Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/oS_68sHAddIorJ5DnVzoVf3vVd0.roa
File: oS_68sHAddIorJ5DnVzoVf3vVd0.roa (raw, json)
Hash identifier: ibsRujbU0epO3HmCSrUB2qeAQ3QqfXX0vmFwNpQZOM4=
Subject key identifier: A1:2F:FA:F2:C1:C0:75:D2:28:AC:9E:43:9D:5C:E8:55:FD:EF:55:DD
Certificate issuer: /CN=584510e996ca0b8a55cb18c228c997d63c31a781
Certificate serial: 04D97EA3
Authority key identifier: 58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/oS_68sHAddIorJ5DnVzoVf3vVd0.roa
Signing time: Sat 01 Jan 2022 05:04:35 +0000
ROA not before: Sat 01 Jan 2022 05:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 85.158.143.0/24 maxlen: 24
85.158.142.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
193.109.255.0/24 maxlen: 24
46.226.52.0/23 maxlen: 23
193.109.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81362595 (0x4d97ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584510e996ca0b8a55cb18c228c997d63c31a781
Validity
Not Before: Jan 1 05:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a12ffaf2c1c075d228ac9e439d5ce855fdef55dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:32:62:36:bc:db:c3:8d:4a:2c:3b:87:c8:
a3:bf:7d:62:5c:f6:a8:20:2c:55:5b:79:a2:e7:87:
8a:24:b7:f3:77:7c:6f:c9:91:ef:a5:92:61:93:4c:
d3:a7:bc:3b:eb:54:27:63:66:34:24:b9:91:d4:d8:
42:7c:c7:a1:be:ea:db:cd:97:20:9b:ef:6f:29:bc:
0b:38:37:ba:43:30:f0:f1:3b:64:6c:d1:86:80:b7:
5f:b1:9e:c7:e8:00:73:ac:90:fd:09:6d:41:37:40:
c7:86:61:7a:a9:cc:b1:ca:f3:98:db:d6:92:90:ad:
a5:ed:38:07:39:08:4b:0c:37:b9:e8:9e:e9:44:f5:
cc:ad:d9:e4:7d:fe:a6:17:3e:f8:ba:b4:07:5e:37:
c7:35:f6:ac:a8:31:4f:60:d9:e7:50:ff:28:98:fc:
c1:5e:75:3e:7d:22:16:53:0b:4c:ef:fb:9b:78:a2:
d3:69:a8:e5:91:2e:b4:17:62:31:77:9d:80:7e:92:
c7:6d:f8:7c:42:41:8e:95:4b:57:73:a8:16:1e:af:
37:4b:94:95:87:20:64:b0:ef:0d:66:ea:c5:6b:f9:
56:e6:65:1b:66:d2:f2:bd:10:7b:88:af:dc:60:a2:
ed:fd:25:55:c5:b1:97:3e:c4:f3:ae:58:26:4d:ce:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:FA:F2:C1:C0:75:D2:28:AC:9E:43:9D:5C:E8:55:FD:EF:55:DD
X509v3 Authority Key Identifier:
keyid:58:45:10:E9:96:CA:0B:8A:55:CB:18:C2:28:C9:97:D6:3C:31:A7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/oS_68sHAddIorJ5DnVzoVf3vVd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2c233c-87d1-45b2-b0cd-3cfee340219d/1/WEUQ6ZbKC4pVyxjCKMmX1jwxp4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.52.0/23
85.158.142.0/23
193.109.254.0/23
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:f3:13:bd:5a:f5:1b:30:77:21:b1:16:51:1b:b1:d4:7e:51:
ea:68:bc:e3:a9:e7:e9:12:3a:c1:6f:c2:89:1b:f4:f7:9a:08:
61:61:82:7d:b4:90:7c:19:6e:89:4d:2f:0e:59:b3:af:3d:a7:
8b:9a:2d:b6:2b:dd:eb:c9:56:6c:ed:f4:f1:cd:8c:60:3b:53:
86:e9:7b:2d:9c:ec:d1:09:27:11:a6:7b:de:f8:89:17:13:3a:
0b:a6:18:7c:6c:cd:31:53:7a:21:38:9b:80:72:ed:8d:7a:3a:
39:71:fc:89:64:50:d2:e0:a2:66:99:a8:11:cc:fd:37:ea:91:
b1:60:29:37:3b:36:bf:cc:35:96:95:fd:6d:0e:bf:93:29:12:
51:45:53:28:a7:f4:07:90:37:a8:3e:bb:eb:f2:e8:32:74:c9:
3f:d9:c2:08:52:73:3b:ad:26:60:e3:12:2f:b1:ca:98:8e:43:
e4:c0:a6:5e:82:7d:be:00:c2:d1:b1:22:6b:57:64:ab:f3:d7:
8c:8c:7b:62:61:8e:8a:be:59:a0:e7:25:30:2f:d2:ab:c1:7e:
8b:11:81:ed:af:ab:36:34:9c:b7:7e:01:e6:85:a2:4d:29:1d:
4d:ac:b4:f8:30:4b:13:92:03:c4:01:b9:57:55:a5:8e:76:7e:
25:6b:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org