Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/i5Hbd8kg3qlCYGUfiRKSWvlwIWM.roa
File: i5Hbd8kg3qlCYGUfiRKSWvlwIWM.roa (raw, json)
Hash identifier: fgwBH6gXTzdcd0HfTyTu2eANJDzrx0m9bJuZU77qtOU=
Subject key identifier: 8B:91:DB:77:C9:20:DE:A9:42:60:65:1F:89:12:92:5A:F9:70:21:63
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 05DA8770
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/i5Hbd8kg3qlCYGUfiRKSWvlwIWM.roa
Signing time: Sat 01 Jan 2022 11:02:55 +0000
ROA not before: Sat 01 Jan 2022 11:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12222
IP address blocks: 80.67.64.0/24 maxlen: 24
80.67.65.0/24 maxlen: 24
80.67.70.0/24 maxlen: 24
88.221.208.0/24 maxlen: 24
80.67.73.0/24 maxlen: 24
88.221.209.0/24 maxlen: 24
2.22.60.0/24 maxlen: 24
2.16.37.0/24 maxlen: 24
2.16.36.0/24 maxlen: 24
2.22.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98207600 (0x5da8770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 11:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b91db77c920dea94260651f8912925af9702163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bf:6e:fa:5d:67:e7:05:17:da:64:b4:c7:6b:
e1:fe:07:12:01:92:3d:91:38:a8:28:b9:a6:d3:15:
a6:cc:de:22:f9:6f:b0:92:a6:d2:99:af:ac:59:a6:
dc:5b:a1:72:9d:9b:86:c6:93:be:4d:eb:a1:02:ad:
85:51:83:d8:fb:81:43:9f:98:06:03:b5:20:d4:93:
94:f3:87:ad:fe:5f:3d:da:8f:6f:63:57:8f:32:ef:
b7:70:18:a6:46:4f:98:85:04:e7:9e:e9:96:e9:32:
53:fd:b2:7c:0d:dc:4d:ec:b0:18:cd:d0:02:40:4e:
0b:63:53:68:73:fa:6e:3a:c9:9f:63:ec:49:bd:90:
67:84:d5:c5:ca:50:30:7a:8b:9b:c0:0b:db:41:6b:
fc:02:3c:95:ff:6e:fd:9c:b6:9a:a6:8e:2b:fd:33:
fc:fa:18:af:ec:9d:a4:51:ab:ea:f4:e5:ba:fb:66:
05:d0:4a:4b:05:33:ed:ba:ff:cf:8e:92:08:ff:f2:
d4:5f:c4:02:43:d5:87:24:b0:ab:0b:ff:18:fe:6b:
37:73:af:fa:b3:ce:0c:9d:da:83:43:15:ce:b9:fc:
47:ee:ab:fe:af:c4:15:f4:7d:32:84:cb:d0:9c:bd:
0c:73:49:05:fa:41:27:38:11:7d:e5:94:d0:14:1e:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:91:DB:77:C9:20:DE:A9:42:60:65:1F:89:12:92:5A:F9:70:21:63
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/i5Hbd8kg3qlCYGUfiRKSWvlwIWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.36.0/23
2.22.60.0/24
2.22.226.0/24
80.67.64.0/23
80.67.70.0/24
80.67.73.0/24
88.221.208.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:a9:d5:64:f9:51:95:60:63:a3:a7:de:d7:dd:b0:f5:6f:84:
43:38:8f:1e:f9:e5:21:f5:20:89:35:eb:94:b2:f8:87:2e:fb:
ae:0b:2f:07:27:29:4f:26:7c:f6:9b:df:75:be:c7:f0:79:91:
ff:83:7c:e5:fa:6e:4f:12:e0:d9:0f:7b:0d:0d:5b:ce:4f:4e:
a7:93:dd:b5:2d:f2:0e:ba:78:55:e0:23:59:99:09:c1:34:c5:
b0:5b:bd:36:c2:e0:84:96:5e:08:43:bc:4e:7b:58:b7:83:a9:
59:78:3a:ec:8f:d7:2b:62:fb:9b:52:0b:75:bb:e2:e5:95:f1:
68:89:b0:88:f0:48:3b:69:48:15:0a:96:be:4d:4f:3f:d6:13:
fc:8b:d4:f3:71:13:df:b8:bd:5d:c4:af:d6:09:10:f5:72:01:
49:6b:94:e0:1f:b5:43:42:0a:4b:15:fd:2b:20:3d:e5:9a:ee:
72:7c:c2:15:01:18:7d:54:fc:5f:bc:db:3e:ef:63:e0:11:64:
a2:f5:66:92:db:ac:f2:96:5f:31:36:1b:6a:44:22:22:03:92:
73:f2:89:6b:74:9b:20:0f:b1:ff:e4:30:ef:72:e4:7c:8d:56:
de:52:73:91:b3:7b:5f:0a:9d:b2:36:fb:ba:c7:84:02:7e:bb:
33:48:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:23 2023 by rpki-client on console-ams.rpki-client.org