Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/aoSGboWWYPZUWaOD2yKZEEUdfCE.roa
File: aoSGboWWYPZUWaOD2yKZEEUdfCE.roa (raw, json)
Hash identifier: zzKrsPvegwPSqYZl9UOF8OoocSuoNRCedcVkwN0YNiQ=
Subject key identifier: 6A:84:86:6E:85:96:60:F6:54:59:A3:83:DB:22:99:10:45:1D:7C:21
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0957B916
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/aoSGboWWYPZUWaOD2yKZEEUdfCE.roa
Signing time: Fri 20 May 2022 08:54:29 +0000
ROA not before: Fri 20 May 2022 08:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212369
IP address blocks: 185.255.93.0/24 maxlen: 24
185.255.94.0/24 maxlen: 24
185.255.95.0/24 maxlen: 24
185.132.126.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
185.93.69.0/24 maxlen: 24
185.93.70.0/24 maxlen: 24
185.93.71.0/24 maxlen: 24
193.164.5.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
89.35.52.0/24 maxlen: 24
93.115.10.0/24 maxlen: 24
93.177.101.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156743958 (0x957b916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: May 20 08:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a84866e859660f65459a383db229910451d7c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:9a:37:f4:93:e8:13:0d:17:95:99:a4:a9:
46:38:a2:6a:cd:33:23:8b:c4:8c:30:d0:02:b9:f3:
99:f4:dd:ff:b8:9c:6c:39:17:c7:e5:be:83:31:1c:
29:19:56:9f:7f:18:23:93:ee:6c:62:f8:f9:30:51:
48:79:b3:26:d4:87:f5:ce:cb:20:f3:95:af:e2:83:
ec:24:1e:12:f9:34:56:0c:90:8b:6c:87:82:cd:bd:
01:84:ee:84:5d:fe:18:fc:64:25:dd:fa:ac:26:d0:
8e:aa:76:9a:09:b3:de:bf:08:ff:0a:a8:b6:bb:da:
65:cb:ea:74:77:98:5e:52:d4:a4:ec:8e:e3:77:69:
cc:fa:76:d0:5a:7b:ec:52:66:21:65:ba:a5:3e:a9:
f9:b0:7c:c8:6b:22:67:95:b6:b8:95:04:6d:d3:5e:
91:5a:a5:e3:4f:0c:95:3c:29:9e:b6:d8:6a:6f:fc:
a3:82:90:8a:08:a6:95:de:3b:bb:e9:c8:44:80:26:
3f:b0:de:83:43:df:1d:b3:6a:32:94:f2:03:ee:89:
1a:00:91:2f:40:ef:2a:4d:2e:ee:dd:06:0b:6b:1e:
a2:73:78:32:e1:28:31:16:49:88:5b:d0:f0:1f:17:
7c:08:ce:ee:f0:95:85:a0:1d:6d:38:20:2e:da:76:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:84:86:6E:85:96:60:F6:54:59:A3:83:DB:22:99:10:45:1D:7C:21
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/aoSGboWWYPZUWaOD2yKZEEUdfCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.52.0/24
93.115.10.0/24
93.177.101.0-93.177.102.255
185.93.68.0/22
185.132.126.0/24
185.255.93.0-185.255.95.255
193.164.5.0-193.164.6.255
Signature Algorithm: sha256WithRSAEncryption
9a:e4:e3:b0:d1:c1:e7:98:ee:16:ad:ac:8d:1c:56:ee:99:df:
91:2c:69:af:29:cb:04:a8:6b:48:f7:ea:04:2f:87:2b:3a:81:
a8:10:0b:b5:cd:a5:05:62:34:04:07:5e:7e:5f:72:c6:05:3d:
13:3b:95:d4:62:a1:2a:cb:65:26:1b:34:3a:be:b0:20:5b:8d:
cf:84:2c:ff:11:01:14:ea:d4:72:3f:73:b8:b5:80:03:dd:60:
bc:2e:8b:6e:7e:47:a7:e1:e7:30:29:dc:bc:ae:d3:15:bf:05:
d2:68:b4:fb:41:24:a0:a4:64:80:00:f4:b2:f6:8c:35:06:2f:
57:f3:d0:02:a6:a5:c9:fc:b5:9e:8e:bc:c2:df:6d:3e:d5:7f:
01:4c:ad:5d:ca:81:16:eb:59:fe:78:36:3d:d3:a1:2e:fe:d3:
6e:91:8f:c0:66:0c:97:ab:ba:19:1c:59:55:6f:33:c3:b6:aa:
62:04:96:9f:a1:fd:3e:fc:f7:b3:2a:8a:36:81:d9:69:41:3f:
54:42:27:de:ad:58:21:a2:27:79:2d:7c:f8:fb:41:9f:54:cd:
32:a5:ab:a7:65:c5:b9:b6:9b:42:46:57:78:48:47:83:cf:e4:
6f:8b:71:ce:e8:8c:c2:c8:ed:a2:b8:f3:9b:4a:e8:b1:c3:78:
b4:d7:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org