Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RbIkmkw9nFafNsCEH5FlbZEQd_k.roa
File: RbIkmkw9nFafNsCEH5FlbZEQd_k.roa (raw, json)
Hash identifier: BOEfKZTMr17yPExSoMVMtyKdyRn5lhvCJ9WxIehI85M=
Subject key identifier: 45:B2:24:9A:4C:3D:9C:56:9F:36:C0:84:1F:91:65:6D:91:10:77:F9
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0181D8EDFA153603F11C0BB2B5ABA874B6A2
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RbIkmkw9nFafNsCEH5FlbZEQd_k.roa
Signing time: Thu 07 Jul 2022 13:51:23 +0000
ROA not before: Thu 07 Jul 2022 13:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53356
IP address blocks: 194.64.164.0/22 maxlen: 22
194.64.172.0/22 maxlen: 22
194.64.168.0/22 maxlen: 22
194.233.36.0/22 maxlen: 22
194.233.32.0/22 maxlen: 22
194.233.40.0/22 maxlen: 22
195.179.80.0/20 maxlen: 22
194.195.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:ed:fa:15:36:03:f1:1c:0b:b2:b5:ab:a8:74:b6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 7 13:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45b2249a4c3d9c569f36c0841f91656d911077f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:ab:04:ea:5a:4b:dc:33:69:69:89:2a:4c:
dd:48:0e:6f:98:44:28:56:08:20:82:5f:4c:4f:9a:
f1:7c:7b:70:e5:0a:b6:43:a9:5f:bf:5e:a4:6b:c1:
cb:0b:3a:82:58:d3:31:9d:06:f9:ec:71:da:0f:d9:
ca:ad:9f:62:33:da:18:e3:4b:7a:eb:6d:5c:79:45:
ca:42:79:57:41:4c:c1:ed:e7:8a:ee:eb:e9:90:2c:
57:f0:a7:5e:80:e3:33:8a:70:a0:89:97:64:91:81:
97:a7:88:3e:74:94:2e:32:b0:89:d6:2f:59:7b:ca:
32:b5:02:68:e0:9d:4d:d4:f0:b0:74:cd:ae:62:03:
f1:7c:3e:11:71:c5:2f:ad:02:cc:02:d9:19:f5:b1:
ca:a0:6e:7c:69:3d:df:27:c2:8b:d7:ee:5d:f6:86:
7c:15:72:c6:6c:94:35:e3:d0:78:2c:03:88:bc:42:
d2:c0:43:d5:f7:11:49:4f:b8:cd:e3:c5:00:41:1d:
20:55:70:f3:fd:37:5c:b5:7e:2f:32:1e:32:da:61:
6f:c9:66:9f:c6:ff:8c:ff:71:70:6e:a8:ac:00:d4:
08:88:ae:4e:4f:aa:78:81:4b:6a:55:d3:73:bc:5b:
05:7d:3c:a0:e9:2f:2c:0d:6b:15:6c:ce:dc:b9:79:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:24:9A:4C:3D:9C:56:9F:36:C0:84:1F:91:65:6D:91:10:77:F9
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/RbIkmkw9nFafNsCEH5FlbZEQd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.164.0-194.64.175.255
194.195.204.0/22
194.233.32.0-194.233.43.255
195.179.80.0/20
Signature Algorithm: sha256WithRSAEncryption
22:b7:ae:e4:07:89:a9:9f:79:ac:85:94:1d:1d:c5:45:7b:dd:
a8:d8:b1:b7:bb:8f:57:1b:bb:a7:58:8c:92:9f:1e:ff:01:b9:
8d:47:a3:25:6b:8c:ff:cc:72:cf:d8:57:55:2f:61:f9:ba:a3:
f8:13:5a:99:1f:7e:9c:47:5c:fe:01:0c:f0:66:e9:ff:14:5c:
d5:7d:8b:d7:37:62:66:cb:64:85:77:30:00:13:92:27:1c:87:
81:74:d8:dc:35:86:89:10:f7:04:58:b7:d1:6c:21:88:e9:14:
4d:6d:7c:da:62:48:0c:64:96:1c:cb:69:97:39:1d:49:08:43:
c8:6f:0c:84:25:ad:38:92:9d:04:0e:23:7a:da:1f:99:01:a0:
80:93:f8:39:28:83:4e:2b:a9:a6:a5:57:00:2e:aa:83:9e:21:
c4:76:a6:5a:43:78:9b:ca:20:7a:84:68:f9:8a:57:e2:24:b2:
1f:a1:13:ea:b8:65:8e:86:c1:43:d3:bd:34:b9:ed:96:f2:83:
6c:7d:3d:90:64:49:1f:b3:1b:a4:73:51:76:a7:6f:b4:fd:34:
9e:52:b6:e3:80:80:65:5e:c5:48:f6:01:58:c5:ad:7f:9a:5b:
80:80:10:e2:fa:2f:7d:6e:60:dc:75:42:71:27:74:32:5e:d6:
21:78:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org