Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/a-saSFqFyI0Q04UDtbaMvdJ3uBQ.roa
File: a-saSFqFyI0Q04UDtbaMvdJ3uBQ.roa (raw, json)
Hash identifier: Ap4bnf1rTKWI6yqkLTylAoOKx7pNW+VRdJBg0PtVgg4=
Subject key identifier: 6B:EB:1A:48:5A:85:C8:8D:10:D3:85:03:B5:B6:8C:BD:D2:77:B8:14
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A84D61D
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/a-saSFqFyI0Q04UDtbaMvdJ3uBQ.roa
Signing time: Sat 01 Jan 2022 04:52:06 +0000
ROA not before: Sat 01 Jan 2022 04:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199715
IP address blocks: 82.177.240.0/23 maxlen: 23
82.177.209.0/24 maxlen: 24
88.220.108.0/22 maxlen: 22
88.220.136.0/23 maxlen: 23
88.220.56.0/24 maxlen: 24
82.177.25.0/24 maxlen: 24
82.177.26.0/24 maxlen: 24
82.177.28.0/23 maxlen: 23
82.177.40.0/24 maxlen: 24
82.177.38.0/23 maxlen: 23
81.15.131.0/24 maxlen: 24
81.15.134.0/24 maxlen: 24
82.177.62.0/23 maxlen: 23
195.136.208.0/21 maxlen: 21
82.177.60.0/23 maxlen: 23
88.220.162.0/23 maxlen: 23
82.177.143.0/24 maxlen: 24
81.15.220.0/23 maxlen: 23
81.15.231.0/24 maxlen: 24
81.15.228.0/23 maxlen: 23
81.15.247.0/24 maxlen: 24
81.15.252.0/24 maxlen: 24
81.15.253.0/24 maxlen: 24
195.136.216.0/21 maxlen: 21
81.15.162.0/23 maxlen: 23
81.15.163.0/24 maxlen: 24
81.15.165.0/24 maxlen: 24
81.15.166.0/24 maxlen: 24
81.15.162.0/24 maxlen: 24
82.177.26.74/32 maxlen: 32
81.15.177.0/24 maxlen: 24
81.15.179.0/24 maxlen: 24
81.15.176.0/24 maxlen: 24
82.177.104.0/22 maxlen: 22
82.177.108.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981784093 (0x3a84d61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6beb1a485a85c88d10d38503b5b68cbdd277b814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:71:21:58:13:2a:ba:a8:42:4b:8c:9a:68:
fa:b1:89:49:01:82:ae:d9:de:40:1a:c5:3e:3a:e6:
0f:c3:cf:e5:52:0f:8b:b5:11:74:fc:b6:2d:a6:3f:
54:34:1b:9e:75:1f:85:ff:5e:52:17:b1:77:49:a9:
36:1f:16:cb:d3:28:71:5b:00:81:05:d9:48:1b:fa:
b1:7f:3b:e2:cb:ca:b1:b2:29:07:87:e8:6d:ec:6e:
f7:6f:da:dc:53:80:42:cf:79:13:c7:d2:d4:d8:9f:
60:a4:9f:92:8b:52:44:a4:9b:ff:85:69:6d:af:af:
ca:46:4e:b1:2e:af:8d:10:3c:b4:3d:f9:75:02:4e:
f3:db:49:2b:c6:3d:78:ae:1c:18:49:36:b9:43:29:
bd:96:8a:54:ca:b3:46:4b:93:2e:a7:42:cb:79:51:
9d:f4:37:5d:90:e2:81:45:84:6e:0c:76:b0:db:9f:
45:42:f5:38:8f:68:1a:12:a6:4a:33:a6:4b:f2:b2:
f6:38:6e:2b:5a:10:36:cf:76:54:6b:3f:cb:14:ae:
77:75:ed:52:b3:ad:97:8c:5f:f6:87:6b:66:4c:34:
11:58:a7:03:06:4d:57:f5:d8:c0:c5:35:38:fb:02:
37:4d:af:24:6c:94:a9:d1:7b:a8:1c:74:a0:f9:90:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:1A:48:5A:85:C8:8D:10:D3:85:03:B5:B6:8C:BD:D2:77:B8:14
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/a-saSFqFyI0Q04UDtbaMvdJ3uBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.131.0/24
81.15.134.0/24
81.15.162.0/23
81.15.165.0-81.15.166.255
81.15.176.0/23
81.15.179.0/24
81.15.220.0/23
81.15.228.0/23
81.15.231.0/24
81.15.247.0/24
81.15.252.0/23
82.177.25.0-82.177.26.255
82.177.28.0/23
82.177.38.0-82.177.40.255
82.177.60.0/22
82.177.104.0-82.177.109.255
82.177.143.0/24
82.177.209.0/24
82.177.240.0/23
88.220.56.0/24
88.220.108.0/22
88.220.136.0/23
88.220.162.0/23
195.136.208.0/20
Signature Algorithm: sha256WithRSAEncryption
86:14:2e:b4:6b:88:d3:4d:14:e6:93:e0:71:20:e2:26:ce:28:
7c:f3:8b:d3:05:68:e6:de:74:51:be:d4:08:72:4a:18:77:fd:
79:6b:c2:3b:81:bd:13:92:f7:90:cf:0b:26:91:d0:18:cc:e4:
67:84:97:fc:bb:67:ba:5f:91:d9:48:6e:5c:9e:6d:7d:b6:c9:
bf:d8:90:8e:bd:e9:8b:4a:24:b7:a8:8d:c8:ca:25:e9:57:5d:
77:55:74:a9:26:ab:72:c4:34:34:b8:8f:89:ad:88:70:e4:c8:
0a:c9:cc:aa:12:0c:4c:96:16:c9:30:7d:24:a5:49:13:51:98:
9f:a9:c5:6d:48:4e:f6:30:f8:a8:9a:98:86:8b:0e:f5:0d:c5:
6d:1b:5e:ce:18:a6:3f:2f:03:5e:c2:39:6c:87:97:9f:df:bc:
92:cc:21:e4:dc:7d:ca:fe:00:e0:0a:3b:15:5c:4e:a2:a2:07:
5a:0c:91:92:5d:79:59:28:46:fd:a0:16:06:5e:93:64:b6:65:
68:2a:59:0c:b2:f0:88:06:7f:7b:0e:ad:05:ee:e3:68:06:65:
23:22:4b:85:b6:14:be:67:38:c0:65:fc:ed:92:90:df:eb:1d:
ef:ae:64:58:28:39:0b:31:18:65:ba:66:4f:f8:b3:de:af:eb:
7a:c8:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org