Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IFAAJyIMTX-uHmw9M4nvP17sKdo.roa
File: IFAAJyIMTX-uHmw9M4nvP17sKdo.roa (raw, json)
Hash identifier: Ss8qgC6D+oEOWM9FClNkJoDNzi85uJiMpH219kKBanY=
Subject key identifier: 20:50:00:27:22:0C:4D:7F:AE:1E:6C:3D:33:89:EF:3F:5E:EC:29:DA
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0183B8496BE3F921DBFF99F6B4847A4F3496
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IFAAJyIMTX-uHmw9M4nvP17sKdo.roa
Signing time: Sat 08 Oct 2022 15:49:22 +0000
ROA not before: Sat 08 Oct 2022 15:49:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35346
IP address blocks: 91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 24
91.242.112.0/21 maxlen: 24
91.242.120.0/21 maxlen: 21
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
45.67.116.0/24 maxlen: 24
91.242.64.0/18 maxlen: 24
2a07:5540::/29 maxlen: 29
2a09:4440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:49:6b:e3:f9:21:db:ff:99:f6:b4:84:7a:4f:34:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 8 15:49:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20500027220c4d7fae1e6c3d3389ef3f5eec29da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:44:57:63:0f:d8:81:09:1d:a9:f2:79:41:
f0:32:e4:21:0d:93:d6:10:42:13:87:55:8b:22:54:
34:00:bc:83:42:8d:c2:a3:77:0c:78:a8:2d:d4:e8:
d2:d2:da:58:75:86:13:f8:01:24:af:3c:4c:00:28:
9c:6c:36:b8:7f:92:4a:0e:ff:55:91:e3:d1:0b:38:
1e:a3:18:09:73:43:13:42:26:d2:c9:b7:df:6b:bc:
28:ea:4c:25:7b:d6:ed:bf:e1:9b:a6:20:fa:be:e7:
4b:30:4c:1c:7d:de:28:71:9f:5c:3e:cf:8b:ce:5a:
56:1a:ec:15:ed:15:3b:76:29:c1:3b:61:9f:1b:fd:
fb:39:af:59:17:c0:d5:fc:cf:74:a3:e9:99:07:88:
40:c0:23:d7:09:7f:57:ac:90:21:6e:ce:03:1d:a3:
79:5b:9c:d0:3d:70:b9:be:ad:6c:15:14:8e:7d:55:
b3:4b:24:31:83:c0:ad:fe:1a:3f:88:e7:d6:b9:cf:
16:aa:e6:01:a9:7d:16:76:65:8d:33:27:7c:91:c8:
20:ed:89:08:f4:60:c7:d7:bd:bd:0e:f5:12:0a:3a:
6a:6a:0c:02:2b:f3:d3:a2:60:4d:8a:5b:db:57:82:
e9:ec:02:2e:b7:6f:53:52:96:df:a7:46:44:4a:97:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:00:27:22:0C:4D:7F:AE:1E:6C:3D:33:89:EF:3F:5E:EC:29:DA
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/IFAAJyIMTX-uHmw9M4nvP17sKdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.116.0/24
91.242.64.0/18
194.114.144.0/24
IPv6:
2a07:5540::/29
2a09:4440::/29
Signature Algorithm: sha256WithRSAEncryption
4b:7e:36:fb:29:58:c1:52:ab:c2:ea:a7:48:73:d1:f8:c7:95:
93:b0:44:95:a4:ed:10:69:31:df:be:03:71:aa:c3:d3:b3:0f:
52:87:6d:76:68:cf:06:21:41:91:4a:6d:3a:e1:6f:93:57:a4:
f9:68:3a:17:d4:f5:97:cd:75:e6:20:a3:d9:ba:d4:f4:96:38:
8a:0d:58:cc:bf:23:7b:2b:e9:fd:3e:04:24:57:4f:76:a7:b5:
55:8e:d2:60:7f:e6:96:01:34:86:3c:8f:da:60:c5:ec:7c:4c:
a5:84:8e:eb:43:43:99:d5:11:ef:76:a3:f4:26:eb:d2:54:55:
66:02:a1:47:e8:73:8a:11:30:be:cb:a9:93:c7:2f:70:72:e7:
45:f0:a9:56:df:bf:a8:1a:f0:6f:de:da:46:31:38:91:ca:14:
13:4a:a7:d9:03:4c:c6:84:8a:9a:42:dd:f7:a8:11:60:2a:01:
17:1c:f3:5e:a0:37:72:35:41:1d:e1:3e:bf:e3:9b:32:17:94:
18:8d:e1:35:11:80:e4:26:35:b9:e0:47:49:21:df:7a:ec:c8:
9b:58:bb:72:08:0f:3b:3d:50:7f:e4:1f:2b:e6:7c:fd:66:bf:
3d:95:0d:28:6b:01:bc:8f:2c:ed:68:49:d4:a8:b7:7c:a1:10:
2d:83:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org