Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/cw79vxGgPqbf1lnjCwL0Vy3VrWU.roa
File: cw79vxGgPqbf1lnjCwL0Vy3VrWU.roa (raw, json)
Hash identifier: 9uUThoejUzsQpWcNSCzdecqSZYBLU6HlDrx5MayqlL8=
Subject key identifier: 73:0E:FD:BF:11:A0:3E:A6:DF:D6:59:E3:0B:02:F4:57:2D:D5:AD:65
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 0182CAA82E844E34F331D99716C3E395DAD5
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/cw79vxGgPqbf1lnjCwL0Vy3VrWU.roa
Signing time: Tue 23 Aug 2022 12:23:15 +0000
ROA not before: Tue 23 Aug 2022 12:23:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9145
IP address blocks: 212.95.96.0/19 maxlen: 19
92.252.0.0/17 maxlen: 17
212.6.64.0/18 maxlen: 18
85.16.0.0/16 maxlen: 16
95.33.0.0/16 maxlen: 16
85.8.64.0/18 maxlen: 18
37.138.0.0/16 maxlen: 16
82.149.160.0/19 maxlen: 19
90.153.0.0/17 maxlen: 17
89.166.128.0/17 maxlen: 17
80.66.0.0/19 maxlen: 24
213.168.192.0/19 maxlen: 19
213.183.160.0/19 maxlen: 19
91.96.0.0/15 maxlen: 15
31.150.0.0/16 maxlen: 16
80.228.0.0/16 maxlen: 24
87.245.0.0/18 maxlen: 18
89.233.64.0/19 maxlen: 19
31.184.0.0/18 maxlen: 18
91.248.0.0/15 maxlen: 15
213.182.96.0/19 maxlen: 19
31.187.112.0/20 maxlen: 20
213.170.160.0/19 maxlen: 19
178.142.0.0/16 maxlen: 16
188.118.128.0/18 maxlen: 18
2a02:8200::/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:a8:2e:84:4e:34:f3:31:d9:97:16:c3:e3:95:da:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Aug 23 12:23:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=730efdbf11a03ea6dfd659e30b02f4572dd5ad65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:ea:15:6b:12:d8:27:fc:1d:2f:ad:5b:84:
28:f2:e6:ef:50:48:3c:fd:fb:a7:47:fa:4d:b3:af:
75:b8:70:1f:51:99:8a:3c:2f:d2:02:28:1e:dc:6f:
06:f6:9d:95:1b:92:40:d2:02:f1:eb:e8:53:9f:c8:
52:ee:73:c3:2a:84:c6:8d:63:ce:e4:c2:2f:bb:52:
26:84:9d:69:10:9a:4a:1f:ae:95:af:0f:e2:05:c0:
b9:23:f2:06:b9:81:f9:e6:c7:07:1f:1a:61:0b:7b:
2c:a3:71:61:33:6e:88:ab:60:8d:04:b1:25:a7:0f:
3d:34:cd:4c:97:53:35:b2:3d:e0:a8:29:bc:23:ca:
e9:10:e7:23:22:47:50:fa:01:8c:86:79:c6:c4:9c:
6b:52:46:97:e7:67:e9:97:0a:3c:20:98:83:59:7d:
a5:39:1a:aa:cf:d0:4b:fb:2b:2c:13:f7:6c:ef:3f:
d2:1c:9f:35:dc:e0:66:35:2a:79:d3:31:21:cf:bb:
6c:f0:e7:07:c8:fa:c9:05:a2:98:25:7f:bb:0d:a6:
9a:79:de:8a:61:cb:b1:6c:7c:57:52:99:e1:7c:05:
14:9a:ee:db:a7:cb:62:18:8e:b7:8b:31:20:13:be:
93:12:62:27:51:32:fd:7c:2b:b2:b5:fd:d6:05:c9:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:FD:BF:11:A0:3E:A6:DF:D6:59:E3:0B:02:F4:57:2D:D5:AD:65
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/cw79vxGgPqbf1lnjCwL0Vy3VrWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.150.0.0/16
31.184.0.0/18
31.187.112.0/20
37.138.0.0/16
80.66.0.0/19
80.228.0.0/16
82.149.160.0/19
85.8.64.0/18
85.16.0.0/16
87.245.0.0/18
89.166.128.0/17
89.233.64.0/19
90.153.0.0/17
91.96.0.0/15
91.248.0.0/15
92.252.0.0/17
95.33.0.0/16
178.142.0.0/16
188.118.128.0/18
212.6.64.0/18
212.95.96.0/19
213.168.192.0/19
213.170.160.0/19
213.182.96.0/19
213.183.160.0/19
IPv6:
2a02:8200::/27
Signature Algorithm: sha256WithRSAEncryption
a0:31:75:7c:df:55:10:5e:5c:b3:39:0c:60:86:64:41:8c:45:
69:2c:4e:73:fb:f2:b8:90:e6:cc:53:2c:17:bd:6d:d8:1a:e8:
09:67:1c:be:0a:c9:fb:ba:76:a7:a6:ac:fc:f4:93:27:ab:fa:
c6:2a:50:5c:8e:e5:b0:8d:c5:4d:9a:25:1b:a3:36:ee:99:45:
0f:03:3f:80:63:5f:b7:a8:08:b5:a6:ff:b8:df:92:16:56:71:
64:ec:f8:2d:8f:33:b6:93:44:8a:7d:97:df:52:54:e9:1c:c3:
dd:fb:9c:06:21:96:dd:a3:dd:09:1f:2d:36:bc:69:86:07:44:
bc:aa:a8:e1:42:72:33:73:6c:84:a9:44:a0:26:92:8a:f3:30:
d7:9c:3c:a6:3f:57:b0:c2:cb:a3:72:e8:6f:91:11:5a:aa:e4:
1e:8d:c9:9c:73:81:e2:6a:2e:ab:78:67:da:6a:c7:00:7f:0a:
15:b3:3e:3f:c1:8f:f3:1d:d5:ad:b2:74:da:47:c2:88:52:8b:
4e:68:0e:7d:18:55:54:e1:11:62:9a:75:f2:be:ed:d3:f8:3b:
a9:8e:77:1e:d6:65:92:84:a7:e8:71:11:23:77:82:ef:2b:9c:
27:f9:2f:3a:d3:54:db:3c:bf:9c:b6:65:0e:65:37:1e:c4:53:
a4:6c:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:06 2024 by rpki-client on console-ams.rpki-client.org