Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/C9-TpY9dkEmUfJMfOS1DSCEDr3s.roa
File: C9-TpY9dkEmUfJMfOS1DSCEDr3s.roa (raw, json)
Hash identifier: Oy5YazkzWcROHhw6SlwWPWr40ZR2qPoWT5lN4RyCJoI=
Subject key identifier: 0B:DF:93:A5:8F:5D:90:49:94:7C:93:1F:39:2D:43:48:21:03:AF:7B
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 01BA6A6D
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/C9-TpY9dkEmUfJMfOS1DSCEDr3s.roa
Signing time: Fri 29 Apr 2022 08:36:20 +0000
ROA not before: Fri 29 Apr 2022 08:36:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200799
IP address blocks: 185.188.24.0/24 maxlen: 24
185.188.24.0/22 maxlen: 22
185.188.27.0/24 maxlen: 24
185.188.26.0/24 maxlen: 24
185.188.25.0/24 maxlen: 24
185.95.39.0/24 maxlen: 24
130.193.1.0/24 maxlen: 24
185.95.38.0/24 maxlen: 24
185.95.37.0/24 maxlen: 24
185.95.36.0/22 maxlen: 22
185.95.36.0/24 maxlen: 24
212.237.252.0/24 maxlen: 24
217.61.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28994157 (0x1ba6a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Apr 29 08:36:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bdf93a58f5d9049947c931f392d43482103af7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:e0:40:d6:28:7a:9e:87:1f:2c:d0:98:fa:
e8:39:0a:79:e2:e7:31:e5:d8:33:58:53:03:f8:dc:
7d:d9:0d:ee:da:ae:7c:c8:d0:88:a1:46:29:af:ee:
f8:64:55:d9:1c:08:37:44:61:db:89:da:7f:8f:27:
1c:8a:7f:b3:7d:bb:57:d3:04:61:48:47:9f:bf:27:
4c:23:55:fd:ba:b8:e6:11:71:99:98:7f:15:63:59:
2e:32:db:ab:2a:7f:0a:08:62:69:39:01:5d:a6:76:
d0:54:06:de:80:1b:3c:df:7c:23:af:f2:b1:29:79:
52:6c:22:64:1f:ba:ea:ef:9b:d1:67:71:f2:b9:28:
18:84:0e:8d:f8:b0:11:48:60:f5:0b:a6:83:f6:80:
df:0e:16:97:5c:43:d8:17:5d:3a:e3:cf:e4:45:e6:
e6:04:db:eb:86:4e:68:95:7c:f0:73:04:6c:d5:6c:
ce:c3:5c:0f:e0:95:74:05:e2:db:25:e1:e6:38:f9:
7b:56:c8:53:73:99:db:db:c9:bc:7b:ab:8f:60:f6:
aa:a4:a2:8c:2a:a6:33:e3:b6:6f:72:bf:6b:cf:6f:
77:f5:48:4f:a2:a2:58:dd:b6:03:13:ff:f4:91:5f:
8e:da:4b:80:24:55:27:f8:c7:ac:b2:9c:df:24:35:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DF:93:A5:8F:5D:90:49:94:7C:93:1F:39:2D:43:48:21:03:AF:7B
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/C9-TpY9dkEmUfJMfOS1DSCEDr3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.1.0/24
185.95.36.0/22
185.188.24.0/22
212.237.252.0/24
217.61.254.0/24
Signature Algorithm: sha256WithRSAEncryption
54:aa:44:77:fb:de:ec:14:8e:ec:fe:b2:db:2e:40:11:0f:70:
36:ea:1f:5c:ad:f0:ef:0e:9b:36:0d:bf:bc:ef:72:de:a8:2c:
8a:cf:3d:3a:71:d0:c1:00:a0:3a:79:5a:01:bb:24:da:71:ba:
9b:c3:b4:c0:0f:0a:c9:a4:92:8a:5c:c1:a4:f4:17:72:cd:b0:
e4:fa:57:06:47:72:32:6d:44:1e:b9:16:d3:68:36:88:94:e6:
c2:40:b8:29:c0:04:85:fb:cb:d4:02:44:3c:2b:bd:52:a1:72:
60:95:93:e0:d6:6f:d6:dd:4a:10:fe:14:4f:35:d7:c5:1e:dd:
46:b0:48:35:52:5f:ed:56:01:e2:f9:57:24:46:90:48:28:9b:
89:2d:eb:d8:b5:29:81:cb:b4:7d:04:3f:dd:73:70:45:3b:d0:
e3:ed:ad:c4:26:13:d2:c0:0f:d9:77:fe:58:27:c5:68:79:3a:
42:3e:83:50:47:77:01:b4:cd:a5:9c:b2:88:69:b7:7f:f0:86:
7e:45:8d:0a:7f:11:32:fe:1d:50:5a:17:82:7e:8b:11:36:7c:
cc:49:bd:fa:89:c7:33:36:37:8e:71:06:e4:09:23:62:8f:4c:
9d:ab:a0:d7:c3:56:ad:15:a6:a3:7a:dc:38:5b:b5:11:9d:56:
33:72:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:50 2023 by rpki-client on console-fra.rpki-client.org