Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8OwJ7WG6FoRUXMzVFa7onPX0ovM.roa
File: 8OwJ7WG6FoRUXMzVFa7onPX0ovM.roa (raw, json)
Hash identifier: baclvJLVg2mRsAGe4xek71SyqgaVripXFthL1rEUvag=
Subject key identifier: F0:EC:09:ED:61:BA:16:84:54:5C:CC:D5:15:AE:E8:9C:F5:F4:A2:F3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01833D41EB2C1E2F7D3AA3686BD1E8778432
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8OwJ7WG6FoRUXMzVFa7onPX0ovM.roa
Signing time: Wed 14 Sep 2022 18:27:53 +0000
ROA not before: Wed 14 Sep 2022 18:27:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 109.122.40.0/24 maxlen: 24
109.122.41.0/24 maxlen: 24
109.122.42.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
109.122.47.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
91.226.58.0/23 maxlen: 24
193.93.52.0/23 maxlen: 24
193.93.54.0/23 maxlen: 24
87.237.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:41:eb:2c:1e:2f:7d:3a:a3:68:6b:d1:e8:77:84:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 14 18:27:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0ec09ed61ba1684545cccd515aee89cf5f4a2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:28:d2:f8:d2:a7:38:79:fd:ee:70:17:b8:
7f:65:d6:9a:ae:0f:c3:96:05:c5:03:95:35:1f:8a:
8e:ac:c0:03:a7:79:72:63:46:a5:ee:db:aa:2f:82:
13:bb:6d:5b:61:cf:fb:ed:eb:4b:f3:11:21:ce:d5:
e3:bd:46:cc:ac:56:60:7b:bb:b4:6a:24:df:75:3c:
f9:23:54:36:bd:20:e7:66:a3:c7:6c:df:12:16:f5:
8e:ff:90:60:69:b6:03:94:00:79:3d:09:24:f8:cd:
be:e4:17:2c:a1:fc:5a:95:c5:fc:b0:49:9c:68:f1:
84:68:58:3a:42:db:89:ef:ab:98:58:8b:47:c7:c1:
2e:bc:8c:2c:bb:67:e5:78:48:98:e4:2f:58:13:af:
ff:0c:9c:2a:c9:0b:8d:e8:2a:2d:26:4a:7e:e0:ec:
0c:b7:e2:db:9d:9d:80:68:42:be:df:ac:08:1c:d6:
c6:3e:d7:f0:eb:b8:ae:b3:9c:6c:51:03:12:c0:a8:
3e:7d:ea:b2:c5:c7:df:e6:cc:bd:c8:08:4a:06:12:
fc:94:b3:0a:41:c2:8b:a7:69:28:a9:fe:82:7c:af:
8a:ee:bb:4e:3d:53:0a:22:fe:9e:3a:1c:8b:cc:a4:
dd:97:1e:6c:f5:ea:5e:b0:d4:01:f9:36:e2:74:6a:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:09:ED:61:BA:16:84:54:5C:CC:D5:15:AE:E8:9C:F5:F4:A2:F3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/8OwJ7WG6FoRUXMzVFa7onPX0ovM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
91.226.58.0/23
109.122.40.0/21
193.93.52.0/22
Signature Algorithm: sha256WithRSAEncryption
36:cd:5b:a2:ea:3e:5c:42:c8:30:87:88:7b:02:6a:f2:b8:78:
af:47:bd:2c:b9:bc:51:ca:f1:d0:82:36:9f:2d:68:4a:68:9e:
9e:a2:cd:61:54:cf:10:48:7a:88:21:4a:e0:7c:88:c2:ca:cf:
fd:10:0d:74:05:0d:06:bc:28:81:3e:de:e7:a3:c4:84:c3:bf:
92:0f:ea:51:67:0c:e8:08:76:ac:63:e6:48:fd:5b:40:38:bd:
ba:b9:f4:f9:49:0c:da:76:e2:a2:b9:39:92:0f:ff:35:bc:64:
df:3f:53:0f:90:f4:0a:08:e9:28:9c:3b:df:4b:5a:58:d0:4c:
2a:9b:31:ba:31:4e:06:12:dd:c4:8f:2d:b6:ea:84:12:05:63:
2d:5f:d0:86:25:16:dd:67:9a:e8:7b:c8:ac:85:38:5b:8c:17:
27:3a:3f:23:04:0a:58:e1:4e:fc:05:ae:c8:9c:92:fc:ca:fa:
18:32:0c:f4:65:5d:94:d9:55:c9:3d:dc:44:47:9e:76:5a:28:
41:fd:48:95:92:f4:19:4a:72:de:7c:e6:07:16:ac:59:d8:e0:
65:93:65:42:19:ab:a9:c1:d4:7f:1f:76:b5:a4:a1:2f:de:16:
87:21:28:5f:41:3f:52:cf:94:9e:90:58:19:c7:a7:af:e0:5b:
6b:9c:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org