Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/_oIPTnHU8pv5PlbPQLG_BK1RABc.roa
File: _oIPTnHU8pv5PlbPQLG_BK1RABc.roa (raw, json)
Hash identifier: ChquohxP2pSObTnWlqqBmlXk+mIDiAbTxfuIYtdx4Wg=
Subject key identifier: FE:82:0F:4E:71:D4:F2:9B:F9:3E:56:CF:40:B1:BF:04:AD:51:00:17
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 06B0F21A
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/_oIPTnHU8pv5PlbPQLG_BK1RABc.roa
Signing time: Mon 25 Apr 2022 15:05:15 +0000
ROA not before: Mon 25 Apr 2022 15:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 158.46.136.0/21 maxlen: 21
158.46.144.0/20 maxlen: 20
158.46.152.0/24 maxlen: 24
158.46.156.0/24 maxlen: 24
158.46.158.0/24 maxlen: 24
158.46.164.0/22 maxlen: 22
158.46.162.0/23 maxlen: 23
158.46.160.0/23 maxlen: 23
158.46.168.0/21 maxlen: 21
158.46.186.0/23 maxlen: 23
158.46.184.0/23 maxlen: 23
178.171.20.0/22 maxlen: 24
158.46.132.0/22 maxlen: 22
178.171.36.0/23 maxlen: 23
158.46.188.0/22 maxlen: 24
178.171.101.0/24 maxlen: 24
178.171.103.0/24 maxlen: 24
178.171.105.0/24 maxlen: 24
178.171.112.0/23 maxlen: 23
178.171.108.0/23 maxlen: 23
178.171.106.0/23 maxlen: 23
178.171.114.0/23 maxlen: 23
178.171.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112259610 (0x6b0f21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Apr 25 15:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe820f4e71d4f29bf93e56cf40b1bf04ad510017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:26:40:2f:59:c8:d5:a8:5e:55:97:40:ce:
31:0d:15:50:b5:70:36:80:98:ae:0b:98:3d:19:19:
d8:c5:6a:bf:cc:b3:1f:67:f1:ee:1a:a3:1b:04:a2:
54:7d:d8:2a:df:6c:9d:ea:9b:3b:5e:e2:85:e7:01:
23:b7:08:a4:30:dc:5c:bb:cf:fa:29:94:c1:3b:9a:
ba:49:7d:91:51:a8:39:aa:cb:7c:c3:cd:c2:47:ac:
fb:9b:8f:f4:30:5d:d8:ef:f2:ea:0c:44:0a:6e:31:
92:06:78:bb:37:26:cc:40:3e:1b:34:f9:00:3b:a8:
96:9a:50:21:08:6f:af:37:99:53:b7:87:9b:e9:b1:
87:8f:c6:55:96:30:99:9d:01:f5:f8:8b:66:01:84:
c6:8a:0f:c2:52:35:8b:2a:c1:20:a1:38:35:b2:87:
23:27:e8:21:61:88:9a:e6:6a:32:98:40:20:c0:85:
b9:21:b7:de:08:5d:61:7d:f0:f8:f6:d0:b6:db:9f:
ed:42:c3:e2:22:27:d1:92:a2:b0:e3:eb:dc:ea:6e:
cd:72:ee:e2:ef:97:1a:83:da:7a:4f:8a:35:7f:c4:
7b:92:6b:29:f6:d7:ae:4c:f4:72:ee:f0:35:9e:e4:
31:48:85:77:e5:2e:6e:f9:d6:05:12:60:a4:21:5d:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:0F:4E:71:D4:F2:9B:F9:3E:56:CF:40:B1:BF:04:AD:51:00:17
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/_oIPTnHU8pv5PlbPQLG_BK1RABc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.132.0-158.46.175.255
158.46.184.0/21
178.171.20.0/22
178.171.36.0/23
178.171.101.0/24
178.171.103.0/24
178.171.105.0-178.171.109.255
178.171.112.0-178.171.117.255
Signature Algorithm: sha256WithRSAEncryption
8d:38:fc:fb:2d:1a:95:db:a6:cd:f9:6e:57:fc:1c:c2:07:c4:
5f:50:58:b3:22:fe:ab:69:70:3f:85:c2:d5:ee:e2:a6:fa:9c:
64:42:00:14:22:f8:f2:2d:3f:41:ae:c3:24:11:65:6d:83:26:
e3:f1:33:05:2b:fa:6a:2a:93:88:cd:94:6e:7b:d1:ee:73:ae:
af:c8:b0:57:4f:5d:54:75:7a:11:01:bf:e4:6d:80:32:b5:47:
41:e0:6e:5d:5f:9e:3a:d6:7c:f8:10:94:a1:74:35:7f:44:41:
6c:3c:f2:40:18:b1:35:3c:c9:c6:8f:d1:e8:b0:22:d7:9a:a1:
d3:77:d3:6c:f7:6f:23:e5:66:38:8c:1b:48:57:dd:cd:61:83:
fc:12:cd:42:79:6f:e6:7f:45:6e:bc:19:2b:69:3f:a9:05:cc:
0c:80:5b:f0:f7:7f:ea:1d:9e:2c:28:9a:03:73:c6:37:a5:81:
58:4f:67:f3:07:5f:04:8f:7f:20:97:e7:1e:b0:65:c1:dc:50:
16:11:0b:5d:cb:f8:b3:2c:4f:83:2c:a6:b9:22:bb:17:4a:87:
d7:f4:5c:6e:ab:43:e6:4b:4f:00:4d:e7:a8:9a:d6:4e:ea:cb:
e6:b6:b9:1a:2f:1a:d4:88:9a:d6:f8:55:07:4e:84:2e:0e:06:
b6:30:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org