Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/O1P00fX8HNNpNf4j6xaMGyprwTY.roa
File: O1P00fX8HNNpNf4j6xaMGyprwTY.roa (raw, json)
Hash identifier: Lu8Rp5S3y7m3kot08E2aTVfatoc9oza5HNmoIfMe6wo=
Subject key identifier: 3B:53:F4:D1:F5:FC:1C:D3:69:35:FE:23:EB:16:8C:1B:2A:6B:C1:36
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 01828D927C650C69C9F091978F3E00CB12A2
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/O1P00fX8HNNpNf4j6xaMGyprwTY.roa
Signing time: Thu 11 Aug 2022 15:42:43 +0000
ROA not before: Thu 11 Aug 2022 15:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202087
IP address blocks: 185.83.148.0/23 maxlen: 23
185.83.150.0/23 maxlen: 23
94.26.95.0/24 maxlen: 24
94.26.93.0/24 maxlen: 24
94.26.98.0/23 maxlen: 23
94.26.97.0/24 maxlen: 24
94.26.101.0/24 maxlen: 24
94.26.103.0/24 maxlen: 24
94.26.109.0/24 maxlen: 24
104.255.128.0/21 maxlen: 21
185.75.80.0/22 maxlen: 22
185.49.216.0/22 maxlen: 22
153.94.56.0/21 maxlen: 21
185.94.78.0/23 maxlen: 23
185.94.76.0/23 maxlen: 23
45.94.8.0/22 maxlen: 22
185.9.212.0/22 maxlen: 22
192.190.168.0/22 maxlen: 22
94.190.197.0/24 maxlen: 24
94.190.196.0/22 maxlen: 22
94.190.196.0/24 maxlen: 24
94.190.199.0/24 maxlen: 24
94.190.198.0/24 maxlen: 24
45.89.212.0/22 maxlen: 22
2a03:50c0:1000::/36 maxlen: 36
2a03:50c0:3300::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:92:7c:65:0c:69:c9:f0:91:97:8f:3e:00:cb:12:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Aug 11 15:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b53f4d1f5fc1cd36935fe23eb168c1b2a6bc136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:60:ee:10:d8:de:3c:d7:d3:b8:e3:5f:f9:
f5:fa:12:03:a2:e3:90:ba:9c:9e:f3:bd:14:ae:d2:
43:77:b6:af:82:b9:e6:0d:7e:52:74:43:4e:c8:c7:
f0:69:a9:59:a6:00:7f:f0:d0:a8:9a:56:fc:c8:97:
be:ed:2a:ad:08:f2:8a:c3:8b:e8:43:6f:ef:75:62:
38:2a:f0:95:b4:98:c0:66:54:50:63:b1:c9:fd:ec:
3b:fb:fa:fd:89:be:ce:e6:1d:29:58:d4:3d:15:62:
47:f5:12:0f:90:3e:4a:c7:ad:09:d7:99:c5:b9:75:
b6:af:ac:27:21:4c:03:ba:51:01:dc:4e:6e:f7:97:
b9:fb:98:3f:07:9d:47:18:80:3d:da:a1:57:22:da:
2d:df:bb:47:a9:f9:6d:77:7d:1f:2a:af:e5:3b:bd:
8e:ee:94:3a:2c:f1:15:ea:fe:92:e5:fe:58:62:40:
8a:64:04:49:24:15:7e:60:19:fc:f2:88:36:99:3a:
b0:b1:9d:0d:a0:50:98:f7:6a:8a:48:a2:17:76:53:
e9:ca:1f:29:cd:ea:0f:36:38:28:cb:c3:dc:10:49:
d6:38:47:64:6b:45:7e:a5:e8:0f:5b:3d:72:22:0c:
a9:d5:81:ef:d4:00:72:5c:2e:23:80:c5:2b:bd:16:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:F4:D1:F5:FC:1C:D3:69:35:FE:23:EB:16:8C:1B:2A:6B:C1:36
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/O1P00fX8HNNpNf4j6xaMGyprwTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.212.0/22
45.94.8.0/22
94.26.93.0/24
94.26.95.0/24
94.26.97.0-94.26.99.255
94.26.101.0/24
94.26.103.0/24
94.26.109.0/24
94.190.196.0/22
104.255.128.0/21
153.94.56.0/21
185.9.212.0/22
185.49.216.0/22
185.75.80.0/22
185.83.148.0/22
185.94.76.0/22
192.190.168.0/22
IPv6:
2a03:50c0:1000::/36
2a03:50c0:3300::/40
Signature Algorithm: sha256WithRSAEncryption
19:0e:e3:a0:8d:ec:d5:a1:62:f7:cb:d1:4e:97:be:2f:d9:bc:
18:91:11:5f:c3:6e:84:9a:88:14:de:c4:ca:0c:01:27:9c:cd:
0f:81:4c:73:94:d6:7b:cc:89:fc:2c:bf:8c:04:37:9e:b7:ba:
ad:fd:75:92:cd:13:a2:7e:84:ac:31:13:3c:6a:ff:c8:0a:02:
1d:38:34:fe:8b:b4:1a:98:fc:4a:dd:6d:7d:92:0c:5f:c9:89:
75:82:23:bf:f2:0e:34:9f:1a:7a:83:ec:2e:40:68:81:31:46:
d3:25:f3:43:bd:ef:dd:d6:a4:0e:db:1f:12:78:24:cf:c8:9c:
8e:e0:a7:09:56:3c:38:24:6a:32:63:d4:79:89:78:db:ef:22:
69:d7:68:6f:02:0b:0e:72:8f:51:59:e2:e0:07:8f:b2:54:45:
bb:93:c5:11:bf:15:0c:fe:6b:2e:a1:27:e4:69:fc:b3:c1:79:
8b:c1:52:be:87:9f:94:f4:ce:08:b6:55:f3:3b:ff:50:cb:40:
eb:fa:ac:63:f6:ea:14:82:a7:a4:85:ef:d8:68:f9:15:18:78:
66:58:34:e3:5e:19:78:d3:89:fa:21:44:51:ec:3c:05:8d:7c:
17:33:ce:6e:e1:38:50:73:e5:93:25:bb:0a:df:ee:ea:df:dc:
7a:e1:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:21 2024 by rpki-client on console-ams.rpki-client.org