23 maxlen: 23
85.254.180.0/23 maxlen: 23
85.254.76.0/22 maxlen: 22
85.254.80.0/22 maxlen: 22
85.254.104.0/21 maxlen: 21
85.254.112.0/21 maxlen: 21
85.254.122.0/23 maxlen: 23
85.254.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:16:76:ce:f5:44:ac:7c:d8:bb:d8:e9:a6:06:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 1 06:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=188e901acad153ef839362ad3dcb1b527f1e2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:ba:90:97:93:f4:e8:d7:2a:fc:cc:e9:8d:
69:84:b3:f5:83:02:f8:dd:c5:15:b9:1e:1e:41:ae:
f1:19:20:a4:69:b8:7d:68:12:2f:81:80:0f:19:51:
46:fe:c0:62:0c:f4:e2:6d:bf:e0:db:c3:78:b4:c4:
2e:07:19:9e:c4:b8:14:df:c3:f3:7b:63:9f:6a:7f:
11:bb:09:1e:ae:3d:70:ef:21:7c:82:c2:03:54:be:
fb:9e:4b:c4:91:db:35:90:fb:24:04:17:da:ba:8e:
00:d5:ba:9b:d8:17:91:68:35:15:42:07:0d:23:8e:
c3:e8:c8:e9:01:3e:54:c1:4d:6a:2a:39:8b:58:17:
35:7b:19:5e:f6:86:58:1d:0a:0f:a1:ea:ed:69:bd:
41:bb:da:04:b3:f5:33:d9:3a:38:9a:49:66:c5:45:
8c:96:3d:b0:20:ae:f1:76:23:e9:f2:9b:a3:e5:e6:
53:20:91:51:ef:2f:03:af:54:bb:f9:f1:88:59:0f:
e3:e9:64:e3:81:06:5c:d1:6d:86:52:22:e8:f2:6f:
b0:a9:49:4e:8a:63:bc:75:8e:47:74:be:a7:cb:67:
82:bc:2b:3c:dc:3f:5f:18:8e:25:ce:76:ce:b6:11:
77:bf:b2:55:95:a5:a3:f5:ec:7a:42:88:e3:96:56:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:90:1A:CA:D1:53:EF:83:93:62:AD:3D:CB:1B:52:7F:1E:2C:76
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GI6QGsrRU--Dk2KtPcsbUn8eLHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.76.0-85.254.83.255
85.254.104.0-85.254.119.255
85.254.122.0/23
85.254.128.0/22
85.254.174.0/23
85.254.178.0-85.254.181.255
159.148.246.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:37:2a:bd:c5:29:d8:8f:fd:e6:c0:bd:ea:e4:26:29:b7:7c:
5d:67:1c:c9:0e:5c:5f:76:b4:fb:f2:90:46:5a:d9:00:ab:87:
41:27:cc:4c:cd:8b:71:60:cc:b5:6d:fe:b8:14:98:cf:2f:2c:
43:c2:3f:86:11:18:8b:f3:c4:51:d0:c9:7d:eb:9d:6f:dc:02:
62:9e:e1:18:6c:24:d5:4f:e0:bb:0d:b7:7d:9f:5f:cc:28:db:
e3:77:43:a5:65:38:e8:6e:c4:fb:57:01:fb:19:2f:8d:f1:22:
53:ef:4a:94:e1:8d:08:94:dd:38:69:0e:6b:8d:98:1b:69:a0:
e7:82:6d:5d:3f:1d:77:a1:67:59:d9:10:24:cc:7e:db:9a:5f:
d0:4b:ae:22:4f:f0:cd:39:f1:ba:3f:6b:46:8d:ff:08:50:e4:
e2:0a:36:8c:24:40:30:1c:da:c9:9e:50:47:11:42:02:9f:f4:
79:4e:2d:b4:e2:8f:3b:28:b2:43:2d:d9:28:8f:92:57:f8:f8:
7d:e2:c7:59:ca:d7:e5:64:f7:8f:5e:ce:0d:58:c0:d2:4e:28:
7e:83:37:13:67:0d:dd:b3:04:92:f8:d4:cf:6d:ce:38:ce:67:
6a:19:4c:1d:68:9c:a3:8a:b8:16:6c:f8:86:89:32:8a:fa:d0:
6f:e5:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org