Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/S8fP2b8-PK1ISQKiI31SFnRWT30.roa
File: S8fP2b8-PK1ISQKiI31SFnRWT30.roa (raw, json)
Hash identifier: jcQM+w7PBqb3vmnL44YwACz94a2HxQfGoA1ggfK2VmY=
Subject key identifier: 4B:C7:CF:D9:BF:3E:3C:AD:48:49:02:A2:23:7D:52:16:74:56:4F:7D
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 05E01E48
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/S8fP2b8-PK1ISQKiI31SFnRWT30.roa
Signing time: Sat 01 Jan 2022 11:02:59 +0000
ROA not before: Sat 01 Jan 2022 11:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34164
IP address blocks: 92.122.120.0/23 maxlen: 23
95.101.12.0/24 maxlen: 24
2.21.237.0/24 maxlen: 24
2.21.236.0/24 maxlen: 24
2.16.49.0/24 maxlen: 24
92.122.191.0/24 maxlen: 24
92.122.204.0/23 maxlen: 23
193.108.152.0/24 maxlen: 24
2.20.48.0/24 maxlen: 24
2.18.25.0/24 maxlen: 24
95.101.121.0/24 maxlen: 24
195.245.126.0/24 maxlen: 24
92.122.152.0/24 maxlen: 24
2a02:26f0:5400::/48 maxlen: 48
2a02:26f0:33::/48 maxlen: 48
2a02:26f0:1d::/48 maxlen: 48
2a02:26f0:36::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98573896 (0x5e01e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 11:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bc7cfd9bf3e3cad484902a2237d521674564f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:43:28:76:5a:c2:4e:a7:ba:67:15:61:6c:
78:34:78:cd:ed:1f:80:48:ad:b8:14:e8:cd:c4:ef:
1f:9d:5b:6c:07:12:dd:1e:90:61:fe:4d:03:64:27:
a7:46:31:95:cd:ba:ba:5b:92:86:5a:5b:24:cb:09:
5a:e2:7a:db:3b:0e:28:d0:ca:af:2b:b4:8f:e2:39:
a1:45:24:ae:bb:f5:0e:da:93:6a:67:0a:e4:2c:f2:
47:1c:38:ce:b4:60:a5:99:79:65:e3:df:d2:f5:3f:
eb:52:f0:00:4e:70:d1:c0:db:63:27:99:33:97:24:
73:af:fe:54:3e:ef:5b:4c:b5:90:c2:8f:63:3c:0b:
c0:e2:a4:86:83:44:da:2e:f6:70:16:a7:77:43:30:
26:13:4c:68:f9:5b:a4:fd:31:a4:ea:74:ef:fb:80:
bb:45:39:35:41:10:68:a5:81:8c:3a:cf:27:42:1d:
04:54:86:7c:07:9a:fe:2c:12:76:5d:c6:22:4c:ce:
3a:dc:af:eb:46:51:16:7b:b4:64:cb:61:5d:f8:25:
33:6b:fb:e4:e2:0b:db:9e:08:77:a0:6e:80:95:48:
d2:92:7c:16:59:a2:29:be:30:57:02:80:e7:59:6f:
46:1e:99:c7:59:af:fe:c9:b4:52:37:47:0f:9d:a0:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:CF:D9:BF:3E:3C:AD:48:49:02:A2:23:7D:52:16:74:56:4F:7D
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/S8fP2b8-PK1ISQKiI31SFnRWT30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.49.0/24
2.18.25.0/24
2.20.48.0/24
2.21.236.0/23
92.122.120.0/23
92.122.152.0/24
92.122.191.0/24
92.122.204.0/23
95.101.12.0/24
95.101.121.0/24
193.108.152.0/24
195.245.126.0/24
IPv6:
2a02:26f0:1d::/48
2a02:26f0:33::/48
2a02:26f0:36::/48
2a02:26f0:5400::/48
Signature Algorithm: sha256WithRSAEncryption
8b:2b:86:d7:b0:17:7b:ab:3e:3a:47:33:54:cf:dc:74:8c:66:
23:74:0e:6b:98:a6:10:78:ae:67:11:4c:30:52:3b:a3:95:de:
76:a5:a5:3f:b4:d0:93:1d:7d:d3:ab:34:d1:8c:da:79:de:31:
7d:72:8b:07:74:8e:98:9e:ef:a2:b0:65:e4:5b:93:3b:e7:b0:
ca:cc:a5:cb:26:4e:d2:13:41:82:2b:71:9f:9c:16:5a:0f:d4:
93:1f:e1:f5:6a:16:cb:41:bd:74:20:35:5d:08:27:8c:27:83:
5a:16:d9:53:1e:01:5d:23:bd:96:1b:1a:93:3d:63:d2:7d:d4:
c1:41:86:b9:70:48:71:73:80:80:8b:9f:2e:9d:88:65:79:7f:
7d:8c:24:47:4b:95:ae:dd:35:9c:9a:b9:1a:28:22:af:3d:59:
f9:13:36:74:f3:7a:d2:df:37:ef:c5:e9:3e:d9:95:26:9e:f9:
01:da:87:f9:b7:49:36:ea:6f:ee:26:c4:b0:3c:ab:93:3f:cf:
51:25:65:04:1e:3d:8b:42:9a:f9:c7:e3:2f:82:c7:0c:22:ce:
67:31:c7:da:28:25:50:b3:0a:35:61:08:6e:73:2e:7d:22:df:
bc:3d:89:cf:a8:75:d2:c6:25:4a:9c:66:c9:3e:aa:e8:11:0e:
70:e0:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:41 2023 by rpki-client on console-fra.rpki-client.org