Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/oKIyHeCey2lh_4Tp0H_TK5szL0k.roa
File: oKIyHeCey2lh_4Tp0H_TK5szL0k.roa (raw, json)
Hash identifier: 82VYjXGhwk7eqhNmcytDg1OzB3UTh4+6mOJr5zw/WRs=
Subject key identifier: A0:A2:32:1D:E0:9E:CB:69:61:FF:84:E9:D0:7F:D3:2B:9B:33:2F:49
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 018321C6D88F2EDC1AB943CA500751619FE2
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/oKIyHeCey2lh_4Tp0H_TK5szL0k.roa
Signing time: Fri 09 Sep 2022 10:23:43 +0000
ROA not before: Fri 09 Sep 2022 10:23:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39608
IP address blocks: 185.53.76.0/23 maxlen: 24
176.39.0.0/16 maxlen: 16
176.39.34.0/23 maxlen: 24
176.39.36.0/23 maxlen: 24
194.33.189.0/24 maxlen: 24
86.111.64.0/19 maxlen: 19
193.107.224.0/22 maxlen: 22
176.38.0.0/16 maxlen: 17
193.93.160.0/22 maxlen: 22
86.111.88.0/21 maxlen: 22
194.50.85.0/24 maxlen: 24
91.194.81.0/24 maxlen: 24
176.36.0.0/16 maxlen: 17
176.36.0.0/14 maxlen: 14
176.37.0.0/16 maxlen: 17
194.60.69.0/24 maxlen: 24
2a01:5800::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:c6:d8:8f:2e:dc:1a:b9:43:ca:50:07:51:61:9f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 9 10:23:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0a2321de09ecb6961ff84e9d07fd32b9b332f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:54:97:6a:1c:a4:0e:5a:e6:99:57:08:57:
b6:de:2d:72:ec:3c:ef:ba:bf:2c:da:a3:c1:dc:b1:
4d:42:fa:76:dc:8c:0e:e7:f4:96:66:05:ac:df:ab:
d8:3a:47:5d:2b:ff:25:5e:2c:19:91:dd:93:48:4a:
79:e5:57:d2:71:82:07:f8:44:b9:3a:31:b4:82:5d:
69:9f:fc:88:6f:6e:7f:62:f5:6e:89:aa:ae:4e:9d:
bf:30:5e:77:71:57:64:56:86:95:75:a6:0b:bb:1f:
5a:21:7f:c0:08:fa:09:d6:8c:79:e3:53:a3:fd:40:
66:e1:52:9d:22:05:15:4c:84:10:f5:ef:10:d6:48:
30:6d:38:57:55:51:48:57:5d:e9:10:9d:3d:5a:58:
3f:96:eb:a8:61:9d:28:2f:53:ae:c7:3b:db:d2:7f:
1b:9c:12:ed:63:a5:29:b0:ce:fc:6f:09:8a:bd:66:
d2:d5:b4:72:ab:ac:06:49:16:4e:17:c5:16:b9:fa:
3c:ed:34:b1:c5:dd:50:77:95:73:16:5b:5d:a4:90:
6d:95:59:a4:47:70:f2:c0:f2:5b:81:aa:af:05:31:
8b:1a:62:4c:7d:b3:be:fe:1e:bd:8a:23:98:78:67:
5f:86:42:18:be:02:e7:5b:90:cc:7f:f6:b0:36:71:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A2:32:1D:E0:9E:CB:69:61:FF:84:E9:D0:7F:D3:2B:9B:33:2F:49
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/oKIyHeCey2lh_4Tp0H_TK5szL0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.64.0/19
91.194.81.0/24
176.36.0.0/14
185.53.76.0/23
193.93.160.0/22
193.107.224.0/22
194.33.189.0/24
194.50.85.0/24
194.60.69.0/24
IPv6:
2a01:5800::/32
Signature Algorithm: sha256WithRSAEncryption
a4:bb:10:b4:1f:0d:7a:1c:34:68:7f:75:d6:c1:88:38:ce:9e:
ee:16:cc:69:ea:ea:15:8f:40:91:21:b2:0b:40:03:f3:e0:3f:
bc:81:a4:ac:48:af:39:2f:44:2c:6b:76:cb:ff:8f:27:73:8c:
c6:f7:15:ce:7d:8f:23:5d:87:27:04:82:2d:d3:f7:9c:eb:15:
ae:85:c8:50:f6:59:c4:6e:4d:44:bf:02:89:be:d4:17:bd:72:
cc:61:c9:b1:f9:db:38:18:02:2d:4b:7f:5e:5d:33:a4:b8:11:
5d:b8:df:47:c4:72:6c:b2:07:13:e5:17:79:18:f8:2c:2d:9f:
8e:ca:79:f8:6e:3b:31:7e:66:3a:43:b4:29:70:60:cf:eb:5f:
37:b3:2d:1f:ce:1d:2d:88:56:0e:e9:a2:28:49:a7:1f:d8:52:
4a:d8:ba:3d:3f:8a:27:95:a8:7b:59:5f:8a:64:a0:b4:4e:86:
d3:c6:53:22:c3:a5:9d:4d:d4:f7:72:f9:07:9b:a3:ec:83:7e:
ce:11:a4:58:d8:74:95:94:be:9f:d9:57:ba:6a:df:d0:cb:7d:
d1:9e:55:e5:bf:19:cf:4e:f8:3d:64:a6:7b:16:fb:d0:38:39:
2b:65:69:dd:78:6a:03:f4:a2:c6:fa:46:ca:30:dc:fe:a1:b6:
8d:29:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org