Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/x8Rvh7ipnDe14G3lp7vQ1NrnnD0.roa
File: x8Rvh7ipnDe14G3lp7vQ1NrnnD0.roa (raw, json)
Hash identifier: cB4DkXm4hC/Dtb8vP94ZYESDm9nXxdzHFbBi6cXAqfU=
Subject key identifier: C7:C4:6F:87:B8:A9:9C:37:B5:E0:6D:E5:A7:BB:D0:D4:DA:E7:9C:3D
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 024824CD
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/x8Rvh7ipnDe14G3lp7vQ1NrnnD0.roa
Signing time: Sat 01 Jan 2022 09:55:03 +0000
ROA not before: Sat 01 Jan 2022 09:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41789
IP address blocks: 91.142.145.0/24 maxlen: 24
91.142.144.0/24 maxlen: 24
91.142.150.0/24 maxlen: 24
91.142.149.0/24 maxlen: 24
91.142.148.0/24 maxlen: 24
91.142.147.0/24 maxlen: 24
91.142.152.0/21 maxlen: 21
91.142.151.0/24 maxlen: 24
91.142.146.0/24 maxlen: 24
91.142.158.0/24 maxlen: 24
46.16.11.0/24 maxlen: 24
46.16.10.0/24 maxlen: 24
46.16.9.0/24 maxlen: 24
46.16.8.0/24 maxlen: 24
46.227.24.0/24 maxlen: 24
46.227.31.0/24 maxlen: 24
46.227.30.0/24 maxlen: 24
46.227.29.0/24 maxlen: 24
46.227.28.0/24 maxlen: 24
46.227.27.0/24 maxlen: 24
46.227.26.0/24 maxlen: 24
46.227.25.0/24 maxlen: 24
159.255.0.0/20 maxlen: 20
159.255.16.0/24 maxlen: 24
159.255.17.0/24 maxlen: 24
159.255.23.0/24 maxlen: 24
159.255.19.0/24 maxlen: 24
159.255.18.0/24 maxlen: 24
159.255.22.0/24 maxlen: 24
159.255.21.0/24 maxlen: 24
159.255.20.0/24 maxlen: 24
159.255.29.0/24 maxlen: 24
159.255.28.0/24 maxlen: 24
159.255.31.0/24 maxlen: 24
159.255.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38282445 (0x24824cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Jan 1 09:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c46f87b8a99c37b5e06de5a7bbd0d4dae79c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:01:64:f1:de:96:05:1e:88:2c:72:2e:c9:
10:4e:53:61:cf:87:6c:a2:79:9d:30:ee:15:69:e5:
03:6e:fa:28:de:f0:11:7a:e0:8b:c4:00:8b:5f:9f:
f7:98:cd:fc:81:f7:a1:b1:28:b9:68:77:b7:b4:2e:
9b:a4:0e:ba:d6:b3:a4:14:d6:d7:cc:a5:64:4f:36:
17:89:91:08:f6:30:9d:69:ec:ba:35:8a:b8:92:9c:
2c:47:0d:90:ea:5a:b8:3b:37:55:b6:47:be:18:b1:
02:b2:49:f6:0c:21:2c:b8:f5:09:7a:c5:b3:cc:60:
73:82:9e:92:cc:7e:a5:21:7d:f4:4a:0e:5f:f7:a8:
94:70:96:e1:ad:1a:13:09:7a:9a:6c:30:37:0a:a7:
86:33:bb:a0:bd:40:91:7b:80:f5:1f:6e:61:9e:a4:
2f:8f:84:05:8e:d9:99:b4:4b:ce:d6:33:41:b7:6d:
e6:2d:ac:47:3c:2a:77:d4:29:98:49:65:97:01:c0:
db:a3:c1:9d:d9:e4:17:a1:e9:bb:9f:db:6c:1f:59:
86:b1:05:60:0e:54:42:04:b6:30:af:67:3f:b7:18:
eb:09:59:37:5e:57:15:ee:dc:85:ff:94:47:61:0b:
46:e3:0d:eb:ff:80:8a:ba:27:66:52:ef:3a:47:68:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C4:6F:87:B8:A9:9C:37:B5:E0:6D:E5:A7:BB:D0:D4:DA:E7:9C:3D
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/x8Rvh7ipnDe14G3lp7vQ1NrnnD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.8.0/22
46.227.24.0/21
91.142.144.0/20
159.255.0.0-159.255.23.255
159.255.28.0/22
Signature Algorithm: sha256WithRSAEncryption
30:37:89:e1:be:35:1a:73:d0:fd:4f:17:0e:f3:da:a7:de:d0:
02:0b:a9:07:a1:3c:ff:58:90:7e:69:68:79:02:7f:59:48:3a:
3d:b1:41:f7:7a:43:44:29:c3:10:16:9e:0c:3a:04:ce:33:a2:
6c:c1:2d:bf:0a:18:c5:1e:47:39:e0:f8:d5:2c:d1:bc:1d:7e:
75:00:d1:bc:f5:80:8c:5d:e8:50:1a:bc:1a:40:8c:88:86:73:
58:2d:9f:db:e5:eb:aa:4c:bd:00:e3:38:67:e9:c9:48:74:42:
77:ef:79:3a:56:39:53:2f:a7:1c:50:3f:58:51:21:b2:40:8c:
e3:3e:1b:e9:23:f1:74:62:fa:b5:b0:79:33:74:d3:b4:c8:4a:
54:b2:24:dd:e1:7e:34:bb:6b:40:a3:f7:de:01:c5:11:bd:33:
d7:f9:f1:39:ce:78:ff:08:bf:5d:2c:7b:fc:c1:36:d8:1d:1c:
d9:5d:96:76:8d:e3:15:d1:ce:b5:f3:d3:b0:7f:79:fc:df:bf:
12:64:ce:36:98:a8:3e:bb:93:99:c8:da:b1:71:ad:78:60:ae:
6b:72:9b:a2:e7:da:b2:c8:e7:4b:2c:6d:ac:60:b9:81:06:a6:
bd:6c:94:5a:8c:8d:3e:a0:5c:2b:89:23:63:bd:59:8c:8f:9b:
c5:e2:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org