Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/8Hih6GVyc5W6l1JvVwt-lRv7Cvk.roa
File: 8Hih6GVyc5W6l1JvVwt-lRv7Cvk.roa (raw, json)
Hash identifier: l0OMFARvZaWGfLknAgl8iJZ5KeieyfLUzZVSNxPrg/8=
Subject key identifier: F0:78:A1:E8:65:72:73:95:BA:97:52:6F:57:0B:7E:95:1B:FB:0A:F9
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0B2CC947
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/8Hih6GVyc5W6l1JvVwt-lRv7Cvk.roa
Signing time: Tue 22 Feb 2022 03:39:14 +0000
ROA not before: Tue 22 Feb 2022 03:39:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15974
IP address blocks: 93.157.208.0/21 maxlen: 32
213.80.128.0/17 maxlen: 32
217.23.64.0/19 maxlen: 32
193.22.6.0/24 maxlen: 32
217.23.74.0/24 maxlen: 32
2a02:e842::/32 maxlen: 128
2a02:e840::/32 maxlen: 128
2a02:e841::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187484487 (0xb2cc947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Feb 22 03:39:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f078a1e865727395ba97526f570b7e951bfb0af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:20:c0:e1:43:b6:36:10:36:e9:fc:8e:85:
05:b8:f1:e3:a3:e3:b4:04:41:6d:b0:7c:01:b9:2d:
a2:86:48:40:44:cd:98:f0:aa:d0:3a:52:87:66:2b:
11:fe:0e:53:3c:50:f2:54:56:fd:6a:0d:75:81:68:
7b:cc:6f:b7:df:a5:2d:6f:fd:21:4c:36:6a:60:b7:
72:00:98:9c:cc:00:81:70:c9:f6:69:cd:72:71:18:
66:f0:2f:fe:bd:57:e3:2e:89:af:e6:65:81:ff:90:
d6:c5:15:18:3e:22:29:ef:85:f8:78:06:ce:68:3f:
f9:b6:6f:6a:2c:0d:2f:b4:7e:2b:20:81:48:13:8e:
09:0a:c9:b1:57:f8:80:c9:f8:d7:5c:c0:4f:74:cf:
24:e7:3d:29:a8:f6:9d:30:67:fe:71:23:f1:77:78:
d9:cd:31:15:d5:13:7f:4d:6a:3d:7e:ff:c2:43:8f:
64:a1:b6:92:ca:6e:a7:7e:8b:85:db:86:96:3b:a5:
93:c5:d9:3a:8d:cf:87:f5:21:26:01:e8:0f:80:b8:
60:31:84:f8:79:ad:59:69:d5:72:18:ce:bc:e5:0d:
2c:cf:e5:1e:50:ce:9d:6e:04:f9:50:df:e7:2b:ea:
43:44:2e:4e:c9:a2:ec:b4:61:31:99:46:ca:55:23:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:A1:E8:65:72:73:95:BA:97:52:6F:57:0B:7E:95:1B:FB:0A:F9
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/8Hih6GVyc5W6l1JvVwt-lRv7Cvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.208.0/21
193.22.6.0/24
213.80.128.0/17
217.23.64.0/19
IPv6:
2a02:e840::-2a02:e842:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cc:17:e2:ca:b5:61:e0:40:e9:9f:f4:37:56:c7:cc:8b:c6:39:
67:a7:8d:eb:2b:20:3e:51:53:2d:4a:19:b8:b7:be:9f:44:aa:
96:6e:81:8f:4f:ae:14:3e:da:86:b2:e6:4c:c1:ee:80:de:1a:
7b:80:ec:2c:22:7c:1b:e5:d8:0f:96:6b:09:71:ed:0c:1e:db:
70:60:f7:45:1b:8b:7f:26:76:43:56:c3:d4:27:7d:f2:03:40:
90:c4:ac:28:29:d0:f2:cb:3a:fb:42:6e:96:e5:53:3c:ae:89:
b7:49:c1:bf:de:ec:1d:26:e5:9b:54:dd:54:12:af:92:d1:1e:
f5:31:e8:55:dc:96:a5:1d:fb:49:7f:cd:eb:c9:5e:91:d7:92:
4b:35:58:cc:fc:b9:db:db:5a:79:86:ba:53:91:8d:bb:49:e3:
f7:67:6e:2f:30:b0:73:f5:9b:ef:2a:f9:37:c6:ab:17:cc:d9:
96:da:e8:ff:0f:94:87:f5:ad:88:c3:1b:f1:50:a3:bd:83:b3:
22:90:5f:a8:67:2b:13:09:8c:ee:d9:e3:e8:4c:93:4f:33:95:
cb:44:27:20:db:43:2e:ab:8f:63:75:19:90:76:b5:f5:5e:42:
d9:f1:49:7e:cb:65:e7:eb:b0:49:ad:22:35:9d:7b:f9:63:71:
89:1c:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org