Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tHyxUfB5CuucG1_1ZKZpRtv0txY.roa
File: tHyxUfB5CuucG1_1ZKZpRtv0txY.roa (raw, json)
Hash identifier: ooaN451tjtHpzUWfAu78//jAwTXXDrL+G4K2I1EhpUQ=
Subject key identifier: B4:7C:B1:51:F0:79:0A:EB:9C:1B:5F:F5:64:A6:69:46:DB:F4:B7:16
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09022F9F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tHyxUfB5CuucG1_1ZKZpRtv0txY.roa
Signing time: Sat 01 Jan 2022 16:00:25 +0000
ROA not before: Sat 01 Jan 2022 16:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 2.56.165.0/24 maxlen: 24
193.221.192.0/24 maxlen: 24
193.221.195.0/24 maxlen: 24
193.221.193.0/24 maxlen: 24
193.221.194.0/24 maxlen: 24
83.143.118.0/24 maxlen: 24
185.227.69.0/24 maxlen: 24
83.143.119.0/24 maxlen: 24
194.56.225.0/24 maxlen: 24
45.90.144.0/24 maxlen: 24
212.107.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151138207 (0x9022f9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b47cb151f0790aeb9c1b5ff564a66946dbf4b716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:17:ef:4c:1c:17:5e:b6:91:a6:6d:e5:92:
29:6c:96:09:64:b3:5d:e5:fc:d8:91:d6:ea:39:1e:
1a:72:f2:e4:07:6b:a3:fc:56:aa:5d:24:9e:d3:1d:
d7:32:00:ef:86:96:ad:d4:23:e0:60:fc:ce:46:c4:
e0:e4:53:c5:97:6b:ea:f3:b4:c3:d5:d0:ab:86:56:
d2:98:21:5f:d0:9e:1a:1b:5b:23:cf:50:fe:6a:e6:
36:cb:eb:65:3f:f5:7a:ab:5d:8b:4f:00:f6:05:cc:
c6:ca:3d:2c:6c:25:47:91:78:de:47:88:b3:c8:6b:
32:d7:4e:9e:68:9e:d5:72:25:25:3e:90:02:c5:8c:
ea:8a:68:c1:4b:6a:67:d2:b1:77:e9:9b:21:07:4c:
34:5a:08:42:2c:b3:a2:d4:68:87:69:de:52:b1:da:
83:a3:54:98:e9:d2:8a:62:6b:27:02:9c:ef:83:80:
83:72:95:31:bb:bf:d5:ba:76:49:13:a2:21:db:15:
23:82:42:de:a6:6e:5d:36:64:7c:81:72:b2:c6:ad:
47:63:11:7c:28:31:ac:55:f5:e7:f9:05:c0:54:c9:
75:14:5f:ca:56:ea:bb:33:b6:70:9d:08:80:4d:49:
ea:49:ba:04:ad:5f:e8:2a:d8:a9:b9:b6:7d:41:d1:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7C:B1:51:F0:79:0A:EB:9C:1B:5F:F5:64:A6:69:46:DB:F4:B7:16
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/tHyxUfB5CuucG1_1ZKZpRtv0txY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.165.0/24
45.90.144.0/24
83.143.118.0/23
185.227.69.0/24
193.221.192.0/22
194.56.225.0/24
212.107.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1e:74:b1:d8:c4:29:7d:6f:01:0e:86:5a:08:b4:0f:76:26:
97:c6:cc:1a:be:5a:5a:34:33:9e:ec:97:17:d0:03:fd:1c:82:
fa:f6:1c:3d:62:ec:e4:be:69:27:6a:87:90:75:68:da:4d:be:
98:a3:2f:ee:5d:be:27:db:44:e3:d1:9d:a4:82:1b:01:f1:81:
12:96:d2:34:a1:57:67:35:d4:cd:be:86:ba:c7:a5:47:b4:ce:
32:f8:c5:fe:a7:36:3e:f1:47:ca:59:a0:96:6f:88:7e:af:f5:
bc:20:fc:fe:27:4e:17:bc:90:af:05:22:6c:82:ff:03:a4:70:
5c:37:21:b5:63:fa:b1:02:ab:cd:cb:80:62:fd:ec:cd:f2:f1:
af:9d:b6:39:3d:03:3a:38:14:a3:b2:a4:83:f3:a9:bc:ea:5f:
19:12:12:45:f6:c5:c5:30:3f:76:d7:e4:8f:f2:f5:0b:5f:19:
34:ab:a4:2f:0b:1a:2f:f5:2e:c1:b6:74:6f:f1:9e:f6:47:43:
4b:78:e2:84:30:47:a5:e2:08:a4:b3:ae:66:6d:00:59:b1:4c:
6b:54:4a:47:e6:3d:e4:0e:93:76:99:3b:4f:6f:02:76:e1:2b:
b8:d2:6f:ba:ab:3e:2f:f7:7b:d8:e6:56:94:f4:7a:d2:50:63:
50:d0:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org