Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/HD0b7izu8pKF7vaREmpD2SlPJj8.roa
File: HD0b7izu8pKF7vaREmpD2SlPJj8.roa (raw, json)
Hash identifier: cGigYU9+BwhWtmt/SytrH2FtwI1qFt71fawDFogln4A=
Subject key identifier: 1C:3D:1B:EE:2C:EE:F2:92:85:EE:F6:91:12:6A:43:D9:29:4F:26:3F
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 0182F8FFB110BA8DCF4FA5D79BA173365E47
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/HD0b7izu8pKF7vaREmpD2SlPJj8.roa
Signing time: Thu 01 Sep 2022 12:21:22 +0000
ROA not before: Thu 01 Sep 2022 12:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197036
IP address blocks: 195.28.218.0/24 maxlen: 24
178.23.152.0/21 maxlen: 21
195.28.192.0/19 maxlen: 19
185.228.20.0/22 maxlen: 22
185.19.240.0/22 maxlen: 22
213.173.51.0/24 maxlen: 24
213.173.48.0/22 maxlen: 22
2a09:2600::/29 maxlen: 29
2a02:21e8:71::/48 maxlen: 48
2a0c:e600::/29 maxlen: 29
2a0c:e9c0::/29 maxlen: 29
2a0d:d040::/29 maxlen: 29
2a02:21e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:ff:b1:10:ba:8d:cf:4f:a5:d7:9b:a1:73:36:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Sep 1 12:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c3d1bee2ceef29285eef691126a43d9294f263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:c1:32:44:2e:18:68:7b:22:46:94:f1:13:
e5:ec:8f:01:92:02:45:1a:da:81:94:89:11:06:4d:
17:e4:6e:63:67:14:aa:2e:7d:8e:5c:2e:1c:69:f6:
65:a0:36:ab:ba:ac:5b:2d:e1:bc:75:29:63:72:c0:
d5:b4:76:6f:98:71:24:f7:66:4c:55:21:b4:c9:0d:
1b:79:46:75:9e:b9:c0:f9:12:a0:c6:c5:17:74:3c:
13:6f:99:91:d7:18:7f:aa:1d:b7:5a:b8:8e:d7:cb:
b5:66:13:25:07:dd:b5:4a:8d:17:c8:66:5d:d1:a2:
4b:65:2d:97:46:27:2e:72:d4:cc:b0:ea:0a:56:84:
0b:e1:4c:7b:25:20:34:ba:3a:ab:75:99:be:a7:fd:
fd:32:42:50:8e:3a:c2:76:6d:e1:cd:d8:f6:6e:81:
8b:3b:66:a8:68:21:50:76:d0:7e:ba:84:1c:a8:6b:
d4:58:26:0c:14:db:00:a7:7a:c5:ef:1c:9e:2f:3c:
35:79:f3:e0:e2:2d:5a:c1:8d:46:ab:fb:98:09:85:
d6:d6:aa:1b:73:bb:d5:f9:63:0c:56:3b:73:66:f9:
10:53:33:70:ad:64:4c:a3:d7:e0:a7:a1:99:af:18:
28:44:18:06:28:49:6f:dc:25:91:32:61:ad:92:9c:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:1B:EE:2C:EE:F2:92:85:EE:F6:91:12:6A:43:D9:29:4F:26:3F
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/HD0b7izu8pKF7vaREmpD2SlPJj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.152.0/21
185.19.240.0/22
185.228.20.0/22
195.28.192.0/19
213.173.48.0/22
IPv6:
2a02:21e8::/32
2a09:2600::/29
2a0c:e600::/29
2a0c:e9c0::/29
2a0d:d040::/29
Signature Algorithm: sha256WithRSAEncryption
cf:b6:3e:f5:fa:0c:7a:36:05:e0:86:63:3f:78:7e:fd:c4:8c:
cf:f2:38:38:9e:33:1b:7c:49:c0:6e:e4:07:4a:1b:a0:6a:4d:
b0:77:98:8c:4c:fb:f2:ee:4c:0e:4d:6a:9b:09:9d:43:60:80:
2f:40:14:f2:e9:31:30:2c:5d:00:ef:bc:be:c7:34:ed:04:4b:
d9:f5:4a:a0:7b:27:6a:67:22:15:92:12:4a:5b:51:c8:29:cb:
18:ae:a5:e3:fa:cc:16:cd:e1:e3:b1:fb:28:20:32:0b:ef:e1:
a7:57:fc:53:e1:82:1c:d9:80:44:db:3e:97:0b:ae:5c:d6:ac:
9b:7c:10:ab:e3:d9:eb:aa:76:4f:0f:e3:de:82:62:61:92:47:
42:ec:78:dd:98:df:f8:0e:1a:ad:87:d7:51:07:ab:79:71:3c:
e4:0a:10:2d:34:e0:13:8a:d2:62:67:50:0f:fb:1e:19:38:04:
de:1a:9e:03:9e:08:dc:f1:ad:a1:40:b3:0c:dd:97:91:f5:33:
1a:0a:28:f0:be:72:73:f0:8f:60:2a:99:cd:3d:24:6a:53:b7:
50:91:fd:5f:76:b4:86:e4:c8:6e:b6:72:26:9c:1c:f3:98:7b:
f5:48:7e:46:c5:94:23:3b:03:fb:7a:aa:6c:4d:7f:18:f9:0f:
a6:20:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:37 2023 by rpki-client on console-ams.rpki-client.org