Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/IO3-BQ7ub7dGXMeO8QUfc0QA0yo.roa
File: IO3-BQ7ub7dGXMeO8QUfc0QA0yo.roa (raw, json)
Hash identifier: JEXbbwjbVArYfesP+y4An7Zq+1kQNsoEp4FuUzfjPjs=
Subject key identifier: 20:ED:FE:05:0E:EE:6F:B7:46:5C:C7:8E:F1:05:1F:73:44:00:D3:2A
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018217CDDB43AEF44EA35AF9023554416CF9
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/IO3-BQ7ub7dGXMeO8QUfc0QA0yo.roa
Signing time: Tue 19 Jul 2022 18:52:23 +0000
ROA not before: Tue 19 Jul 2022 18:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:cd:db:43:ae:f4:4e:a3:5a:f9:02:35:54:41:6c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jul 19 18:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20edfe050eee6fb7465cc78ef1051f734400d32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:f0:e8:96:73:ba:1a:32:18:41:35:2a:19:
04:17:b8:01:d7:70:56:33:96:63:87:5e:e1:d4:92:
f5:96:35:33:59:f9:03:98:35:cf:b8:d8:1f:45:07:
e8:4f:c5:16:b9:a4:cf:bf:92:83:bf:68:99:1d:0d:
d2:fc:f2:1d:d8:94:bc:8d:3d:1d:f5:53:46:41:17:
b6:87:38:15:51:56:7e:56:ec:a7:d8:c7:c3:c4:58:
c8:6d:dc:af:db:85:75:78:e1:a9:61:08:bb:da:80:
8f:1b:c6:74:a7:8f:f4:49:21:04:a3:c7:a2:10:1f:
71:94:e2:49:95:13:db:27:4c:8b:7f:b9:85:89:f6:
73:53:46:4d:52:c1:6f:af:c5:87:fc:2a:8c:70:ca:
4a:02:cb:ed:16:f8:29:b4:d5:81:ab:d9:78:01:3d:
0c:04:e3:81:70:e5:39:1f:27:73:10:a1:68:93:61:
ee:7f:08:1f:80:8d:13:15:fe:61:95:c9:c3:d8:65:
7f:e6:e9:bc:19:ca:db:14:6d:e4:ad:4e:87:a3:2b:
f8:40:7b:59:8d:d0:b7:bf:5c:5d:75:23:40:c5:79:
36:f2:a9:eb:89:28:e6:0a:6b:75:c2:cf:ab:c0:7f:
ba:4b:ee:e6:9e:17:4a:4c:2e:b3:41:13:18:68:fc:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:ED:FE:05:0E:EE:6F:B7:46:5C:C7:8E:F1:05:1F:73:44:00:D3:2A
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/IO3-BQ7ub7dGXMeO8QUfc0QA0yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
94.137.74.0/24
94.137.76.0/24
94.137.78.0/23
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
2d:24:6b:46:df:fe:40:f8:58:e8:85:d2:94:a4:d8:5a:cd:0c:
c1:cf:41:ed:6b:ad:54:ff:5a:dd:32:99:88:f2:a0:2d:6c:4d:
d5:2f:e0:35:ba:2f:88:58:51:5c:a0:80:b6:50:0b:43:9e:64:
49:04:75:fa:4a:6e:a0:07:66:a9:ce:5a:92:a7:96:d7:8c:64:
40:0e:a5:8a:e5:da:d0:25:0e:87:01:65:e3:9c:62:3b:2b:95:
06:29:f9:65:21:a5:9d:be:a4:64:e3:22:4c:ee:59:aa:7b:43:
64:b2:79:ad:2c:9c:b7:90:66:67:4a:14:34:8a:9a:60:ea:69:
67:5a:7b:0e:49:13:a8:ec:3d:70:ce:ab:87:74:76:93:71:20:
75:59:18:9d:b9:83:18:a5:12:9e:a0:ed:06:5b:54:53:3a:b5:
10:1e:cb:e7:ba:1d:0b:ea:86:1d:d6:00:aa:b8:be:1c:ad:b8:
83:5d:a2:0c:be:6f:66:57:32:e5:99:0e:25:cf:c4:b2:ea:9d:
3a:7f:81:fd:0a:97:e5:5e:fa:94:63:e0:54:ce:80:58:12:c5:
ca:fd:ba:17:87:c7:7d:b0:99:5e:f2:bd:ea:70:49:48:f4:bc:
e5:93:d9:d4:58:c7:1d:fc:9d:52:08:fe:d9:56:d2:6e:95:51:
50:36:ca:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org