Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-2ZbSE0hOcww-8tlL7E39JW0O7o.roa
File: 1-2ZbSE0hOcww-8tlL7E39JW0O7o.roa (raw, json)
Hash identifier: Jl0/ewtcmYfcF/Mc0PAsksU9vcqgNxjfMuKhbEobBn0=
Subject key identifier: FB:66:5B:48:4D:21:39:CC:30:FB:CB:65:2F:B1:37:F4:95:B4:3B:BA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B506C67
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-2ZbSE0hOcww-8tlL7E39JW0O7o.roa
Signing time: Sat 28 May 2022 10:47:13 +0000
ROA not before: Sat 28 May 2022 10:47:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8751
IP address blocks: 193.226.85.0/24 maxlen: 32
81.180.224.0/24 maxlen: 32
193.231.133.0/24 maxlen: 24
193.231.169.0/24 maxlen: 32
81.181.146.0/24 maxlen: 32
80.96.28.0/24 maxlen: 32
85.120.250.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458255463 (0x1b506c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 28 10:47:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb665b484d2139cc30fbcb652fb137f495b43bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4d:2a:b7:51:58:1e:8d:64:2b:80:57:4c:5d:
c4:98:29:d5:14:79:3c:5e:33:7f:8a:1c:84:e1:31:
41:0e:ff:aa:2e:58:00:d4:1f:c2:5a:b5:9c:e5:b3:
e7:19:c7:d8:c6:1d:15:79:49:21:3d:f8:94:8f:65:
6b:21:07:cd:3d:2b:c7:ad:89:1a:97:bc:4f:0c:9f:
d2:37:67:a3:9c:2f:22:89:99:49:c8:bc:db:76:49:
54:d5:75:b1:5f:5c:ed:7e:2f:e2:64:73:bb:86:63:
aa:f0:0a:a4:5a:3f:bf:ba:d6:7e:02:21:3f:6c:93:
e7:96:0c:5a:a0:28:e0:bd:5e:2d:0e:c1:3f:0f:0f:
43:db:1b:44:02:29:80:92:80:a9:03:22:92:49:44:
c3:11:77:bc:00:f7:08:06:c0:cc:8b:2f:89:4e:fc:
23:74:94:bd:7d:74:08:a7:97:ce:af:77:68:e8:d2:
53:f6:c2:22:52:42:4d:51:91:63:e4:3a:79:3a:a3:
39:b2:85:f0:62:7e:6c:3f:c2:58:01:13:0a:d4:f1:
34:1b:b3:25:b1:eb:8a:da:70:a9:e2:5e:f6:5f:5a:
dd:31:71:16:fd:4d:94:0e:fa:76:59:cd:68:14:12:
36:d4:a5:23:04:00:36:e0:08:97:f0:6b:c7:a3:cc:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:66:5B:48:4D:21:39:CC:30:FB:CB:65:2F:B1:37:F4:95:B4:3B:BA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-2ZbSE0hOcww-8tlL7E39JW0O7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.28.0/24
81.180.224.0/24
81.181.146.0/24
85.120.250.0/24
193.226.85.0/24
193.231.133.0/24
193.231.169.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f1:05:c9:ec:26:a7:f9:f1:68:ea:55:56:94:36:46:fc:85:
2f:72:2d:a9:f0:58:1b:3d:91:d7:9e:8c:58:52:9c:a6:29:46:
1b:9f:ec:2a:cd:60:80:b3:ef:52:65:4a:c0:fa:52:e2:66:6d:
16:75:b3:d3:b7:c6:82:21:36:ae:c5:e3:36:82:da:8b:e5:8e:
f3:97:8f:54:85:d8:c1:b5:a2:51:ee:05:5c:e8:06:1b:4f:85:
df:5f:04:66:df:32:e5:ca:5a:b1:0b:e0:f5:ab:b6:22:de:0e:
ee:37:56:4b:22:3b:54:17:28:db:31:03:4d:18:74:24:bc:3b:
6f:5f:de:0b:91:9c:10:42:db:65:59:c8:9f:eb:87:ff:d7:b2:
72:16:ba:73:6f:d7:03:ef:d0:5c:7e:ec:cd:78:cb:c7:7a:01:
26:59:ed:65:95:e6:21:9a:5d:a3:d6:c3:ce:ac:31:82:2f:5c:
9e:6d:6a:68:7f:ff:65:c7:95:b1:73:64:08:12:8b:2b:d3:9b:
04:06:b4:96:3a:1c:1d:a3:f1:5d:fc:b5:87:51:ec:70:07:39:
b0:72:11:fc:f9:f4:85:38:58:95:b5:6b:6d:1b:15:8f:4c:36:
2a:b5:8e:43:50:4f:e8:3f:da:9d:1c:87:f9:cd:a4:79:15:44:
a1:37:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org