Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/0bFpvXESZrzyFrzqMoyxa6JNcRE.roa
File: 0bFpvXESZrzyFrzqMoyxa6JNcRE.roa (raw, json)
Hash identifier: YFa5jPDHHQqUhbpVudYIjew/CBjfiPNQ0ywMBqI5lHI=
Subject key identifier: D1:B1:69:BD:71:12:66:BC:F2:16:BC:EA:32:8C:B1:6B:A2:4D:71:11
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 02925101
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/0bFpvXESZrzyFrzqMoyxa6JNcRE.roa
Signing time: Sat 16 Apr 2022 07:59:38 +0000
ROA not before: Sat 16 Apr 2022 07:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25534
IP address blocks: 81.17.164.0/22 maxlen: 24
81.17.160.0/22 maxlen: 24
185.146.16.0/22 maxlen: 24
81.17.160.0/20 maxlen: 24
81.17.168.0/22 maxlen: 24
81.17.172.0/22 maxlen: 24
217.15.176.0/20 maxlen: 24
217.15.176.0/22 maxlen: 24
217.15.180.0/22 maxlen: 24
217.15.184.0/22 maxlen: 24
217.15.188.0/22 maxlen: 24
2a00:1a08::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43143425 (0x2925101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Apr 16 07:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1b169bd711266bcf216bcea328cb16ba24d7111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:c5:2b:ed:4c:38:7b:a3:0b:93:11:37:45:
a9:c6:b6:39:02:eb:be:32:e5:e8:48:bb:51:c8:5d:
a7:8b:84:37:5f:1c:f6:e6:f4:32:ca:09:b7:f9:a3:
f8:75:42:76:e6:30:a5:a9:71:1d:79:4e:40:76:42:
e1:ae:3d:a5:7c:44:af:3a:72:bd:a3:44:29:d7:fc:
d1:5a:8d:74:fd:5e:b3:67:98:52:94:c9:60:9e:1c:
61:0c:fc:2d:a5:5c:74:3e:fb:56:14:bf:22:6a:ac:
a4:20:75:43:26:c3:b3:3b:c7:4a:01:41:83:39:5d:
c7:69:15:7c:54:6b:34:07:c3:9c:f4:43:6c:a0:e8:
6c:5c:36:5f:1e:21:7b:e9:c4:bf:d5:7e:15:31:cb:
39:f9:c6:c8:6e:2c:32:c0:f2:ee:a8:0e:c9:ab:32:
47:47:54:b8:12:29:4f:04:27:8b:3d:5a:90:95:09:
48:21:5e:87:8c:17:74:83:6b:a4:61:52:3b:1e:94:
8e:cc:22:91:a4:b1:37:5e:63:9e:e7:d4:c2:86:20:
1c:64:05:14:77:b8:95:26:12:c0:92:32:ca:ec:6e:
2c:b8:f4:d2:77:d3:3e:69:92:a5:ed:74:e5:f0:2d:
e7:5b:9b:7d:ed:0e:11:fb:ce:cb:9c:ce:14:c5:7b:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B1:69:BD:71:12:66:BC:F2:16:BC:EA:32:8C:B1:6B:A2:4D:71:11
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/0bFpvXESZrzyFrzqMoyxa6JNcRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
185.146.16.0/22
217.15.176.0/20
IPv6:
2a00:1a08::/32
Signature Algorithm: sha256WithRSAEncryption
65:e4:ae:25:c4:32:c9:4b:93:e6:2f:72:7b:07:bf:2f:bc:7e:
53:8d:47:00:68:4f:29:b5:b8:e8:99:7d:cc:fd:3f:21:6c:3f:
dd:13:be:65:30:45:63:37:ed:db:20:4b:82:43:30:6c:4e:2d:
e9:aa:a8:23:b0:92:7d:c8:3c:c5:e6:fb:3a:ad:9d:84:97:13:
b5:d3:21:51:10:4c:8b:a7:67:bd:d5:d5:15:77:52:86:9d:be:
1a:6c:8b:7f:42:a6:18:c8:18:8d:74:2b:02:62:ed:7b:be:2f:
ba:88:a2:36:83:cd:14:8b:8e:0e:84:95:6e:d5:10:5d:b0:1f:
bb:d5:6d:53:fb:14:1b:67:0a:f8:75:1b:f8:39:c2:d8:a4:a5:
78:40:4c:36:d7:23:60:7f:7f:66:55:7f:16:e0:f4:f0:a6:bf:
d2:21:63:03:e2:85:00:4c:20:61:02:3e:dc:34:6e:fc:87:57:
93:cb:3e:97:01:9b:4d:70:ad:f3:7b:d7:34:d1:28:9c:fc:66:
47:8b:a4:a7:4e:21:9d:38:59:84:85:67:ec:f4:1e:fe:fb:d1:
ab:dc:78:73:a0:d8:72:63:e9:6d:07:f3:4b:64:66:a4:0e:a0:
e9:9b:00:a5:70:2d:79:9e:77:6a:91:69:b7:8b:ff:c2:2f:db:
40:c2:05:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:43 2023 by rpki-client on console-ams.rpki-client.org