Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/ig0v-kOg_22-BuiHSCZVVq2uz2A.roa
File: ig0v-kOg_22-BuiHSCZVVq2uz2A.roa (raw, json)
Hash identifier: sE18G+yM1bYPkETm0YfaBK/IqEsSjpNSQaoTVqYNO3A=
Subject key identifier: 8A:0D:2F:FA:43:A0:FF:6D:BE:06:E8:87:48:26:55:56:AD:AE:CF:60
Certificate issuer: /CN=ed3141220968d0ae44045e6836999928eca864b8
Certificate serial: 1E689BAF
Authority key identifier: ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/ig0v-kOg_22-BuiHSCZVVq2uz2A.roa
Signing time: Fri 03 Jun 2022 12:29:20 +0000
ROA not before: Fri 03 Jun 2022 12:29:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49112
IP address blocks: 176.52.224.0/21 maxlen: 21
176.52.224.0/20 maxlen: 20
176.52.232.0/21 maxlen: 21
130.0.96.0/19 maxlen: 19
95.157.128.0/18 maxlen: 18
185.147.232.0/22 maxlen: 22
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510172079 (0x1e689baf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3141220968d0ae44045e6836999928eca864b8
Validity
Not Before: Jun 3 12:29:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a0d2ffa43a0ff6dbe06e88748265556adaecf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:33:cf:02:c2:28:e8:63:db:12:aa:a5:76:
88:b6:b8:ec:13:56:03:43:14:4e:dc:65:44:63:b0:
0c:8b:c2:57:05:e0:2d:eb:12:9e:a1:dd:0b:bd:e6:
11:52:41:90:b2:6b:cb:63:55:2c:a9:cb:c8:81:e0:
d5:25:08:b2:49:1c:37:3f:e5:a4:45:5b:b0:cf:a8:
d5:f3:04:88:b5:1d:03:19:b5:b3:4c:5e:f5:81:5b:
8d:bc:ed:1c:52:9f:43:fd:ac:01:89:ad:99:6b:3c:
58:79:cb:09:1a:b0:a5:0f:44:8e:b8:1f:36:75:82:
4c:37:10:03:52:86:40:23:38:ef:fc:2f:ab:51:8f:
97:c4:fb:cf:03:7b:7e:b3:71:94:e4:83:06:45:f4:
9e:1c:66:38:c6:8c:28:26:1e:69:da:0d:92:62:f3:
9a:3e:16:ed:cd:cc:7f:d2:65:95:55:80:5a:04:c4:
bb:6f:50:1b:10:26:b6:33:25:06:ff:da:16:83:15:
6c:dc:07:62:ae:bb:4a:10:91:8a:e1:90:de:81:6f:
6e:2d:16:d5:25:19:08:6b:82:5a:2e:0f:40:31:66:
7f:79:2a:ea:8f:da:93:9f:40:fb:96:83:f1:cd:5f:
82:b6:dc:0e:58:82:2c:92:53:7b:aa:ab:17:59:1b:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:2F:FA:43:A0:FF:6D:BE:06:E8:87:48:26:55:56:AD:AE:CF:60
X509v3 Authority Key Identifier:
keyid:ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/ig0v-kOg_22-BuiHSCZVVq2uz2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
176.52.224.0/20
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
32:74:51:d8:85:40:51:46:c8:27:a6:91:21:bb:a8:cb:02:51:
a4:81:03:9c:f6:68:29:f1:86:91:b5:70:8e:fa:e9:30:ab:54:
0a:09:56:9b:b9:46:24:64:76:28:66:f3:50:22:8f:bf:46:c8:
0c:23:23:e8:b1:9c:cb:aa:98:df:da:bf:ea:bd:8d:b8:c2:c4:
6d:9d:a2:4a:3f:50:ca:26:83:e7:6a:b7:13:48:ed:9a:f3:33:
4d:6c:fc:7b:e6:bf:15:93:98:f8:67:7d:23:eb:9c:ed:ed:2a:
23:3a:87:26:8e:19:11:b6:22:5a:0b:ab:cf:d1:ec:8f:86:60:
b7:00:5d:bb:a6:60:3a:05:7f:69:be:37:79:4d:77:64:c6:90:
1a:29:0b:f1:5e:30:a4:d2:84:ff:06:bc:47:1c:ee:e0:6f:55:
bc:62:0f:92:72:24:af:b7:71:29:32:6a:6e:9f:da:28:9e:42:
1d:f7:de:2d:03:5e:8d:b8:1e:08:8d:35:94:3d:37:15:3f:43:
cd:7f:68:62:46:62:cf:01:88:d5:37:ef:47:ac:e5:d4:c2:bf:
e7:cd:b9:17:60:e4:8f:79:df:0f:6b:14:2d:11:51:5b:ea:10:
83:99:fa:fd:08:4a:a3:84:8e:5f:5f:0c:f2:9a:35:d2:89:ff:
a1:10:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:11 2023 by rpki-client on console-ams.rpki-client.org