Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/G_x8920tfvqsoAzgaak71hOrt9k.roa
File: G_x8920tfvqsoAzgaak71hOrt9k.roa (raw, json)
Hash identifier: MATG4PGYmPyOkDOuQLKljoaddqSF0bcXABcOCoLrQXc=
Subject key identifier: 1B:FC:7C:F7:6D:2D:7E:FA:AC:A0:0C:E0:69:A9:3B:D6:13:AB:B7:D9
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 058CB407
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/G_x8920tfvqsoAzgaak71hOrt9k.roa
Signing time: Fri 08 Apr 2022 03:29:01 +0000
ROA not before: Fri 08 Apr 2022 03:29:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212461
IP address blocks: 193.37.69.0/24 maxlen: 24
194.113.235.0/24 maxlen: 24
87.251.68.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.85.0/24 maxlen: 24
87.251.84.0/24 maxlen: 24
87.251.86.0/24 maxlen: 24
80.66.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93107207 (0x58cb407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Apr 8 03:29:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bfc7cf76d2d7efaaca00ce069a93bd613abb7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:46:02:cd:ab:3c:a5:99:ce:b8:3d:a1:10:
f3:a3:d4:f8:77:9a:b5:35:14:82:30:d4:6c:fd:5d:
bd:ff:eb:aa:4f:64:85:a9:5f:55:14:f1:1f:05:dd:
80:2a:88:ec:d7:2a:f7:5a:10:1c:a5:ca:1a:cb:58:
78:dc:01:4f:3a:57:44:39:e4:00:20:48:2f:4f:09:
d1:47:c0:e6:93:3b:d3:9a:c0:73:bf:41:ad:5b:67:
6e:a8:3f:46:b1:ab:24:27:75:32:e4:8d:13:0a:9e:
c7:a3:7a:f3:f6:ef:04:21:fc:b6:ce:34:27:0d:a4:
0c:57:c9:d5:d0:6d:11:72:87:c8:fb:9c:af:8b:c1:
57:88:d6:7d:d9:91:71:8c:a1:bb:73:2e:25:3c:29:
2d:c3:3f:99:1b:e0:f0:e2:0b:42:44:45:ea:2f:0d:
2b:be:18:86:8a:8a:41:09:2d:b2:8c:ef:11:0c:0c:
fa:aa:76:31:a9:2c:3b:86:64:ec:10:9e:28:ba:62:
de:e4:13:e5:89:3b:c3:eb:b4:60:07:80:6c:28:34:
40:56:3a:7d:8e:54:31:72:85:55:53:dc:51:7e:2c:
d9:c5:a5:e5:c7:20:2d:10:27:6e:14:d9:4d:bd:34:
f5:44:d2:90:1e:a6:3d:e6:f0:c3:f4:7d:ad:a2:be:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:7C:F7:6D:2D:7E:FA:AC:A0:0C:E0:69:A9:3B:D6:13:AB:B7:D9
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/G_x8920tfvqsoAzgaak71hOrt9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.78.0/24
87.251.68.0/24
87.251.78.0/24
87.251.84.0-87.251.86.255
193.37.69.0/24
194.113.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1a:a3:d9:d9:50:6d:b2:43:33:c9:9a:64:d6:8c:f1:b7:45:
45:01:25:44:0e:87:a1:b6:ef:0e:0a:c8:f4:50:af:fe:93:12:
ea:8a:85:94:91:6d:c8:e2:c7:30:34:89:45:24:5b:dc:a4:1c:
e1:53:9f:2f:11:00:a2:68:73:2c:49:ab:22:46:6f:0e:19:d0:
f1:84:85:f9:5a:27:27:c5:4c:ce:b1:61:71:26:7a:98:37:8b:
1b:e0:84:58:e6:f5:9c:de:2c:18:b6:a3:64:08:19:cf:e1:56:
7d:9b:e8:e3:f6:d6:63:13:c3:46:b9:8b:3f:9f:59:4a:06:22:
3f:62:da:99:a6:8d:bd:21:67:a0:f5:bc:20:65:61:5b:be:ef:
08:26:47:f7:ca:5e:bc:e0:c2:2a:47:8f:cc:d7:64:50:97:4e:
a6:9b:3e:63:c0:3d:9e:0b:67:0d:9e:5a:6d:17:95:2a:ba:f5:
ff:7f:68:01:48:24:18:61:f0:e9:04:af:31:18:b7:da:af:75:
88:6e:81:02:81:fb:61:bd:3f:40:21:73:4a:d6:15:ab:bd:ef:
07:54:a2:1f:7c:8f:da:77:19:18:76:6b:e5:cf:6a:8c:4d:90:
6d:7c:3e:85:d5:5e:d0:f2:cf:0d:16:63:cf:fd:4a:30:04:e5:
57:71:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:35 2023 by rpki-client on console-ams.rpki-client.org