Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aLVYntf9LfHYJdJF0RtHq4E9F4Y.roa
File: aLVYntf9LfHYJdJF0RtHq4E9F4Y.roa (raw, json)
Hash identifier: byoIFlQAWGBmxHBTLB+MxMvRr8saNscbHTlkWYES29o=
Subject key identifier: 68:B5:58:9E:D7:FD:2D:F1:D8:25:D2:45:D1:1B:47:AB:81:3D:17:86
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F0A234
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aLVYntf9LfHYJdJF0RtHq4E9F4Y.roa
Signing time: Sat 01 Jan 2022 15:59:59 +0000
ROA not before: Sat 01 Jan 2022 15:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3280
IP address blocks: 78.108.217.0/24 maxlen: 24
2.56.166.0/24 maxlen: 24
194.31.140.0/24 maxlen: 24
45.90.146.0/24 maxlen: 24
77.83.243.0/24 maxlen: 24
2a0b:b86::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149987892 (0x8f0a234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 15:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68b5589ed7fd2df1d825d245d11b47ab813d1786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:24:c2:9d:27:38:9b:ac:89:df:c1:91:4d:
b6:d1:ee:ee:ef:df:10:20:84:a1:5d:ef:85:b4:08:
fd:b5:bb:ed:a2:53:eb:08:a6:8d:5c:73:dc:57:1a:
34:c8:16:52:4d:70:fe:89:e6:59:53:e4:d0:7b:b1:
5d:e5:f3:7d:35:9b:cf:c8:7c:76:23:3b:d5:58:04:
2c:40:7e:7f:25:0c:03:61:46:69:24:03:25:74:8d:
00:79:e3:8d:2f:6a:f3:6f:04:f7:94:5c:dd:e5:6b:
18:77:97:f6:69:bf:2c:88:f5:a4:7a:91:8b:15:8a:
3b:0b:56:8c:16:b9:50:70:c4:5c:24:6e:f7:26:86:
98:70:f1:a6:ea:13:7b:8b:03:aa:a5:76:06:81:6b:
65:07:26:a2:cf:e2:93:01:c4:9b:e3:a7:72:0d:7a:
ab:e2:31:89:65:d6:17:32:35:fc:80:84:74:1f:f4:
53:1f:c6:9a:0d:76:b4:34:07:a6:4a:63:9d:a6:5a:
9f:cd:d3:fe:27:18:2b:39:37:fb:e0:fe:9e:63:41:
a6:37:02:07:b3:50:90:08:2f:dc:80:08:a4:57:79:
49:00:2f:b9:70:fc:13:39:cf:6b:90:9f:21:0e:29:
49:78:5f:6d:ba:57:c3:eb:56:f2:6f:05:7e:0c:f4:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:58:9E:D7:FD:2D:F1:D8:25:D2:45:D1:1B:47:AB:81:3D:17:86
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/aLVYntf9LfHYJdJF0RtHq4E9F4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.166.0/24
45.90.146.0/24
77.83.243.0/24
78.108.217.0/24
194.31.140.0/24
IPv6:
2a0b:b86::/40
Signature Algorithm: sha256WithRSAEncryption
d3:b5:7b:20:e6:fd:3c:bd:79:9b:ab:a5:a6:0b:d2:a6:67:d9:
e3:ee:20:9d:c4:4a:13:91:aa:9b:1c:fa:ac:cd:0e:cd:c8:ad:
17:d4:ea:78:1a:c8:4b:7a:c3:bc:26:f9:ae:bb:55:0e:ab:76:
e6:b4:a8:79:95:17:28:9e:bb:79:3a:59:6b:6e:b5:ec:6b:5b:
d1:f9:bf:9f:46:43:9f:e6:9e:6e:c4:1e:3b:78:60:a8:91:96:
81:0c:5c:5b:18:af:2a:61:e1:f4:e5:45:0f:b0:1d:bd:3a:00:
8e:a9:67:89:26:26:e4:de:15:82:1e:4a:07:55:c1:6a:43:fc:
27:d4:cd:a7:e3:7d:8a:80:71:76:d9:22:ef:fd:0e:68:14:85:
06:bc:c0:e8:f4:a1:a5:70:6d:78:87:f1:d2:be:bc:0f:89:2d:
ee:12:2c:73:cb:cf:9e:cf:a4:14:98:f8:10:b9:87:06:38:33:
b0:53:93:66:45:98:9f:e3:72:88:48:8c:eb:f3:f7:a1:be:39:
49:05:c5:34:31:3d:e6:92:61:7e:b9:08:bf:35:00:12:df:ef:
0b:77:73:0e:50:b3:44:4d:09:95:85:69:c1:03:dd:e8:99:b0:
70:8f:16:af:83:0c:0b:32:4f:5a:21:51:31:8a:fc:4a:59:d9:
ff:40:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org