Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ibRMqqPMwu9wvg0EvcZwjAUa6mk.roa
File: ibRMqqPMwu9wvg0EvcZwjAUa6mk.roa (raw, json)
Hash identifier: EQefPqsADVibNwJDVxfgCcHEANtDKYv1178HYd2sJXI=
Subject key identifier: 89:B4:4C:AA:A3:CC:C2:EF:70:BE:0D:04:BD:C6:70:8C:05:1A:EA:69
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 09F7E3C0
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ibRMqqPMwu9wvg0EvcZwjAUa6mk.roa
Signing time: Sat 01 Jan 2022 15:57:21 +0000
ROA not before: Sat 01 Jan 2022 15:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198605
IP address blocks: 159.242.227.0/24 maxlen: 24
159.242.239.0/24 maxlen: 24
159.242.234.0/24 maxlen: 24
95.142.112.0/24 maxlen: 24
95.142.118.0/24 maxlen: 24
95.142.115.0/24 maxlen: 24
95.142.124.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
95.142.121.0/24 maxlen: 24
194.99.28.0/22 maxlen: 22
95.142.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167240640 (0x9f7e3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 1 15:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89b44caaa3ccc2ef70be0d04bdc6708c051aea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:dc:c4:6b:24:2e:46:82:65:28:a0:8f:81:
54:d5:6a:dd:71:cd:e8:ce:c1:61:2f:4b:dd:9d:01:
c7:8f:78:bd:1e:d6:8a:05:a3:98:b7:c6:d5:b3:ff:
28:69:dc:9c:42:a4:04:32:0d:61:e9:d1:cf:11:9f:
6f:5e:60:fd:90:47:14:62:19:02:88:55:21:c0:1e:
9e:6b:17:e3:ac:bf:ce:61:ea:04:e2:16:0a:77:ad:
3c:5a:7f:72:fb:3d:1f:90:5a:ab:63:97:5f:94:c4:
56:03:51:86:fe:df:80:64:1e:bf:2c:f4:14:f4:fe:
d6:3a:9f:02:db:3b:27:2e:a9:f3:6d:0d:4b:b0:0e:
59:65:32:79:c7:0a:e6:34:b4:33:31:2d:8e:1d:6d:
44:3e:74:de:2e:d4:be:4f:c5:fa:63:76:db:b3:8f:
b6:cd:88:7e:48:0b:90:88:d4:78:bc:a7:a2:a8:6f:
43:99:53:c1:d9:79:91:9f:aa:b9:09:07:34:7d:18:
7d:98:2b:8e:d3:67:14:2c:bd:09:50:e5:a7:e4:b5:
1d:9b:8f:13:29:5f:ef:fd:18:8f:7d:32:78:cc:ff:
e9:07:63:49:f7:cd:99:82:55:f5:35:d0:7f:86:f6:
50:b1:28:94:44:85:c1:97:a5:ac:6a:43:07:9a:14:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:4C:AA:A3:CC:C2:EF:70:BE:0D:04:BD:C6:70:8C:05:1A:EA:69
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ibRMqqPMwu9wvg0EvcZwjAUa6mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.112.0/24
95.142.115.0/24
95.142.118.0/24
95.142.121.0/24
95.142.124.0/24
95.142.127.0/24
159.242.227.0/24
159.242.234.0/24
159.242.239.0/24
185.54.230.0/24
194.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:c3:e8:53:38:a1:f0:73:90:6c:9d:26:ec:27:4d:4d:a4:f5:
80:80:0e:84:73:64:c8:82:23:61:b6:46:d0:9e:f0:80:d0:53:
88:79:fb:8f:f6:96:63:29:3e:bb:cc:49:9b:06:ca:49:c7:ff:
4c:53:f3:d1:6a:56:84:7b:a1:5a:30:32:91:b6:55:f5:f3:9f:
53:85:77:52:d3:5c:f4:9b:45:1a:1e:a9:dd:37:94:9a:f0:20:
80:d2:59:1f:ed:57:fb:2b:5a:af:51:09:09:1f:5b:1c:70:db:
7d:fe:9a:6c:69:3c:f2:5f:4c:db:66:af:7b:53:dd:f4:72:a6:
39:4b:af:85:1c:3a:d6:37:c0:95:99:b3:34:14:8f:35:e0:d4:
30:5b:a0:d9:6f:f4:9a:ae:b4:cc:96:e1:95:ed:eb:79:8e:34:
86:bd:f6:10:e8:ee:e6:f4:be:a7:c6:9f:43:85:90:e1:c8:36:
3f:91:53:66:0e:3e:8b:35:85:00:96:14:8d:d4:6a:f1:21:ef:
7d:dd:bc:0f:aa:60:65:63:9f:7d:b6:80:73:cc:99:42:e2:25:
50:92:f3:02:15:7b:b9:c3:98:5c:67:20:ce:b8:0b:c5:7e:6d:
b7:5f:66:b4:4e:10:b9:1b:6b:f5:10:80:22:85:50:a3:f3:9d:
58:09:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org