Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cXHrhyFaPmzNrOsMowvXuB_3UdE.roa
File: cXHrhyFaPmzNrOsMowvXuB_3UdE.roa (raw, json)
Hash identifier: c0JCXKNi75qE9pyzc56vX1HmQaDqwRPBiksxUYDdT1E=
Subject key identifier: 71:71:EB:87:21:5A:3E:6C:CD:AC:EB:0C:A3:0B:D7:B8:1F:F7:51:D1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01821177581DE9E2BFC47B7E33F165A5D13E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cXHrhyFaPmzNrOsMowvXuB_3UdE.roa
Signing time: Mon 18 Jul 2022 13:20:10 +0000
ROA not before: Mon 18 Jul 2022 13:20:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6663
IP address blocks: 81.181.88.0/21 maxlen: 21
193.230.176.0/24 maxlen: 24
193.230.178.0/24 maxlen: 24
193.230.183.0/24 maxlen: 24
193.230.181.0/24 maxlen: 24
193.230.201.0/24 maxlen: 24
193.230.200.0/24 maxlen: 24
194.153.246.0/24 maxlen: 24
193.226.117.0/24 maxlen: 24
193.226.114.0/24 maxlen: 24
193.226.113.0/24 maxlen: 24
193.231.137.0/24 maxlen: 24
193.226.122.0/24 maxlen: 24
193.226.124.0/24 maxlen: 24
193.226.119.0/24 maxlen: 24
193.226.126.0/24 maxlen: 24
193.231.68.0/24 maxlen: 24
193.231.65.0/24 maxlen: 24
193.226.61.0/24 maxlen: 24
193.231.76.0/24 maxlen: 24
193.231.78.0/24 maxlen: 24
193.231.73.0/24 maxlen: 24
193.231.80.0/24 maxlen: 24
81.180.201.0/24 maxlen: 24
81.180.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:77:58:1d:e9:e2:bf:c4:7b:7e:33:f1:65:a5:d1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 18 13:20:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7171eb87215a3e6ccdaceb0ca30bd7b81ff751d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:92:25:f3:dd:45:6f:8c:29:4f:d5:c9:7c:
7f:0e:a3:db:cb:44:e8:1a:e8:a0:0f:b2:c2:19:1b:
26:0d:b1:24:eb:d2:da:16:34:cc:34:53:b8:41:e5:
82:14:17:36:fc:51:d6:86:67:da:08:07:9c:ef:a1:
b5:7d:98:c9:f6:a4:ab:c9:bb:d5:af:2d:63:a6:32:
58:27:43:93:25:82:5e:bf:1c:05:0b:0b:d0:42:5f:
9f:08:bc:2a:00:f8:b9:f0:80:db:0e:f6:83:24:b5:
54:65:66:34:7d:27:77:18:50:ea:3e:f5:c0:2d:4a:
5d:1d:67:5f:81:5d:45:3d:00:18:16:ad:4c:b5:b9:
47:5d:54:c6:08:e4:6b:f9:07:9b:a6:1b:bb:8a:d1:
4a:fa:8b:3a:27:df:d6:c7:3c:f5:5d:4f:a0:33:5b:
a8:37:26:bd:c9:7f:d5:02:ac:ee:cb:92:95:8d:ff:
d7:a7:a0:62:62:87:6e:21:a8:bc:ef:05:7c:3a:3b:
21:4e:2a:4f:a0:4c:55:74:73:06:e5:23:5c:82:05:
2e:73:c7:3e:a6:24:90:87:06:91:aa:ed:0e:6a:9d:
f3:6f:d7:e4:da:12:ad:b8:f6:78:83:54:dc:ab:93:
c6:95:1e:10:3e:9b:a7:a9:db:e3:a9:a8:9d:f1:b5:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:EB:87:21:5A:3E:6C:CD:AC:EB:0C:A3:0B:D7:B8:1F:F7:51:D1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cXHrhyFaPmzNrOsMowvXuB_3UdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.201.0/24
81.180.206.0/24
81.181.88.0/21
193.226.61.0/24
193.226.113.0-193.226.114.255
193.226.117.0/24
193.226.119.0/24
193.226.122.0/24
193.226.124.0/24
193.226.126.0/24
193.230.176.0/24
193.230.178.0/24
193.230.181.0/24
193.230.183.0/24
193.230.200.0/23
193.231.65.0/24
193.231.68.0/24
193.231.73.0/24
193.231.76.0/24
193.231.78.0/24
193.231.80.0/24
193.231.137.0/24
194.153.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:2a:f1:cd:1b:00:a8:35:2e:19:2e:c5:e5:23:e8:02:14:67:
bf:15:01:16:1b:3d:b5:60:2e:7d:42:c1:bf:84:88:1d:7b:86:
88:93:1b:62:53:12:28:2b:a1:3b:08:2f:42:9e:97:1c:e6:42:
e8:cc:86:3d:83:ed:87:84:94:5c:85:64:c5:c3:24:78:54:c4:
03:93:c9:3f:5c:13:e0:f5:ad:b9:3f:ae:cf:7f:e4:4b:de:05:
90:17:93:16:f2:4e:17:ec:69:e0:46:99:00:40:f9:6c:ae:55:
c7:7f:be:02:5b:4b:1f:a6:56:20:39:55:a5:68:0a:93:56:11:
ac:f1:ec:de:f1:dc:17:c5:83:aa:96:42:af:97:a9:01:4d:0b:
4b:fa:f0:dc:f6:d8:ba:d5:1f:85:31:f9:57:bc:7f:db:ef:1e:
a1:b8:55:82:93:a3:cd:f9:1d:4a:c7:9c:e2:3d:ff:b6:6f:3e:
3d:b8:27:04:df:5c:33:5b:f8:74:c6:ec:e3:9e:bc:a1:5b:f3:
88:9e:e1:12:a5:40:2c:ce:fa:3d:56:67:78:e9:6d:f4:53:99:
f7:e7:66:7e:68:e4:1a:a3:79:a0:84:1b:0b:e0:ca:47:78:b6:
2c:a9:4b:0c:de:9c:ce:34:b8:d2:f6:53:db:7c:0b:03:41:db:
6c:ec:9b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org