Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Ci8Fmq8bVZVEixSr8LxRp9FupEE.roa
File: Ci8Fmq8bVZVEixSr8LxRp9FupEE.roa (raw, json)
Hash identifier: bvQU1zgazJiRCj3NHeNzZfWZY8Z22eYo7tBdn0Y/h70=
Subject key identifier: 0A:2F:05:9A:AF:1B:55:95:44:8B:14:AB:F0:BC:51:A7:D1:6E:A4:41
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10B6D378
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Ci8Fmq8bVZVEixSr8LxRp9FupEE.roa
Signing time: Sat 01 Jan 2022 13:02:15 +0000
ROA not before: Sat 01 Jan 2022 13:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20960
IP address blocks: 88.199.0.0/16 maxlen: 16
94.40.0.0/16 maxlen: 17
82.160.0.0/16 maxlen: 16
78.131.128.0/17 maxlen: 17
213.199.192.0/18 maxlen: 18
2a02:f40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280417144 (0x10b6d378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a2f059aaf1b5595448b14abf0bc51a7d16ea441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:35:44:ba:5f:13:6c:53:6a:db:80:30:b3:
42:91:81:47:b5:9d:24:be:3a:c7:08:2e:66:37:2d:
3a:11:d7:33:26:5d:96:2c:69:ad:dd:54:31:98:1a:
2c:7e:c5:57:99:1f:bd:f0:07:75:c2:16:df:9b:11:
13:23:b4:60:53:c5:b6:a7:bd:a9:f4:f2:35:74:d6:
cc:e0:5d:d0:28:fd:62:06:aa:eb:6e:6d:71:b1:72:
6f:90:d0:03:96:85:0e:d2:02:9f:ee:82:02:65:18:
c6:47:09:72:09:3c:14:0e:c8:0d:b2:d8:b3:a4:57:
c8:d8:d0:a6:ac:70:15:94:2f:06:f6:c4:5e:a1:bc:
77:fd:10:37:57:e4:ef:92:cb:1a:2e:0e:35:cf:97:
56:07:90:86:1d:4e:b1:63:89:34:4a:ab:92:bd:08:
2a:d3:5f:a3:02:74:25:7f:a7:b6:77:b8:c5:d1:cc:
d7:f5:14:f9:34:5b:e1:c4:0b:5b:4b:22:e0:2f:35:
22:c7:3b:61:c1:e7:8a:da:dd:64:1f:e7:b1:66:f3:
c0:3d:2a:54:ad:0d:ef:4a:f0:79:57:90:14:8e:e5:
eb:76:9c:22:b8:43:0d:58:29:ca:6a:b7:d1:9c:40:
4c:92:fc:65:14:a5:34:7e:2b:ef:b9:95:b8:3b:f8:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2F:05:9A:AF:1B:55:95:44:8B:14:AB:F0:BC:51:A7:D1:6E:A4:41
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/Ci8Fmq8bVZVEixSr8LxRp9FupEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.131.128.0/17
82.160.0.0/16
88.199.0.0/16
94.40.0.0/16
213.199.192.0/18
IPv6:
2a02:f40::/32
Signature Algorithm: sha256WithRSAEncryption
84:94:01:9d:6f:db:6e:42:6a:e0:6f:a9:f7:b0:77:1f:a4:78:
fa:9a:42:b8:1b:47:25:31:fc:c3:80:e1:5b:9e:8e:c8:06:a0:
f8:01:0f:4e:db:ee:79:50:ea:00:aa:2b:f8:d9:02:28:d6:e8:
cf:21:17:75:e9:75:06:cf:3d:fa:7f:65:3b:70:c2:6b:42:b9:
f8:5e:00:65:f4:f4:18:c3:ed:8b:52:21:cd:fa:65:e3:fb:75:
24:ac:5d:59:47:50:2c:73:19:f2:73:5f:54:1c:73:58:9e:e0:
90:0f:67:97:6e:5c:00:ae:c1:4c:63:85:4d:ba:1c:ae:17:ef:
cc:1b:da:34:9b:89:4e:ae:e8:51:c2:17:01:0e:cc:30:42:5b:
63:79:1b:86:2a:80:0a:b6:9e:6d:d1:fc:ad:82:2e:f8:e8:0f:
4e:5a:95:55:e3:7f:ef:0a:b2:5a:66:5d:71:7a:10:ba:cb:a5:
68:c3:89:ed:17:e7:82:4e:4d:58:fe:f3:e9:f2:d8:16:a8:b7:
14:3f:b8:e5:b4:30:ec:ac:5c:2d:f2:1a:52:fd:c4:22:9b:ba:
91:2c:a1:4d:48:7a:7b:a4:bb:df:63:ba:30:f6:94:c5:db:51:
b2:b8:cc:59:7b:76:d9:5a:05:e5:45:61:e5:ea:27:2e:7d:49:
ad:c9:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:56 2023 by rpki-client on console-ams.rpki-client.org