Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/x8DBL-MtBKapxawByIDGpuwNSVY.roa
File: x8DBL-MtBKapxawByIDGpuwNSVY.roa (raw, json)
Hash identifier: I2aXXI/XeRQgK6N+TOYHT7TSZ6AFJeOl8sBczPa++7o=
Subject key identifier: C7:C0:C1:2F:E3:2D:04:A6:A9:C5:AC:01:C8:80:C6:A6:EC:0D:49:56
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 0184A541137648B0DB2671661FC1260E6858
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/x8DBL-MtBKapxawByIDGpuwNSVY.roa
Signing time: Wed 23 Nov 2022 16:10:16 +0000
ROA not before: Wed 23 Nov 2022 16:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48101
IP address blocks: 134.19.192.0/22 maxlen: 22
134.19.196.0/22 maxlen: 23
185.122.192.0/22 maxlen: 22
185.16.160.0/22 maxlen: 24
98.96.160.0/20 maxlen: 23
134.65.128.0/21 maxlen: 21
134.65.136.0/22 maxlen: 22
91.228.232.0/23 maxlen: 24
134.65.144.0/22 maxlen: 22
134.65.140.0/22 maxlen: 22
91.228.234.0/24 maxlen: 24
134.65.148.0/22 maxlen: 22
199.15.232.0/22 maxlen: 22
134.65.152.0/21 maxlen: 21
37.25.44.0/24 maxlen: 24
199.15.237.0/24 maxlen: 24
199.15.236.0/24 maxlen: 24
199.15.239.0/24 maxlen: 24
199.15.238.0/24 maxlen: 24
37.25.45.0/24 maxlen: 24
37.25.46.0/23 maxlen: 23
2a04:200::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:41:13:76:48:b0:db:26:71:66:1f:c1:26:0e:68:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Nov 23 16:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c0c12fe32d04a6a9c5ac01c880c6a6ec0d4956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:b0:40:2d:ab:c8:f4:7e:87:43:f5:b7:f1:
09:f5:b4:e0:66:81:f5:88:d6:8c:d4:bd:40:ad:46:
08:d2:27:ba:ff:e7:72:71:8f:ba:a0:27:5d:f5:c1:
c5:b7:a6:4a:c5:bb:4a:e9:cc:4c:b2:bd:e8:55:fb:
ae:03:17:91:17:01:74:66:cd:7a:ff:2e:ac:da:08:
4b:3a:18:ff:c3:20:8a:76:b8:53:a7:45:db:45:86:
0a:23:95:39:21:f7:43:73:95:de:89:3c:21:85:6c:
7f:2d:c1:99:2e:9f:6b:9d:d9:60:29:24:80:06:4d:
13:a7:72:ab:1d:a2:82:91:ac:34:d9:fa:35:4e:aa:
8d:e9:55:76:cd:b2:6a:d3:a5:f0:95:b0:1b:35:9e:
d8:f5:59:dc:a7:54:97:4e:06:58:5c:2b:03:68:e8:
1a:99:4f:df:f9:63:33:7c:7c:18:28:48:40:b4:a8:
59:17:b2:60:e8:a0:8a:ff:d7:27:20:14:66:87:bc:
39:22:c3:70:8a:65:9a:69:a7:7d:73:7f:e0:db:14:
9b:27:40:53:ea:01:9b:e4:9f:55:b1:e6:d4:31:4e:
15:4a:15:64:d1:76:a6:fa:fb:c5:55:c3:01:08:52:
c3:53:0b:01:5d:24:ba:a7:b9:41:5a:ee:4f:cc:08:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:C1:2F:E3:2D:04:A6:A9:C5:AC:01:C8:80:C6:A6:EC:0D:49:56
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/x8DBL-MtBKapxawByIDGpuwNSVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.44.0/22
91.228.232.0-91.228.234.255
98.96.160.0/20
134.19.192.0/21
134.65.128.0/19
185.16.160.0/22
185.122.192.0/22
199.15.232.0/21
IPv6:
2a04:200::/29
Signature Algorithm: sha256WithRSAEncryption
cb:46:80:9b:d4:a9:9d:98:fd:ec:69:e4:31:08:31:1d:27:8f:
2e:68:7e:af:8f:98:b8:6b:19:db:76:55:41:0c:b8:c3:4f:46:
c1:98:02:42:59:be:69:c1:7c:8a:50:30:d5:74:5d:fc:36:ee:
1f:ea:49:aa:1e:cc:42:22:fd:36:70:f1:fb:ac:63:c7:04:47:
9e:b1:ea:08:48:0b:58:11:2b:4a:7b:f9:8b:f1:46:14:a9:39:
e7:81:ec:0c:a9:0a:04:3e:ee:84:0e:0b:45:ea:be:9a:bc:39:
06:85:73:3c:3c:f9:b5:16:3e:ec:c7:dd:37:e5:a1:13:8d:42:
b2:0e:30:79:b3:9a:6c:ad:95:ad:ce:67:8b:e6:74:61:61:ce:
52:e5:ba:df:24:b7:56:6b:ed:a3:fa:1b:0d:57:de:53:97:3f:
07:3f:18:e0:6d:3e:01:65:82:cd:2e:89:72:d9:b0:ee:2f:d5:
71:2b:3a:e9:5e:c0:2e:de:1e:8a:db:da:f9:fa:71:82:4f:6f:
29:c1:6c:13:88:e5:c5:dd:d1:d4:5e:e7:48:82:08:6d:fd:73:
ed:04:31:b2:48:bd:0a:ba:a3:79:e2:58:df:84:52:7a:5e:e3:
37:4d:67:7b:04:76:1c:c0:e5:41:09:47:bd:b0:77:ef:92:ae:
47:1d:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:12 2024 by rpki-client on console-fra.rpki-client.org