Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/gXS8rTvnfUxr22ZWEKp1GzgrZ0g.roa
File: gXS8rTvnfUxr22ZWEKp1GzgrZ0g.roa (raw, json)
Hash identifier: i5zv5cEOo6r+ZHaMPiNzezrZyI0cM0LmNa/0nMnv5lA=
Subject key identifier: 81:74:BC:AD:3B:E7:7D:4C:6B:DB:66:56:10:AA:75:1B:38:2B:67:48
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 093BA0EA
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/gXS8rTvnfUxr22ZWEKp1GzgrZ0g.roa
Signing time: Thu 26 May 2022 15:30:13 +0000
ROA not before: Thu 26 May 2022 15:30:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57073
IP address blocks: 85.198.76.0/22 maxlen: 24
185.138.253.0/24 maxlen: 24
185.138.252.0/24 maxlen: 24
185.138.252.0/22 maxlen: 24
185.138.254.0/24 maxlen: 24
185.138.255.0/24 maxlen: 24
194.1.214.0/24 maxlen: 24
213.184.154.0/23 maxlen: 24
213.184.156.0/22 maxlen: 24
94.141.112.0/22 maxlen: 24
185.62.200.0/23 maxlen: 24
185.62.202.0/24 maxlen: 24
91.230.107.0/24 maxlen: 24
2a03:720::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154902762 (0x93ba0ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: May 26 15:30:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8174bcad3be77d4c6bdb665610aa751b382b6748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:bc:3c:d5:b9:3b:2d:05:64:a0:fd:fc:e3:
ef:49:af:6c:1e:2a:05:e9:c1:da:12:51:2a:e5:fc:
8f:52:db:bb:9d:53:27:b9:62:9d:a0:65:4f:b5:6e:
cc:89:d9:f8:d5:e2:3b:49:fa:a7:a4:00:80:44:c4:
6b:76:5f:75:d1:7e:a2:6c:eb:12:ea:ff:ff:85:2b:
b6:c3:ca:10:e9:53:18:b3:e5:ab:1f:8c:6b:0f:e3:
4d:00:78:c0:00:89:08:a9:8e:81:b1:aa:b1:ab:9e:
08:31:61:d8:85:23:90:d2:da:30:26:01:45:d3:28:
cc:66:fd:5f:8f:a0:d3:e8:cd:4e:cd:33:19:80:e5:
b5:81:0a:d8:2c:c9:41:fe:a7:ed:bd:63:53:c8:78:
15:65:d4:4d:a0:cc:a2:a7:c0:52:30:9a:99:3c:ef:
58:6c:3e:17:61:62:b1:a3:ba:fc:ba:92:fb:66:cb:
58:ef:48:ee:e8:49:0d:11:88:7e:bc:c4:59:7e:db:
0d:77:f3:87:d2:06:d7:c8:a5:ca:7f:54:9e:71:54:
93:e9:73:97:e6:77:d2:4e:fa:1e:be:0f:83:27:2f:
2c:71:85:34:65:19:e7:48:5e:1f:37:96:81:e4:5a:
61:67:05:50:7d:8f:3b:0b:b3:cc:5c:6b:32:98:c1:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:BC:AD:3B:E7:7D:4C:6B:DB:66:56:10:AA:75:1B:38:2B:67:48
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/gXS8rTvnfUxr22ZWEKp1GzgrZ0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.76.0/22
91.230.107.0/24
94.141.112.0/22
185.62.200.0-185.62.202.255
185.138.252.0/22
194.1.214.0/24
213.184.154.0-213.184.159.255
IPv6:
2a03:720::/32
Signature Algorithm: sha256WithRSAEncryption
39:14:6d:a2:26:28:fd:08:b1:1b:a2:81:75:1c:df:99:d3:3c:
bf:55:c6:44:6d:f2:3b:0d:c1:af:cb:b4:4e:5e:08:d7:4e:8f:
bd:97:2b:19:74:cf:2c:70:ef:61:5b:ce:39:e5:9b:7b:60:91:
7f:fa:f5:07:c8:ea:b4:ed:c6:9a:1f:40:20:dc:33:79:5e:da:
7a:b5:11:9a:f0:56:b7:be:81:3d:da:dc:bc:ac:5c:7f:d0:58:
66:a2:a7:81:ac:4f:04:c0:d0:97:9b:47:c4:2d:4a:46:9a:99:
58:cd:15:b4:85:d4:b6:fb:75:e7:99:9c:08:b7:f5:7b:56:75:
4a:b3:c8:68:3d:c8:fa:b7:81:c7:4b:2b:75:6c:2b:33:8e:31:
53:3e:2d:c8:d2:f5:f7:82:e3:36:5c:97:e0:20:f2:4a:37:1e:
32:13:ed:47:cb:a0:7d:ee:ea:30:48:c7:d5:06:1a:e0:e0:9c:
d2:05:19:84:b5:6d:1c:76:64:b5:e8:64:88:3e:2d:08:d4:27:
12:8c:e1:83:46:c1:98:1f:b8:80:2a:99:08:ba:4a:6c:9d:8f:
74:f9:6d:b0:38:f7:eb:90:11:1a:df:65:6e:35:4d:37:4b:d5:
fb:ac:e2:aa:67:5e:24:dc:c1:c1:b5:76:51:18:ab:97:53:82:
67:ba:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:32 2024 by rpki-client on console-fra.rpki-client.org