Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/C9Oisy_sZPJAoGCJqsPaXdS3zWo.roa
File: C9Oisy_sZPJAoGCJqsPaXdS3zWo.roa (raw, json)
Hash identifier: tHQ484LpS2gB702m1IX/A7jZfOG1faQ2nxst4NjR/RY=
Subject key identifier: 0B:D3:A2:B3:2F:EC:64:F2:40:A0:60:89:AA:C3:DA:5D:D4:B7:CD:6A
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 0632D941
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/C9Oisy_sZPJAoGCJqsPaXdS3zWo.roa
Signing time: Sat 01 Jan 2022 16:05:29 +0000
ROA not before: Sat 01 Jan 2022 16:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48095
IP address blocks: 185.228.216.0/22 maxlen: 22
194.15.104.0/23 maxlen: 23
77.83.164.0/23 maxlen: 23
194.15.106.0/23 maxlen: 23
195.242.208.0/22 maxlen: 22
212.115.60.0/23 maxlen: 23
212.115.62.0/23 maxlen: 23
77.83.166.0/23 maxlen: 23
185.254.64.0/22 maxlen: 22
185.210.40.0/22 maxlen: 22
185.224.140.0/22 maxlen: 22
80.65.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103995713 (0x632d941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jan 1 16:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bd3a2b32fec64f240a06089aac3da5dd4b7cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c3:f5:41:d9:b5:34:0b:67:cf:bb:fc:6f:39:
2b:c8:10:54:ed:4d:c8:dc:3f:bd:44:d4:18:6b:5f:
64:b6:9e:f4:f7:af:24:db:ae:c2:84:08:ed:78:4b:
29:fa:38:2f:57:ed:2a:3e:14:26:c3:9e:f0:8f:53:
a7:66:b0:f5:b4:ad:64:94:2a:de:96:73:ec:47:f0:
af:3e:98:9a:61:cc:0a:01:22:d4:fb:99:d0:b3:b1:
1c:a2:0c:6b:ad:f8:d8:f1:0c:e7:c8:b8:27:14:fb:
0c:d5:af:f7:db:0f:96:3a:31:e3:fa:de:d1:9a:b0:
9f:c3:85:54:a6:d5:ac:ae:35:ea:92:bf:f1:b1:6f:
09:ee:e6:33:5e:91:a1:1a:ec:c5:13:e6:7a:de:0c:
32:0b:41:78:af:0b:c6:df:66:67:4d:8c:b1:e1:23:
8f:96:b5:ea:b1:2e:a5:65:f2:2e:07:2b:da:5d:2d:
9b:3e:16:85:4f:59:14:e1:ad:50:fc:b4:af:8f:21:
15:23:68:2b:d7:63:e2:2c:3c:06:83:0f:c0:c3:dd:
37:a9:10:ae:5c:21:a2:83:b3:d5:93:5b:84:ff:86:
0b:69:78:d7:7b:69:79:22:d8:78:33:86:d1:db:e7:
52:c4:88:16:9e:4c:47:8b:a9:9b:c0:4f:ff:d8:3f:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D3:A2:B3:2F:EC:64:F2:40:A0:60:89:AA:C3:DA:5D:D4:B7:CD:6A
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/C9Oisy_sZPJAoGCJqsPaXdS3zWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.164.0/22
80.65.220.0/22
185.210.40.0/22
185.224.140.0/22
185.228.216.0/22
185.254.64.0/22
194.15.104.0/22
195.242.208.0/22
212.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f8:5e:ea:f5:52:9c:86:d3:6c:c6:37:b2:92:3f:a3:ad:fe:
b8:7d:0b:82:bd:16:b9:33:de:fc:61:93:0f:59:b7:68:08:29:
f4:c3:19:8d:f6:60:cb:a0:f3:c3:e7:67:52:9e:57:e4:26:02:
78:e4:07:ad:af:ef:10:6a:32:f2:2c:e5:1f:ba:ab:81:27:9d:
1d:10:4a:8b:f9:db:f3:ae:7c:84:75:a3:d2:33:4c:57:05:df:
e5:58:d3:e3:fb:30:1a:50:67:27:18:8c:76:a1:8a:75:50:e0:
3e:43:cd:fc:50:82:f7:1e:43:b3:66:3f:a9:e6:4a:4e:fe:a3:
45:22:4d:c8:cb:cf:86:2b:06:fc:db:20:d8:55:2c:1d:fc:61:
ee:ac:e9:7b:8d:4c:00:db:e5:92:44:b6:34:77:b4:f2:7e:65:
9f:fc:e3:02:27:6a:fb:8f:3f:79:24:0b:62:2d:c7:8b:15:56:
e6:f0:ff:b4:15:8e:1c:2e:b7:7d:76:ae:5b:6a:0f:00:64:93:
25:6e:ba:f6:4d:a3:b6:fd:9b:03:65:48:fa:1d:63:a5:17:f5:
03:e9:25:0b:7b:b0:65:c5:0e:a4:5a:96:3c:83:53:f7:a9:82:
bf:70:ca:1e:1f:31:c8:14:40:f1:18:6f:cb:0f:fc:e5:0a:85:
1a:bf:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:25 2023 by rpki-client on console-ams.rpki-client.org