Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/v3pW1xCx68g7t9-YXMvH0ZGamD8.roa
File: v3pW1xCx68g7t9-YXMvH0ZGamD8.roa (raw, json)
Hash identifier: wzOwZM7GYmrwg+EOyzTNcMCUYgEkQYo/Ll4UO5VBvJw=
Subject key identifier: BF:7A:56:D7:10:B1:EB:C8:3B:B7:DF:98:5C:CB:C7:D1:91:9A:98:3F
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 3C42E8
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/v3pW1xCx68g7t9-YXMvH0ZGamD8.roa
Signing time: Sat 26 Mar 2022 11:30:56 +0000
ROA not before: Sat 26 Mar 2022 11:30:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51407
IP address blocks: 82.163.58.0/23 maxlen: 23
82.163.56.0/23 maxlen: 23
82.163.56.0/21 maxlen: 21
82.163.60.0/23 maxlen: 23
82.163.64.0/21 maxlen: 21
82.163.64.0/23 maxlen: 23
82.163.62.0/23 maxlen: 23
82.163.70.0/23 maxlen: 23
82.163.68.0/23 maxlen: 23
82.163.66.0/23 maxlen: 23
82.163.170.0/23 maxlen: 23
82.163.168.0/21 maxlen: 21
82.163.168.0/23 maxlen: 23
82.163.172.0/23 maxlen: 23
82.163.174.0/23 maxlen: 23
82.163.98.0/23 maxlen: 23
82.163.96.0/23 maxlen: 23
82.163.96.0/20 maxlen: 20
82.163.100.0/23 maxlen: 23
82.163.104.0/23 maxlen: 23
82.163.102.0/23 maxlen: 23
82.163.110.0/23 maxlen: 23
82.163.108.0/23 maxlen: 23
82.163.106.0/23 maxlen: 23
78.143.226.0/23 maxlen: 23
78.143.224.0/20 maxlen: 20
78.143.224.0/23 maxlen: 23
78.143.228.0/23 maxlen: 23
78.143.232.0/23 maxlen: 23
78.143.230.0/23 maxlen: 23
78.143.238.0/23 maxlen: 23
78.143.236.0/23 maxlen: 23
78.143.234.0/23 maxlen: 23
82.163.226.0/23 maxlen: 23
82.163.224.0/21 maxlen: 21
82.163.224.0/23 maxlen: 23
82.163.230.0/23 maxlen: 23
82.163.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3949288 (0x3c42e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 26 11:30:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf7a56d710b1ebc83bb7df985ccbc7d1919a983f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:18:b6:61:a9:c5:d9:ac:c6:c8:95:be:3c:
93:e7:f9:c7:be:7c:f4:fd:60:ea:b7:d7:a7:6f:bb:
d1:7a:6e:4a:b8:ac:c6:b4:e7:6f:62:1c:8c:a0:b7:
3e:f1:35:f8:2c:cb:21:6c:86:e8:3b:d4:8e:d5:5a:
f3:75:57:2f:f4:d6:ea:e3:71:da:f2:6d:0e:11:a7:
12:5c:71:02:31:e4:5c:3e:db:b1:fd:3c:c0:1a:e7:
33:45:c6:ce:8e:c4:2b:67:b4:53:67:b5:92:f0:ae:
21:d3:ae:96:f9:a2:62:82:82:c6:78:af:2c:37:52:
fe:c1:43:1f:f6:54:c6:f6:f9:63:86:7b:f2:46:63:
1f:37:bb:24:43:f0:9e:7e:a8:5f:46:e0:fe:3f:2a:
c2:e8:0a:c1:18:96:37:41:13:e3:a2:71:eb:da:e6:
a0:5e:03:fd:71:db:f3:c4:ed:ca:3b:f0:64:70:72:
4b:fc:91:d3:ae:75:d5:0f:6c:87:c2:be:2c:75:f4:
aa:6a:14:ff:40:23:84:fd:b6:aa:01:0e:72:6f:7c:
9f:01:f6:45:8b:63:41:52:2a:49:a3:3e:42:69:a6:
0b:ab:bf:ec:64:a8:a8:7b:90:a0:c0:9b:0c:40:57:
29:fb:22:55:fb:e2:f3:e6:18:a7:73:53:f2:f7:aa:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:56:D7:10:B1:EB:C8:3B:B7:DF:98:5C:CB:C7:D1:91:9A:98:3F
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/v3pW1xCx68g7t9-YXMvH0ZGamD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.224.0/20
82.163.56.0-82.163.71.255
82.163.96.0/20
82.163.168.0/21
82.163.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:89:3d:05:c0:a6:15:e8:df:b1:3d:35:bf:c5:74:05:1d:13:
a6:19:96:3c:cf:d6:b8:8d:cf:32:de:ea:ac:4c:cc:44:fa:5a:
d3:94:5d:c7:1a:9c:9d:21:70:26:a0:b4:29:16:57:18:34:8e:
9a:d6:54:09:65:57:09:51:c7:db:8d:3d:14:44:20:a0:3d:65:
db:77:b4:a7:78:d5:55:8e:f5:d8:db:2e:bd:0a:df:1c:8b:88:
d5:55:21:c2:fd:6b:84:d2:c9:fb:3a:f2:c9:f2:3f:a7:7f:7b:
db:4d:b2:51:69:fc:04:c9:f8:6e:12:28:c8:30:c1:44:be:7e:
dd:e2:07:af:25:54:7b:9f:97:fe:15:28:90:85:62:6b:5f:c0:
a0:97:f4:4d:b2:65:aa:98:0f:ce:3d:ae:f2:13:b1:18:80:d9:
1b:33:01:d4:95:63:b6:95:35:9e:25:0e:99:b9:cd:d8:f5:0b:
df:dd:30:a3:83:88:91:9d:16:d6:9d:7d:ce:4f:ac:c2:f5:f5:
c5:26:5f:4f:a6:07:34:63:cc:14:aa:f8:db:84:20:5e:c4:90:
7c:e0:ab:59:bd:47:bd:f0:a6:90:b5:e7:f6:0c:0e:c5:c0:a4:
0d:6a:27:ef:7a:8e:1f:40:3f:e4:fd:4c:dc:9d:40:19:5c:5b:
ca:f0:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org