Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/F9IbTPtg3jW9OJB4_XxEGDXTi-k.roa
File: F9IbTPtg3jW9OJB4_XxEGDXTi-k.roa (raw, json)
Hash identifier: WNefBQHijdRLODjcHqTi8bIBmQ2icrw3mUxpCxu9JkQ=
Subject key identifier: 17:D2:1B:4C:FB:60:DE:35:BD:38:90:78:FD:7C:44:18:35:D3:8B:E9
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01828CF06827C65CF0F0AB8C0648D76245CD
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/F9IbTPtg3jW9OJB4_XxEGDXTi-k.roa
Signing time: Thu 11 Aug 2022 12:45:41 +0000
ROA not before: Thu 11 Aug 2022 12:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49074
IP address blocks: 193.242.196.0/22 maxlen: 22
109.166.32.0/22 maxlen: 22
91.228.140.0/22 maxlen: 22
194.40.204.0/22 maxlen: 22
91.234.56.0/22 maxlen: 22
151.248.64.0/24 maxlen: 24
151.248.65.0/24 maxlen: 24
151.248.66.0/24 maxlen: 24
151.248.67.0/24 maxlen: 24
151.248.95.0/24 maxlen: 24
176.113.104.0/22 maxlen: 22
176.113.108.0/22 maxlen: 22
2a04:2043::/32 maxlen: 32
2a04:2047::/32 maxlen: 32
2a04:2041::/32 maxlen: 32
2a04:2045::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:f0:68:27:c6:5c:f0:f0:ab:8c:06:48:d7:62:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Aug 11 12:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d21b4cfb60de35bd389078fd7c441835d38be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:99:6e:3a:0c:cc:26:35:8a:62:66:90:0e:
1d:f9:14:e9:ac:7f:27:6a:b7:fb:13:64:ce:0f:ce:
62:3d:36:bc:78:55:e6:b5:05:61:52:53:71:75:69:
33:59:51:70:4f:18:95:74:33:f1:f4:23:22:66:91:
8d:be:92:4c:07:3a:36:07:d2:d8:36:6a:a8:6a:a5:
d7:32:d6:43:d0:b8:f6:90:e4:ce:66:89:a6:d8:3a:
e5:cf:b0:40:52:de:37:d4:f7:1d:05:6b:05:52:0e:
df:d0:03:e4:5e:a7:fd:e1:59:ab:2a:c8:ba:0f:62:
36:c3:c8:8d:2a:40:14:6e:1c:64:eb:ad:15:61:fc:
d2:fd:c5:fe:32:bb:12:fd:0d:cc:43:cc:a5:e2:68:
3d:60:fc:c0:ab:3c:ae:a2:eb:9b:0f:51:c4:1e:7d:
0c:34:d2:a8:65:af:6e:a2:2b:4f:11:cc:c5:a6:0e:
38:7f:1a:14:88:69:fe:dd:a6:88:63:e0:77:d6:fb:
a3:84:bd:a8:1e:5d:58:72:dd:b4:8c:45:9c:79:73:
3b:5c:78:d8:02:f6:65:b1:d9:ad:3d:e0:e4:3e:5e:
44:c4:70:f9:14:77:b5:a5:5b:40:dd:78:73:06:12:
93:5a:b7:d8:c7:9b:73:ef:9a:8a:58:f8:e9:cd:74:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D2:1B:4C:FB:60:DE:35:BD:38:90:78:FD:7C:44:18:35:D3:8B:E9
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/F9IbTPtg3jW9OJB4_XxEGDXTi-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.140.0/22
91.234.56.0/22
109.166.32.0/22
151.248.64.0/22
151.248.95.0/24
176.113.104.0/21
193.242.196.0/22
194.40.204.0/22
IPv6:
2a04:2041::/32
2a04:2043::/32
2a04:2045::/32
2a04:2047::/32
Signature Algorithm: sha256WithRSAEncryption
1b:68:8e:a3:4c:c8:be:1d:69:eb:10:2d:36:5a:96:28:fa:99:
8b:38:0a:7f:82:67:d4:7e:85:fb:31:fc:78:81:50:c3:60:77:
4b:a8:0e:39:56:1e:39:a4:18:69:93:d2:41:43:de:40:71:64:
a2:79:4f:7b:37:dd:77:c4:6d:79:cc:a8:ff:00:18:91:45:b3:
bc:80:3c:41:b3:27:73:f5:1b:38:d5:00:f6:b6:e6:4d:ff:11:
80:cc:cf:f3:75:02:09:26:58:cc:c3:c0:04:f3:bd:5b:ae:47:
b4:06:6a:d6:28:dc:a7:39:cc:95:1d:35:c5:2f:f8:a2:a4:83:
91:46:c6:13:58:52:64:d7:11:af:03:21:1d:ca:88:64:da:72:
6b:ec:db:8c:60:25:a7:bf:bc:f8:5c:88:db:40:0a:f9:89:6f:
15:d3:95:d5:0d:d0:3f:03:04:64:07:cd:7e:79:5d:50:fe:62:
08:cf:bf:0c:ef:bf:10:00:13:78:96:1f:7f:ba:aa:c9:59:57:
42:af:94:fe:a6:24:8a:c8:0d:2f:36:85:7a:40:c7:11:08:e0:
49:d7:2e:55:ae:f2:ce:77:2b:69:3f:14:5d:91:7f:35:e0:d0:
a5:77:5e:2e:8e:ac:b9:86:82:d0:85:f9:b6:84:f4:88:da:eb:
fd:a5:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org