Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/tk0j5oh6oBvCwmkCQvdsiKL7YXo.roa
File: tk0j5oh6oBvCwmkCQvdsiKL7YXo.roa (raw, json)
Hash identifier: LiBN2qejkdPLEtggnB7OP33YtpWo/Yt5GctLzbO4gXk=
Subject key identifier: B6:4D:23:E6:88:7A:A0:1B:C2:C2:69:02:42:F7:6C:88:A2:FB:61:7A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0183A3B3FE8EB2E3CA17CFF84ED5D1BAD38B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/tk0j5oh6oBvCwmkCQvdsiKL7YXo.roa
Signing time: Tue 04 Oct 2022 15:53:45 +0000
ROA not before: Tue 04 Oct 2022 15:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 94.198.47.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
185.229.212.0/22 maxlen: 22
185.229.213.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.114.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.120.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:b3:fe:8e:b2:e3:ca:17:cf:f8:4e:d5:d1:ba:d3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 4 15:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b64d23e6887aa01bc2c2690242f76c88a2fb617a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:a1:21:e0:33:e6:02:6d:35:f1:43:c0:ce:
82:18:d6:2b:22:b5:84:98:3f:f4:b7:b2:73:64:9d:
91:b5:47:30:74:a4:f7:24:72:15:d6:f3:f9:70:e0:
3a:36:02:28:65:4d:0d:07:bb:6b:9b:ca:bc:4b:9e:
d2:73:1f:12:2b:6f:54:42:cf:77:c6:8f:a1:d8:98:
62:6f:8d:36:1a:f4:5f:69:73:bf:9c:f9:5d:24:64:
ed:73:35:2a:75:3c:49:83:d3:06:f8:ea:28:6e:9f:
48:9a:8d:5b:2b:3b:ee:c4:7c:5f:38:c1:fa:69:c8:
4a:18:b5:26:7e:54:de:e0:1b:f6:67:fa:1b:44:cc:
53:c7:c6:2d:da:e1:f1:08:81:8f:f1:92:c1:5d:1e:
ed:f8:28:9d:63:58:2f:4a:03:58:8e:12:bf:6d:ac:
98:ae:7d:59:49:de:46:22:13:b9:cd:6f:9c:be:5b:
3d:88:9a:89:b2:5f:56:89:ba:6f:e2:b8:60:79:c7:
a7:01:e8:1c:ec:ed:a8:a5:8b:ad:57:cc:7a:f1:3d:
17:f6:6d:d3:ea:4e:d6:a1:0b:93:e5:b4:d6:ad:58:
9d:39:24:9f:83:2a:26:b5:c8:80:2f:66:14:04:62:
33:f4:7c:fa:47:2a:65:0b:2b:c4:6b:82:a4:26:78:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:23:E6:88:7A:A0:1B:C2:C2:69:02:42:F7:6C:88:A2:FB:61:7A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/tk0j5oh6oBvCwmkCQvdsiKL7YXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0-80.66.117.255
80.66.120.0/23
80.66.123.0-80.66.124.255
89.42.70.0/24
89.44.150.0/24
94.198.46.0/23
178.19.32.0/23
178.19.44.0/24
178.19.47.0/24
185.229.212.0/22
185.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
77:88:82:e1:ff:28:60:f4:06:b5:66:c5:21:47:2e:02:34:5c:
58:18:d8:a0:1e:c2:a9:a0:c8:c6:30:be:50:d5:be:19:47:6a:
e8:d1:85:4b:43:6a:ba:f6:0a:51:45:7c:34:b4:00:c5:93:c5:
f8:e7:9e:45:09:ca:55:c8:50:d7:52:ff:91:c4:69:20:e6:a4:
d9:ff:a5:54:2f:c8:96:77:4a:f0:bd:57:d1:17:89:8b:24:fb:
a1:ec:1f:06:9e:ef:fa:5e:52:bb:03:c9:f3:9f:48:f6:ab:8b:
0e:53:57:2f:ac:5e:bd:d7:f4:79:cd:f6:c3:c1:e9:a1:d4:87:
08:b1:4c:94:9e:d9:c5:5e:ec:17:e6:54:a0:25:8c:27:5b:5b:
41:19:dc:ae:6d:b7:e5:9c:3f:54:d7:80:fc:d7:d6:31:0c:56:
64:c7:04:59:2c:0c:27:aa:4d:04:b0:25:45:71:8f:c6:f2:f9:
1f:5a:f5:e0:63:1d:e0:f9:13:da:5e:11:bd:d3:d0:0d:78:f4:
e6:ca:15:73:28:5d:b8:50:ae:cf:2c:65:ca:2c:d7:04:23:0b:
08:14:e2:57:bf:12:f3:06:59:7f:8c:5d:5e:7d:09:23:06:04:
91:57:9e:17:75:14:9c:33:6f:0b:e5:a0:ea:fc:3c:7b:dd:70:
f0:85:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:36 2023 by rpki-client on console-ams.rpki-client.org