Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/18d7QIIRovQ71fYwBHP1MClq2F0.roa
File: 18d7QIIRovQ71fYwBHP1MClq2F0.roa (raw, json)
Hash identifier: gDQXrwUH3hKRYMfZcKN3qM6977/17BaZrohAed/x+cM=
Subject key identifier: D7:C7:7B:40:82:11:A2:F4:3B:D5:F6:30:04:73:F5:30:29:6A:D8:5D
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018484A74FF2FF6BD0468AA13653956C913F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/18d7QIIRovQ71fYwBHP1MClq2F0.roa
Signing time: Thu 17 Nov 2022 08:14:28 +0000
ROA not before: Thu 17 Nov 2022 08:14:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.95.102.0/23 maxlen: 24
185.95.101.0/24 maxlen: 24
185.76.240.0/23 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.97.3.0/24 maxlen: 24
185.97.1.0/24 maxlen: 24
185.68.246.0/24 maxlen: 24
185.89.43.0/24 maxlen: 24
185.89.42.0/24 maxlen: 24
185.68.247.0/24 maxlen: 24
194.104.10.0/24 maxlen: 24
185.68.184.0/24 maxlen: 24
185.75.134.0/24 maxlen: 24
5.181.169.0/24 maxlen: 24
5.181.168.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
213.232.122.0/24 maxlen: 24
213.232.120.0/24 maxlen: 24
83.171.226.0/24 maxlen: 24
83.171.224.0/24 maxlen: 24
83.171.227.0/24 maxlen: 24
185.96.38.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
141.98.87.0/24 maxlen: 24
185.81.172.0/23 maxlen: 24
5.183.255.0/24 maxlen: 24
185.88.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:a7:4f:f2:ff:6b:d0:46:8a:a1:36:53:95:6c:91:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Nov 17 08:14:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7c77b408211a2f43bd5f6300473f530296ad85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:0d:77:ca:e5:7c:ab:a7:d0:58:db:a1:7c:
4e:e0:63:b7:71:46:b7:fc:cb:cc:f4:b1:0d:18:3a:
88:21:70:0a:8b:82:4f:31:5a:13:29:ee:12:6b:ae:
57:83:ae:e8:1c:77:16:0a:82:0b:a6:85:76:5a:37:
a5:7e:d2:6c:d3:63:b6:85:3b:96:78:2d:9d:56:d4:
a1:aa:ab:c0:14:41:ac:24:46:66:88:55:f2:52:a1:
e3:ba:3b:08:ea:7f:66:a2:99:50:77:dc:99:c8:51:
04:32:1b:9c:4d:10:4a:04:8d:a8:3d:53:4e:91:b5:
05:db:6e:a2:ca:88:db:fb:0d:16:78:e2:3b:d3:e7:
87:65:b6:75:a2:a6:db:57:f6:3e:79:70:6c:f3:d3:
e9:ec:09:69:2d:85:52:19:a0:48:83:7f:81:90:59:
df:3e:4d:e1:f2:8b:23:4a:fd:f3:25:13:40:85:56:
d8:9b:51:55:3e:bb:70:f5:c4:d6:a0:ef:98:72:dc:
43:01:ca:55:bf:a3:8d:f2:4b:8f:0b:1e:dc:14:e4:
6a:c3:09:f7:3d:e5:2e:51:1b:38:5b:5d:c4:e7:0a:
4d:d0:9f:41:3a:51:4a:10:a8:5f:e7:c6:ae:67:07:
57:27:9d:e6:69:c9:18:32:6e:ed:34:16:6e:84:71:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C7:7B:40:82:11:A2:F4:3B:D5:F6:30:04:73:F5:30:29:6A:D8:5D
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/18d7QIIRovQ71fYwBHP1MClq2F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.168.0/23
5.183.255.0/24
83.171.224.0/24
83.171.226.0/23
141.98.87.0/24
185.68.184.0/24
185.68.246.0/23
185.75.134.0/24
185.76.240.0/23
185.81.172.0-185.81.174.255
185.81.184.0/24
185.81.187.0/24
185.88.36.0/24
185.89.42.0/23
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
185.96.38.0/24
185.96.80.0/24
185.97.1.0/24
185.97.3.0/24
194.104.10.0/24
213.232.120.0/24
213.232.122.0/24
Signature Algorithm: sha256WithRSAEncryption
17:af:52:80:b8:04:37:bb:b3:47:25:6a:8a:f3:3a:07:00:3c:
16:99:6f:bb:51:78:4f:87:dd:79:e4:9f:fb:2d:84:10:f7:27:
c3:28:10:04:b3:3a:fd:b2:39:84:37:06:fc:7a:27:bf:b6:18:
2b:d0:e7:fd:85:66:9e:a7:4d:07:20:8f:c4:36:71:c6:8a:ef:
84:ca:a5:33:cf:fa:ca:fd:e1:90:e0:cb:64:a7:e0:04:1c:8c:
f8:89:f6:e7:29:40:31:26:22:24:fc:cc:e6:c1:95:67:2f:b3:
3c:49:70:d7:f4:80:93:a6:af:de:d0:60:97:ca:e2:f9:31:f1:
84:6b:0c:a7:c1:dc:9c:15:4e:d5:4d:c6:2e:52:10:e6:9f:ad:
d7:7b:55:3b:be:87:d0:c9:e0:56:6c:fc:7a:91:07:d9:ca:14:
79:b5:53:d0:2f:b3:11:81:6b:16:85:c9:83:af:ae:59:d9:5f:
e2:8b:8e:0e:8a:ee:8f:4c:70:ac:b9:1d:36:9d:d7:e8:83:2a:
1b:2a:9e:09:e0:c6:87:f2:e1:73:31:ab:7f:ce:6e:68:2e:c6:
d6:61:35:44:01:d1:ed:da:92:ba:53:70:9e:10:0d:52:c0:f1:
86:65:f0:e8:3c:18:33:ae:7c:98:bc:7d:39:1f:42:f8:07:2a:
07:71:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:17 2023 by rpki-client on console-fra.rpki-client.org