Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/8-SPM9_1d0FjHYDsAS-u3a4kQlk.roa
File: 8-SPM9_1d0FjHYDsAS-u3a4kQlk.roa (raw, json)
Hash identifier: oeIFvbZR6DcGGM5ihclm1byoqtmCwt5AUeQtreXlUhk=
Subject key identifier: F3:E4:8F:33:DF:F5:77:41:63:1D:80:EC:01:2F:AE:DD:AE:24:42:59
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 028C5C0C
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/8-SPM9_1d0FjHYDsAS-u3a4kQlk.roa
Signing time: Tue 25 Jan 2022 11:14:32 +0000
ROA not before: Tue 25 Jan 2022 11:14:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13036
IP address blocks: 194.108.0.0/16 maxlen: 16
195.22.32.0/19 maxlen: 19
195.39.0.0/17 maxlen: 17
62.84.128.0/19 maxlen: 19
194.149.96.0/19 maxlen: 19
195.144.96.0/19 maxlen: 19
213.29.0.0/16 maxlen: 16
62.209.192.0/18 maxlen: 18
212.65.192.0/18 maxlen: 18
194.213.32.0/19 maxlen: 19
193.86.0.0/16 maxlen: 16
62.77.64.0/18 maxlen: 18
194.212.0.0/16 maxlen: 16
195.47.0.0/17 maxlen: 17
194.213.192.0/19 maxlen: 19
212.47.0.0/19 maxlen: 19
213.210.128.0/18 maxlen: 18
193.85.0.0/16 maxlen: 16
62.168.0.0/18 maxlen: 18
193.179.0.0/16 maxlen: 16
195.70.128.0/19 maxlen: 19
2001:af0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42753036 (0x28c5c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Jan 25 11:14:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3e48f33dff57741631d80ec012faeddae244259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:bb:69:2b:87:39:43:7d:a2:da:0b:cb:7b:
96:12:87:28:fd:84:53:8d:64:f3:4d:4e:94:64:89:
86:2b:d3:ab:75:7f:76:75:dd:90:d0:cf:0e:b5:ca:
81:0b:8c:fd:6c:20:1e:1c:a4:b7:c4:43:09:f0:c9:
d2:51:5d:52:66:3e:d4:7e:e3:a1:80:86:43:cc:09:
e0:4e:33:9f:fc:63:6a:0b:34:53:de:cb:cc:0a:fc:
66:be:70:5a:6d:0f:86:f7:89:4e:59:c4:53:c8:67:
96:93:cd:b9:fc:3b:45:2a:55:42:82:31:be:67:84:
c6:c3:e5:77:e3:20:d1:7b:ae:6b:15:c5:86:e3:5d:
91:f4:1f:23:02:18:c8:f7:44:d7:20:d3:c1:7c:de:
ca:cc:2f:cd:86:13:e7:03:1f:71:f4:da:27:f9:40:
6b:7a:ba:a6:49:b8:88:7e:bc:36:19:b8:e7:3e:1a:
e3:36:9f:37:52:8c:51:fc:5b:a8:33:d4:e7:c3:2d:
82:d0:e5:fd:c3:c1:f2:d0:91:f3:e1:82:12:5d:ec:
97:06:69:be:dd:91:50:6b:2e:72:d6:b6:1e:c1:5d:
bc:00:00:8a:1c:82:6d:67:78:fa:51:bf:bb:de:55:
cd:2b:0a:37:12:c0:30:9c:f4:f8:0c:a6:bd:07:01:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:8F:33:DF:F5:77:41:63:1D:80:EC:01:2F:AE:DD:AE:24:42:59
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/8-SPM9_1d0FjHYDsAS-u3a4kQlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.64.0/18
62.84.128.0/19
62.168.0.0/18
62.209.192.0/18
193.85.0.0-193.86.255.255
193.179.0.0/16
194.108.0.0/16
194.149.96.0/19
194.212.0.0/16
194.213.32.0/19
194.213.192.0/19
195.22.32.0/19
195.39.0.0/17
195.47.0.0/17
195.70.128.0/19
195.144.96.0/19
212.47.0.0/19
212.65.192.0/18
213.29.0.0/16
213.210.128.0/18
IPv6:
2001:af0::/32
Signature Algorithm: sha256WithRSAEncryption
04:d2:ac:c4:50:06:b4:ec:80:cd:1a:b7:a7:65:10:a7:3e:04:
0d:b5:03:15:bb:fe:b8:55:1a:a8:f5:31:9a:eb:69:dc:a8:a0:
bf:cf:5f:58:f2:fb:3d:b5:06:f9:37:ce:a2:3a:e8:f4:05:37:
fb:a9:65:ce:79:0a:2d:b7:07:21:4d:b2:83:27:f2:16:a6:e2:
a5:d0:95:af:4c:3d:89:4d:2c:f2:a8:e2:af:77:a6:c2:c2:05:
31:06:3e:da:33:fe:9b:1c:90:04:fd:1c:c0:b8:1f:c7:42:e3:
84:2d:eb:98:17:ab:7d:bc:6c:c5:c6:01:e0:fb:3e:98:bf:28:
f1:49:8a:95:20:8d:82:64:30:1b:78:da:0b:40:95:40:88:5b:
02:24:1d:e4:b2:11:bf:65:34:ea:58:49:53:bf:24:aa:52:be:
88:bc:d6:d4:26:d3:ed:f1:53:5a:06:cf:d9:11:5f:76:cd:29:
f9:ca:c8:26:75:89:68:28:48:e5:13:7e:46:78:be:aa:f5:7f:
d2:57:61:3c:9d:4b:20:a0:07:f7:bf:1f:9d:45:af:68:66:e4:
d9:d3:13:05:7d:ac:06:8c:2a:18:15:bd:9f:ef:89:5e:b8:aa:
f6:e1:f2:a3:8d:e9:68:bf:10:ea:f2:04:60:07:36:6a:12:b5:
87:76:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:18 2024 by rpki-client on console-ams.rpki-client.org