Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/8vgWPfE1mA-kZbj1adlrUuAmd6I.roa
File: 8vgWPfE1mA-kZbj1adlrUuAmd6I.roa (raw, json)
Hash identifier: mI3Z1J3l6KJimb2/JAWM6GhIVlyWPnVwRyXpHfzJxJo=
Subject key identifier: F2:F8:16:3D:F1:35:98:0F:A4:65:B8:F5:69:D9:6B:52:E0:26:77:A2
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 06B79CBC
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/8vgWPfE1mA-kZbj1adlrUuAmd6I.roa
Signing time: Sat 01 Jan 2022 05:06:30 +0000
ROA not before: Sat 01 Jan 2022 05:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.204.16.0/22 maxlen: 24
193.16.15.0/24 maxlen: 24
45.83.112.0/22 maxlen: 22
193.16.12.0/24 maxlen: 24
193.16.13.0/24 maxlen: 24
193.16.14.0/24 maxlen: 24
194.39.68.0/22 maxlen: 24
80.254.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112696508 (0x6b79cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 05:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2f8163df135980fa465b8f569d96b52e02677a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:98:fb:7a:22:53:a9:19:95:e7:92:5b:0c:
a7:4b:22:a2:98:e9:99:02:a8:c4:72:61:43:31:68:
6c:bf:60:fa:ac:79:3c:b6:ab:9a:4f:7d:a5:2d:4c:
6f:a9:65:8e:05:fe:fe:18:bd:00:ca:c7:d3:61:04:
89:13:1b:fa:b2:75:e5:1c:96:c3:84:8a:cb:d4:40:
f5:ad:11:04:69:04:19:d6:36:26:71:8c:4e:ea:f0:
5b:4f:6e:7f:78:ee:44:51:83:d5:48:cf:84:85:77:
03:61:78:a6:10:12:94:63:31:3a:59:ef:ef:02:c0:
db:a1:bb:43:31:53:5d:d5:05:ab:0f:05:61:7a:53:
e9:1e:0a:c1:76:7b:67:26:ef:91:ef:4f:b9:31:34:
53:fb:ac:ea:b3:15:0f:a5:df:cb:58:67:f3:9a:d1:
1f:5b:5a:82:6f:84:92:64:15:ae:5d:bd:b1:00:28:
90:98:63:57:bf:5c:e2:3d:a2:7b:27:9b:fb:99:55:
65:7c:02:44:93:cf:34:07:1a:a9:cc:04:c3:26:42:
6a:c9:da:bb:f9:eb:6c:7f:7c:06:af:1a:c9:ac:70:
ff:2c:4c:21:6b:c5:0d:02:97:5f:f0:22:d6:06:9d:
98:80:2e:5c:e1:df:08:04:7e:a8:d8:83:83:51:9d:
9b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:16:3D:F1:35:98:0F:A4:65:B8:F5:69:D9:6B:52:E0:26:77:A2
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/8vgWPfE1mA-kZbj1adlrUuAmd6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.112.0/22
80.254.232.0/21
185.204.16.0/22
193.16.12.0/22
194.39.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:bb:22:17:fa:b7:93:3b:6a:f2:29:9f:68:88:44:48:bb:d7:
c8:b6:76:65:97:9f:04:c0:ba:f7:53:27:40:2f:7e:26:6d:ae:
ed:81:97:65:f7:31:46:47:bd:53:25:f8:7c:7e:1b:70:52:84:
94:a0:80:a5:0d:83:cc:61:d6:da:5d:a8:31:9d:76:c9:28:07:
3f:c5:0f:44:94:ab:a6:86:bf:b7:bc:a7:63:86:8f:08:e5:a3:
e1:28:d5:c8:9c:6b:19:aa:8a:44:b9:eb:85:ef:df:b8:8d:2b:
79:cd:0d:21:29:f2:f0:d6:ca:84:b8:77:56:b2:96:a8:eb:8b:
9e:48:1d:cd:05:c2:f1:56:d3:6f:1a:43:44:56:28:59:6b:9a:
ff:1b:8d:9e:52:e3:fd:b7:5f:b4:0a:82:97:ac:4f:79:ac:c4:
f6:5a:e2:f0:88:b4:b8:5a:4f:e2:62:64:70:7e:14:05:f9:c0:
b5:5a:e3:48:99:58:76:38:cc:7c:e5:96:5b:e7:44:74:b7:eb:
df:79:03:d5:21:c1:ba:84:44:b1:e0:89:88:aa:05:79:6f:a5:
cb:fa:2c:73:f8:07:9e:3d:db:54:c6:5a:b1:d5:82:0f:87:3d:
49:29:28:3f:a5:d3:22:cc:3b:54:a8:d9:cc:e3:41:48:66:96:
eb:31:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:10 2023 by rpki-client on console-ams.rpki-client.org