Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/ihSjVJ-XvkTPj6gd7htC8ZeF18s.roa
File: ihSjVJ-XvkTPj6gd7htC8ZeF18s.roa (raw, json)
Hash identifier: r5YWCBPAbfSd2fevCzINixRM2vUHC+DaLvqgBCd+d+8=
Subject key identifier: 8A:14:A3:54:9F:97:BE:44:CF:8F:A8:1D:EE:1B:42:F1:97:85:D7:CB
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 013F89F5
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/ihSjVJ-XvkTPj6gd7htC8ZeF18s.roa
Signing time: Sat 01 Jan 2022 07:59:34 +0000
ROA not before: Sat 01 Jan 2022 07:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35199
IP address blocks: 193.19.164.0/22 maxlen: 22
185.214.67.0/24 maxlen: 24
178.219.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20941301 (0x13f89f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jan 1 07:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a14a3549f97be44cf8fa81dee1b42f19785d7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:d3:cf:4e:98:57:7c:57:1b:32:a2:b7:6f:
13:df:10:9f:fc:a2:fc:20:2a:23:f7:c6:2f:be:b9:
af:09:98:20:1d:a9:ae:81:b9:ae:3f:bc:82:0a:99:
29:90:8e:25:e6:7f:47:b5:7e:d5:21:e2:0c:88:8b:
f2:f9:b6:9a:2a:c6:e2:73:39:34:27:67:84:37:0a:
4c:8d:ce:29:91:78:b8:15:6b:2e:2f:dd:e1:d0:e2:
3b:c6:56:79:05:d1:2c:b5:d3:75:eb:c3:d8:04:ac:
55:08:25:17:e9:1c:c3:92:f9:78:d8:c3:bd:d2:c5:
70:b7:a0:be:31:c9:b5:bf:66:2f:95:f4:f5:d7:6c:
d6:5b:62:51:a7:4a:41:a5:e6:3a:a0:b8:6c:aa:c0:
81:07:fe:6c:7a:63:ff:c1:39:c6:1a:0e:6a:55:13:
4e:ac:56:db:c4:7f:05:6e:cc:77:b1:9d:32:5c:ec:
ae:15:37:b5:3f:8e:8d:5c:77:90:ed:c5:4b:36:a7:
1a:5b:e1:ed:a5:2a:4d:21:ad:fb:d3:38:9b:30:86:
0f:c8:f9:bf:da:fb:4d:9e:25:5d:82:f6:d5:46:06:
cb:5e:ac:64:a3:b5:28:da:e4:1e:a6:72:a9:1f:34:
23:26:0b:48:a0:d3:88:45:be:a9:d3:7f:72:34:a5:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:A3:54:9F:97:BE:44:CF:8F:A8:1D:EE:1B:42:F1:97:85:D7:CB
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/ihSjVJ-XvkTPj6gd7htC8ZeF18s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.16.0/22
185.214.67.0/24
193.19.164.0/22
Signature Algorithm: sha256WithRSAEncryption
26:b0:63:f1:3b:4c:12:54:73:97:15:73:a2:9a:e6:02:0d:d4:
d9:32:db:c5:31:f2:e5:c7:02:17:f4:86:62:c2:24:f0:bf:8c:
81:02:70:f0:73:23:9e:80:ef:12:f7:f6:73:dd:ca:ff:eb:4b:
d5:18:27:2a:46:94:ea:9e:b4:79:49:42:68:76:7f:d7:f7:75:
f6:89:8e:9e:4b:e2:9a:65:9f:92:3b:29:b7:f1:77:ca:2c:50:
f3:7e:62:cb:89:dc:e2:59:e3:f2:ae:b1:cf:44:db:77:66:15:
bf:0d:a7:ea:86:c4:8d:02:d2:ef:73:4c:18:37:da:e7:86:96:
2f:bb:06:d8:b3:08:33:b8:a8:7c:44:7e:84:36:d9:49:a5:38:
e6:c0:a6:78:81:a2:a4:9c:b1:8e:63:34:dc:42:3f:a7:10:61:
f8:4d:34:6c:f2:51:e7:23:99:74:4b:94:3b:f4:39:f6:83:d1:
51:df:d2:0f:54:8e:36:d0:ff:24:22:57:d9:d6:c3:7f:f3:cf:
b7:60:6f:bc:4e:2a:59:eb:aa:01:39:5a:d6:9d:26:98:b7:b8:
be:dd:dc:8d:f3:bb:ac:7d:f3:fb:e1:ca:1b:4f:8e:6e:e9:8b:
df:f8:52:6d:c4:81:e4:30:23:85:2f:02:5e:59:09:3f:0a:e8:
ca:b7:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org