Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/T8vzr-P04tCbJ7ImL3u3wv2SajI.roa
File: T8vzr-P04tCbJ7ImL3u3wv2SajI.roa (raw, json)
Hash identifier: 7ebayGaSg3wPaqsHOYQPpSlLW1tFVC0w9WPBKari3j0=
Subject key identifier: 4F:CB:F3:AF:E3:F4:E2:D0:9B:27:B2:26:2F:7B:B7:C2:FD:92:6A:32
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 0E02D5E9
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/T8vzr-P04tCbJ7ImL3u3wv2SajI.roa
Signing time: Wed 01 Jun 2022 19:32:20 +0000
ROA not before: Wed 01 Jun 2022 19:32:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8856
IP address blocks: 195.214.192.0/24 maxlen: 24
195.214.194.0/24 maxlen: 24
195.214.193.0/24 maxlen: 24
195.214.195.0/24 maxlen: 24
212.42.81.0/24 maxlen: 24
212.42.80.0/22 maxlen: 22
212.42.80.0/24 maxlen: 24
212.42.82.0/23 maxlen: 23
212.42.84.0/24 maxlen: 24
212.42.85.0/24 maxlen: 24
212.42.89.0/24 maxlen: 24
212.42.93.0/24 maxlen: 24
212.42.92.0/24 maxlen: 24
212.42.95.0/24 maxlen: 24
212.42.94.0/24 maxlen: 24
212.42.64.0/22 maxlen: 22
212.42.64.0/23 maxlen: 23
212.42.66.0/23 maxlen: 23
212.42.74.0/23 maxlen: 23
212.42.73.0/24 maxlen: 24
212.42.76.0/24 maxlen: 24
212.42.76.0/23 maxlen: 23
212.42.77.0/24 maxlen: 24
212.42.78.0/23 maxlen: 23
212.42.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235066857 (0xe02d5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Jun 1 19:32:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fcbf3afe3f4e2d09b27b2262f7bb7c2fd926a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:1a:55:7c:67:cf:01:ee:fd:c5:f1:36:2c:
7e:ed:9a:d0:bf:94:fa:72:c1:36:b8:08:1e:7f:d8:
43:d8:e6:4d:47:57:5b:91:8b:76:cb:50:5e:e7:6c:
e4:0b:fc:d8:eb:02:31:bd:0f:45:5f:29:1a:85:31:
3c:53:c0:2e:6d:ce:ea:f6:b7:fc:ac:5f:f3:89:b9:
35:c8:b8:77:da:31:3c:98:b0:f5:59:67:a7:51:15:
1d:7c:db:76:aa:c0:6a:c5:5e:02:0b:c1:98:3f:f8:
64:cf:0f:35:c4:15:77:bf:ae:e4:56:0a:f8:5f:06:
0a:ee:43:81:3e:23:2f:e0:a5:1b:e6:1c:86:06:c3:
43:82:2a:fd:a4:d1:7a:a2:17:d3:41:bb:5e:44:6b:
c4:7e:86:c7:3c:fc:1a:98:20:2a:3a:09:d1:83:d1:
3f:9f:4d:ed:40:7a:b2:23:09:3c:ba:29:40:b1:95:
77:8c:6d:ad:44:1d:e1:6b:37:43:ab:03:80:54:e9:
9a:1f:3f:87:54:e4:6c:95:a3:7d:bb:84:e0:ef:9e:
11:1d:57:99:d2:d7:68:3b:13:98:7e:59:79:55:52:
8e:08:86:03:33:f8:38:3e:44:fc:08:72:7a:a2:5e:
70:b7:67:97:e9:0a:a8:69:8c:f6:07:de:e5:e0:17:
20:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:F3:AF:E3:F4:E2:D0:9B:27:B2:26:2F:7B:B7:C2:FD:92:6A:32
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/T8vzr-P04tCbJ7ImL3u3wv2SajI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.192.0/22
212.42.64.0/22
212.42.72.0-212.42.85.255
212.42.89.0/24
212.42.92.0/22
Signature Algorithm: sha256WithRSAEncryption
66:42:77:f6:8d:2f:a3:82:51:6d:83:e5:3d:42:8b:e8:25:d3:
28:8a:f3:b1:a7:6d:8b:e7:3d:9a:2b:d1:d6:00:09:db:2e:a4:
9e:19:63:ac:6f:c2:c1:ee:02:58:5c:f1:0e:2e:0f:2d:5a:83:
d7:06:18:3d:51:3a:f2:14:d2:07:b6:dd:ae:bd:c9:d8:54:41:
f2:89:ba:16:fa:d0:cd:66:a7:f5:f6:6b:e9:03:0d:19:6d:8f:
1d:00:52:ca:c6:b5:31:68:56:62:75:74:fa:98:41:7a:b4:01:
99:f5:25:32:cf:fe:c7:6f:16:c2:17:ae:61:0f:fd:48:2c:c6:
e1:01:b7:78:8f:81:4e:67:47:f4:4f:fb:34:8d:05:a2:a3:cc:
d7:5f:7d:2f:b6:33:5d:90:1c:06:4c:3e:23:11:d0:1f:05:61:
26:89:5a:c0:ad:36:fc:93:cc:49:5c:c9:96:a8:5b:fa:75:25:
6b:ea:47:cf:c8:28:1c:db:65:fc:ff:c5:1a:f9:62:67:37:11:
21:3b:b0:6b:dc:69:99:32:d5:e9:84:41:47:20:8f:ea:f8:f0:
96:5f:cd:6f:9d:68:dc:f0:86:95:e4:9d:48:98:d9:92:22:46:
73:f9:e4:1a:c3:fd:b1:a1:df:ac:38:22:bb:f1:18:93:0e:d0:
06:8f:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:49 2024 by rpki-client on console-ams.rpki-client.org