Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/kF0HfHJ12Fdcx_Ma6Nr5xEXPNiE.roa
File: kF0HfHJ12Fdcx_Ma6Nr5xEXPNiE.roa (raw, json)
Hash identifier: c9SRJ57ig901bzzgsfjEQ7iluSM8AaoyTZilNS/fm3A=
Subject key identifier: 90:5D:07:7C:72:75:D8:57:5C:C7:F3:1A:E8:DA:F9:C4:45:CF:36:21
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 01849A090FEEEC728D5DE5A0233A68E6D296
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/kF0HfHJ12Fdcx_Ma6Nr5xEXPNiE.roa
Signing time: Mon 21 Nov 2022 11:53:15 +0000
ROA not before: Mon 21 Nov 2022 11:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8529
IP address blocks: 213.202.0.0/21 maxlen: 21
134.0.216.0/22 maxlen: 22
82.178.32.0/24 maxlen: 24
82.178.33.0/24 maxlen: 24
134.0.220.0/22 maxlen: 22
185.200.124.0/24 maxlen: 24
185.200.125.0/24 maxlen: 24
82.178.158.0/24 maxlen: 24
82.178.159.0/24 maxlen: 24
82.178.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:09:0f:ee:ec:72:8d:5d:e5:a0:23:3a:68:e6:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Nov 21 11:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=905d077c7275d8575cc7f31ae8daf9c445cf3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:40:b4:f0:77:44:0b:bc:0e:e5:20:a9:0d:
43:52:8c:ee:66:90:18:e3:38:aa:4d:89:6e:f8:86:
b3:b6:c4:d1:37:ac:f5:8d:c6:0c:04:db:ff:24:3a:
a2:54:8c:75:52:14:30:6a:b6:c4:6b:5e:a6:a3:18:
4b:d6:1d:85:ed:f1:a0:49:03:c0:41:54:c4:8a:ec:
2c:83:96:52:90:a8:ee:a9:e8:1d:ee:26:2e:04:09:
f6:c0:1a:27:57:4a:72:f4:e3:30:2c:fd:1c:13:76:
a3:61:bc:e3:3b:40:c1:c3:12:be:7d:a2:2d:4c:b9:
95:eb:cf:42:51:a8:51:21:15:db:7b:e9:37:cc:5e:
ad:65:b6:9c:1b:4e:8e:46:23:19:6d:2b:54:5a:8f:
cf:0e:e8:3a:98:12:0c:50:9c:9e:1c:ff:6c:11:b1:
ce:9f:5a:39:42:b2:b7:27:00:3c:b6:88:c0:19:07:
57:87:ac:89:be:96:97:7d:ef:3c:eb:4d:ae:cb:57:
63:ea:ab:2b:c1:fd:0b:c8:1d:a5:3a:cc:ff:e2:a8:
6b:9d:f4:2c:9b:32:48:83:63:1f:f8:e2:0c:46:e5:
05:d2:32:93:40:59:2b:e8:d9:a3:5a:80:b1:38:44:
7c:73:24:68:0f:1a:cd:c0:ef:d5:e2:ac:f3:7b:b6:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:07:7C:72:75:D8:57:5C:C7:F3:1A:E8:DA:F9:C4:45:CF:36:21
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/kF0HfHJ12Fdcx_Ma6Nr5xEXPNiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.32.0/23
82.178.158.0/23
134.0.216.0/21
185.200.124.0/23
213.202.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:03:9d:e6:28:4a:af:91:d8:31:bd:9f:79:d6:be:a7:d7:e9:
0d:ee:01:c1:e8:c2:73:68:45:5d:c4:d1:33:cc:a7:ed:23:4b:
86:c5:19:d0:03:0c:4c:6e:61:92:99:ae:15:d2:60:09:49:f9:
02:74:1e:88:35:f2:e2:8b:e6:0e:08:3a:9c:05:84:81:1b:a5:
b6:e1:7c:c5:1b:eb:09:35:41:ab:05:69:18:06:26:f6:18:db:
d7:d0:04:ea:f4:c7:d1:94:52:94:40:c4:e5:dd:8c:e5:f8:03:
fa:e5:99:da:ee:92:37:92:24:80:05:21:4b:cb:84:e2:dd:ab:
4b:ff:ed:ef:32:2f:ff:17:f0:ed:b0:fd:92:6f:90:4d:bb:7a:
1d:5d:fa:f5:81:0b:d1:78:98:cb:4e:2f:88:48:8b:4b:f0:7d:
b3:2d:15:fa:c7:3f:47:5e:af:6c:2b:cd:3d:91:b3:66:3d:1b:
f0:b3:73:ab:28:80:ce:10:52:ef:63:e6:25:da:c5:df:2e:fb:
98:d0:f8:64:d6:f6:5b:6f:a3:b0:8f:b4:31:a8:46:82:4b:58:
e9:5d:68:f4:fa:5b:6b:1a:1b:d3:1c:1e:f2:19:47:b0:57:09:
ab:7c:45:fd:21:42:cd:4b:a6:1d:5e:ef:d8:91:2e:cf:22:0a:
34:88:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-fra.rpki-client.org