Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/aDcpViKiq2zIcnnnx9FeG83YAFQ.roa
File: aDcpViKiq2zIcnnnx9FeG83YAFQ.roa (raw, json)
Hash identifier: FP1kQCrl0s/wD6g+RvI++LfsRn6OYbCCfXvXh3t6oeg=
Subject key identifier: 68:37:29:56:22:A2:AB:6C:C8:72:79:E7:C7:D1:5E:1B:CD:D8:00:54
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 028D801C
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/aDcpViKiq2zIcnnnx9FeG83YAFQ.roa
Signing time: Sat 01 Jan 2022 08:57:30 +0000
ROA not before: Sat 01 Jan 2022 08:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16302
IP address blocks: 217.119.32.0/20 maxlen: 20
77.246.192.0/20 maxlen: 20
79.134.96.0/19 maxlen: 19
80.248.240.0/20 maxlen: 20
185.163.14.0/23 maxlen: 23
188.127.192.0/19 maxlen: 19
185.9.8.0/22 maxlen: 22
2a00:1190::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42827804 (0x28d801c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Jan 1 08:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6837295622a2ab6cc87279e7c7d15e1bcdd80054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:3b:9d:be:d3:a8:ce:91:eb:d3:27:99:f3:
f6:38:10:89:7e:c9:30:14:28:0e:79:cf:1d:54:a5:
ca:b4:2b:3b:7c:8c:c3:3b:51:3a:31:9f:99:14:43:
aa:f1:c1:9d:a4:7f:b4:e6:9b:96:4a:5c:ea:dd:ad:
30:6f:91:d2:24:47:3d:ee:61:64:6b:7d:3d:87:57:
06:0f:40:34:bd:df:b8:d2:c3:f5:9b:f1:36:23:fa:
fa:46:f0:04:6a:4b:70:b2:74:78:2b:cc:08:01:06:
44:36:22:0d:23:7c:05:75:92:34:83:fa:0a:e3:2d:
d8:2c:63:49:b8:be:b1:e9:14:53:77:21:ab:6a:7d:
62:9d:13:50:b9:fe:06:61:ff:f1:21:4e:c4:b9:af:
53:61:4e:a0:98:4d:c2:75:5f:b6:fb:ac:86:ed:18:
02:bd:ad:52:fe:6b:a6:1f:9e:49:90:09:a3:24:76:
19:74:f6:76:a3:07:cf:71:79:d7:04:5e:bd:7f:18:
e0:b0:1c:2d:49:14:7e:96:6f:c8:97:da:59:11:6e:
b0:ea:0e:cb:0b:15:bd:d1:9b:e2:28:52:a8:86:75:
ff:5f:3c:43:da:38:8d:58:c2:63:ba:7c:9d:5d:cf:
cf:b0:55:ff:68:d7:30:a7:99:f8:fa:3c:8a:85:4e:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:29:56:22:A2:AB:6C:C8:72:79:E7:C7:D1:5E:1B:CD:D8:00:54
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/aDcpViKiq2zIcnnnx9FeG83YAFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.192.0/20
79.134.96.0/19
80.248.240.0/20
185.9.8.0/22
185.163.14.0/23
188.127.192.0/19
217.119.32.0/20
IPv6:
2a00:1190::/32
Signature Algorithm: sha256WithRSAEncryption
89:d5:bd:71:cc:f4:d6:e2:c1:cb:e9:34:3c:f2:e3:b8:70:fd:
e3:1a:ab:d7:f4:21:8b:47:15:78:6e:1b:24:8d:dc:30:90:ad:
04:ba:e6:9b:ed:d0:cc:42:c7:e7:46:78:eb:d9:53:4d:71:20:
64:7d:e2:c6:4d:3d:af:b1:11:9e:e6:73:33:5e:f7:c0:7b:62:
13:af:94:9e:ae:10:7c:af:b9:01:a2:cd:7a:83:91:e8:3e:ac:
30:17:9b:3d:c7:01:56:ba:fc:c4:e7:e0:c8:21:fe:9b:13:7a:
f9:e3:d8:e2:52:22:32:ce:d8:c1:15:cc:24:f3:32:50:8f:30:
9d:9b:e7:52:8b:b4:ca:35:ae:b3:6e:66:9d:6d:d0:c9:0a:96:
1f:a3:04:5c:12:22:cf:a4:44:5e:02:c4:a9:97:94:f5:08:a0:
09:a8:d7:cd:76:8e:a9:83:7c:42:bb:01:b8:e7:af:ee:42:0e:
8c:9a:4b:9f:41:bc:69:fd:18:4b:dc:de:12:8c:af:29:ac:34:
f3:7b:67:63:35:07:e6:78:c9:da:84:59:f8:b7:51:cc:e6:ee:
b9:90:e2:1c:45:01:9b:34:ca:f5:51:94:56:73:62:b3:67:1c:
41:d4:9b:56:ef:f0:9d:ad:69:07:58:8d:50:cd:6e:a8:dc:36:
ec:61:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:58 2024 by rpki-client on console-fra.rpki-client.org