Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/Ql_HXiq-oIHaV4wpfgRhJWbZZ28.roa
File: Ql_HXiq-oIHaV4wpfgRhJWbZZ28.roa (raw, json)
Hash identifier: ru+EptzKc4H1FumhyiPtCvtd7EgMagkpkb8x1PS3rTU=
Subject key identifier: 42:5F:C7:5E:2A:BE:A0:81:DA:57:8C:29:7E:04:61:25:66:D9:67:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 37264ADB
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/Ql_HXiq-oIHaV4wpfgRhJWbZZ28.roa
Signing time: Fri 20 May 2022 18:15:29 +0000
ROA not before: Fri 20 May 2022 18:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57356
IP address blocks: 194.140.215.0/24 maxlen: 24
194.140.216.0/22 maxlen: 22
194.140.214.0/24 maxlen: 24
194.140.222.0/23 maxlen: 23
194.140.220.0/23 maxlen: 23
87.117.84.0/23 maxlen: 23
87.117.80.0/22 maxlen: 22
87.117.80.0/20 maxlen: 20
87.117.88.0/22 maxlen: 22
87.117.86.0/23 maxlen: 23
87.117.92.0/22 maxlen: 22
194.140.212.0/22 maxlen: 22
194.140.212.0/24 maxlen: 24
194.140.208.0/22 maxlen: 22
194.140.208.0/20 maxlen: 20
194.140.213.0/24 maxlen: 24
91.185.176.0/22 maxlen: 22
31.216.0.0/20 maxlen: 20
91.185.176.0/21 maxlen: 21
185.20.164.0/23 maxlen: 23
185.20.164.0/22 maxlen: 22
31.216.0.0/21 maxlen: 21
91.185.180.0/22 maxlen: 22
185.20.166.0/23 maxlen: 23
31.216.8.0/21 maxlen: 21
86.111.160.0/21 maxlen: 21
86.111.160.0/20 maxlen: 20
86.111.172.0/23 maxlen: 23
86.111.168.0/22 maxlen: 22
86.111.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925256411 (0x37264adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: May 20 18:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=425fc75e2abea081da578c297e04612566d9676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:ef:3c:32:46:d6:1d:59:7b:01:00:9d:a5:
9b:5a:29:5d:ff:1b:82:72:f5:57:d2:8b:15:87:8c:
2e:14:21:e6:4b:3e:95:2e:69:63:e1:e9:12:25:29:
43:46:b5:d6:9c:7d:d7:1f:ba:a5:cc:19:63:05:88:
ec:63:ba:74:0c:e6:ee:e1:e0:ab:44:20:f9:6e:57:
4b:ef:52:cd:93:9c:d7:60:30:5a:38:49:e1:f0:55:
b3:6b:26:c6:e5:cb:5e:52:6e:7a:88:76:80:6c:8d:
26:1d:a6:25:cd:27:6e:bb:23:01:2b:37:7f:eb:53:
9d:91:bb:c1:7b:34:b1:2d:c8:ba:44:5b:f0:4f:40:
52:71:88:12:cf:27:9f:24:6e:bc:36:a8:23:53:10:
d2:c8:a6:d6:69:51:66:7c:6c:4d:50:eb:90:d6:3d:
2c:42:60:ee:3d:28:63:fd:70:eb:ff:18:db:a2:44:
de:df:bb:95:67:e5:55:f3:95:71:d2:04:f3:e3:0d:
db:3a:ea:0a:f6:90:19:29:4e:07:9d:31:eb:21:ce:
8a:c0:d4:9c:32:c9:87:4e:df:db:7d:69:99:00:62:
a8:40:85:dd:8d:c6:17:45:26:15:6e:02:7c:2e:6a:
fd:d2:c2:26:ac:d1:18:57:fa:f8:05:d6:9f:b9:5b:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:C7:5E:2A:BE:A0:81:DA:57:8C:29:7E:04:61:25:66:D9:67:6F
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/Ql_HXiq-oIHaV4wpfgRhJWbZZ28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.0.0/20
86.111.160.0/20
87.117.80.0/20
91.185.176.0/21
185.20.164.0/22
194.140.208.0/20
Signature Algorithm: sha256WithRSAEncryption
28:a6:41:1e:f0:13:5b:62:85:d4:68:65:68:96:86:69:f6:17:
ce:88:7b:88:73:e7:f5:d7:38:ef:4c:2c:8e:e0:6e:82:a1:af:
02:8e:75:b1:11:82:9e:74:12:5a:bf:2c:14:66:cb:4a:8c:c6:
1f:05:75:2d:a2:01:01:63:b7:b8:40:31:28:56:c4:c8:09:20:
c9:c6:1c:ae:d7:7a:c2:3a:88:5f:23:62:23:55:08:ae:02:62:
29:2c:03:82:9f:24:31:c6:1a:c1:81:fc:32:06:c1:ab:4f:b8:
0e:1b:8a:5e:41:69:0f:ab:8b:8c:71:88:3e:a4:26:a8:55:46:
ed:9e:88:ca:ee:e8:2a:b0:85:02:d3:b2:46:8a:07:3a:1f:99:
10:5a:cb:22:b1:72:a3:e9:1a:3e:6a:63:2a:87:37:dd:e8:52:
c0:7b:e9:df:23:04:0e:b6:eb:c2:a6:47:21:21:74:fb:13:42:
e5:74:ae:07:22:67:5e:ad:ff:0f:f5:b6:47:c2:49:b6:1a:ae:
ff:8d:1d:84:24:cc:fa:c0:86:70:2d:7d:84:d8:fb:08:7f:af:
06:27:af:f1:92:d3:43:82:56:3c:94:de:2e:9b:bf:a7:7f:c8:
04:eb:96:90:c4:fa:8f:2a:b9:69:0c:a1:f2:56:a4:1b:fc:ae:
32:68:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org