Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/m9otlM5nFO29W8CweyE4gjX7b6c.roa
File: m9otlM5nFO29W8CweyE4gjX7b6c.roa (raw, json)
Hash identifier: bJULCGqPyjpKDtNZ7CrvDGPhFIvPm8iA8a5B2YzCUO8=
Subject key identifier: 9B:DA:2D:94:CE:67:14:ED:BD:5B:C0:B0:7B:21:38:82:35:FB:6F:A7
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 01852A0A52D04DF40AF756635F6EAF7F0C99
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/m9otlM5nFO29W8CweyE4gjX7b6c.roa
Signing time: Mon 19 Dec 2022 10:59:57 +0000
ROA not before: Mon 19 Dec 2022 10:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204601
IP address blocks: 185.224.215.0/24 maxlen: 24
185.80.234.0/24 maxlen: 24
80.89.228.0/23 maxlen: 23
80.89.230.0/24 maxlen: 24
80.89.234.0/23 maxlen: 23
80.89.238.0/23 maxlen: 23
80.89.237.0/24 maxlen: 24
85.208.186.0/24 maxlen: 24
85.208.184.0/22 maxlen: 22
85.208.184.0/24 maxlen: 24
85.208.185.0/24 maxlen: 24
85.208.187.0/24 maxlen: 24
185.92.148.0/22 maxlen: 24
89.105.213.0/24 maxlen: 24
89.105.217.0/24 maxlen: 24
45.14.13.0/24 maxlen: 24
45.14.12.0/24 maxlen: 24
45.14.14.0/24 maxlen: 24
45.14.15.0/24 maxlen: 24
80.89.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:0a:52:d0:4d:f4:0a:f7:56:63:5f:6e:af:7f:0c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Dec 19 10:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bda2d94ce6714edbd5bc0b07b21388235fb6fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b5:68:8d:dc:b3:33:b8:70:74:7f:37:ae:04:
d1:2c:7e:26:49:dc:1a:d8:fd:e4:c7:51:cf:cc:a0:
99:cb:d0:5b:f5:fc:e6:02:49:40:65:ab:b2:0a:99:
b4:4b:c3:f7:a8:64:0e:3e:d4:dc:45:55:78:4c:ac:
51:13:32:4c:2d:db:fc:5d:79:11:5f:27:7e:71:1f:
48:ed:05:6a:57:31:46:26:78:3f:e2:6f:47:90:b6:
7e:15:7b:8a:d5:7d:60:33:8c:dd:5f:ed:9b:f2:b2:
24:fb:29:ec:05:6e:fb:a4:a9:69:2a:2d:a2:d9:d2:
ed:b4:50:3e:27:34:46:a5:0b:4f:e4:38:2a:bb:ce:
c9:4b:1c:de:dd:87:96:60:e0:69:97:e4:11:79:93:
21:6e:4e:8d:51:c5:72:75:38:b1:6b:53:38:86:f8:
1e:da:51:39:e7:28:64:d0:79:8f:b2:97:24:22:de:
52:51:b7:f1:28:dc:86:a9:15:0e:2f:d7:de:0e:f2:
07:61:bf:b6:12:a7:2a:c6:26:f1:a2:72:a5:98:df:
8c:2f:c5:fd:13:4f:ea:d3:71:a7:9e:91:09:ca:78:
9d:e9:58:9a:1b:0d:5e:93:a6:4e:6a:f9:a0:3e:e0:
08:9a:a3:13:9d:a3:20:87:ef:02:fd:7a:a0:19:7a:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:2D:94:CE:67:14:ED:BD:5B:C0:B0:7B:21:38:82:35:FB:6F:A7
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/m9otlM5nFO29W8CweyE4gjX7b6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.12.0/22
80.89.224.0-80.89.230.255
80.89.234.0/23
80.89.237.0-80.89.239.255
85.208.184.0/22
89.105.213.0/24
89.105.217.0/24
185.80.234.0/24
185.92.148.0/22
185.224.215.0/24
Signature Algorithm: sha256WithRSAEncryption
66:87:1c:75:ac:41:4e:05:01:b5:e8:34:be:59:40:7e:d0:77:
11:21:f0:99:c1:78:15:04:7c:71:82:fd:49:30:d5:18:a7:70:
77:76:eb:41:91:3a:b5:19:04:69:7e:c0:d4:37:0b:cb:f3:23:
57:4a:96:6e:a1:d0:e3:13:48:72:86:b3:2c:4d:66:5e:49:e5:
54:b0:09:30:fd:be:bf:c5:a4:0f:4b:88:be:74:b2:e8:4b:b0:
e4:25:27:57:c0:4a:2b:0e:fc:9c:6c:47:fe:c8:9e:0b:0c:5e:
95:8a:d1:52:2b:f5:e5:88:e0:05:d5:7f:a0:4e:5f:29:e1:60:
d2:a2:19:c2:ed:79:74:c3:4d:d5:42:79:95:10:6d:72:9f:0b:
d7:e7:79:b1:72:f5:19:18:9b:b8:31:a5:13:b0:82:c0:c8:db:
72:a2:a5:0b:36:e2:c0:0f:fc:a8:1a:d5:95:64:7e:2d:97:2b:
4e:74:e0:6c:e3:dd:96:f6:de:c8:d2:22:ce:36:d0:b5:37:c6:
28:4d:e8:83:09:25:1d:c7:d5:b9:22:a6:fd:32:d5:39:96:a2:
81:74:4e:b8:58:00:2d:4e:51:e5:51:48:39:f3:7f:c8:a6:31:
99:8b:79:67:e4:75:b7:57:f9:51:1d:9f:96:0e:28:4b:87:82:
84:30:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org