Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ikUcGH5PFiq2qUfSnODf187rVOU.roa
File: ikUcGH5PFiq2qUfSnODf187rVOU.roa (raw, json)
Hash identifier: 1mpYfjUl/ls4bBBS+O09Fuy94fGgrj4K3fyHGzQm//8=
Subject key identifier: 8A:45:1C:18:7E:4F:16:2A:B6:A9:47:D2:9C:E0:DF:D7:CE:EB:54:E5
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0184054DBDCA57D55FBD75E9F18FD9487B61
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ikUcGH5PFiq2qUfSnODf187rVOU.roa
Signing time: Sun 23 Oct 2022 14:44:51 +0000
ROA not before: Sun 23 Oct 2022 14:44:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 185.125.200.0/22 maxlen: 24
95.140.152.0/21 maxlen: 24
80.90.184.0/21 maxlen: 24
80.90.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:05:4d:bd:ca:57:d5:5f:bd:75:e9:f1:8f:d9:48:7b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Oct 23 14:44:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a451c187e4f162ab6a947d29ce0dfd7ceeb54e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:48:f0:f7:9a:6b:2a:3b:4f:41:73:d9:e3:
f5:d8:3c:94:b7:51:1b:36:15:27:01:26:08:ec:29:
47:3f:ff:e4:62:19:ec:15:d8:0e:da:23:fc:6e:8a:
e7:47:0a:f9:d4:2f:9b:6f:f6:b6:5a:ed:5c:00:fe:
d7:ac:71:6d:a9:0e:a6:4c:fa:17:0b:57:2e:2d:a6:
44:a4:5f:f1:1d:49:5e:4c:b4:83:2e:e9:88:a1:ae:
86:94:24:0f:c6:10:58:03:df:0e:62:8b:e9:29:e2:
ad:91:83:f9:59:29:d0:03:c2:7b:63:be:51:e9:ce:
16:2d:5e:45:18:6e:f0:13:3c:85:a7:87:6e:a9:49:
45:5f:e4:02:76:05:f1:f2:35:14:fa:c4:74:61:85:
5d:75:e6:bb:40:04:d0:c2:f9:3e:c9:99:c1:bc:46:
6a:12:95:0d:b6:35:4a:5b:91:85:95:a7:e8:9d:73:
b3:84:cc:aa:68:1d:91:ad:cf:01:bc:99:37:72:1c:
80:5d:81:15:cf:b3:1e:2b:9b:d3:d9:9b:11:eb:17:
ea:fc:bd:b8:83:4c:eb:5e:3f:06:fa:95:37:4c:c5:
52:f7:a4:ce:bd:70:cb:3d:48:f2:eb:52:0c:23:5b:
22:de:0e:9c:a3:a6:40:c0:0a:a4:51:fb:ea:96:57:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:1C:18:7E:4F:16:2A:B6:A9:47:D2:9C:E0:DF:D7:CE:EB:54:E5
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ikUcGH5PFiq2qUfSnODf187rVOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0-80.90.191.255
95.140.152.0/21
185.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
60:72:11:22:05:59:ed:e4:36:a8:fb:76:f7:a1:e0:78:d4:7d:
dd:75:76:f8:5b:f7:3f:b1:16:b0:85:73:38:9a:ac:b0:17:39:
58:76:f6:f4:a0:a1:b6:a8:84:75:a5:4f:5e:14:66:9e:71:bd:
c6:40:79:14:13:c3:c3:74:1b:ab:db:33:56:30:ec:5e:c4:27:
2d:86:f4:cf:83:75:b7:b9:2c:0a:0d:2b:5d:91:ed:32:c4:0c:
55:4c:cc:99:91:cc:c7:f8:ac:b2:fc:ac:94:98:af:8c:ba:ad:
f6:81:8e:56:64:a7:1c:6e:8c:95:02:7b:c9:68:1d:e3:c3:0f:
c1:fe:bb:fc:6c:f6:47:b7:ba:88:82:05:d4:33:01:aa:4d:ac:
55:56:12:6a:95:b4:78:ac:9a:4e:ea:27:9e:a8:7b:50:99:9b:
b9:f4:9b:bd:cd:44:bf:46:bb:d8:d7:07:6e:4c:01:3f:4f:8f:
f5:1e:a8:9a:2f:07:82:21:0a:ef:f9:ce:4e:ca:32:8b:25:c2:
f3:9a:aa:cb:86:04:88:54:d3:94:ff:bd:15:9f:21:86:3d:5c:
89:a2:48:3f:2a:9d:d0:49:3d:46:4c:fb:aa:98:f4:e4:b6:2d:
4d:c2:27:31:be:f4:3e:42:a7:85:01:5f:1b:63:5a:a4:27:b3:
3b:e3:7c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:33 2023 by rpki-client on console-ams.rpki-client.org