Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7L8vj6mHZ6Df9o1aHZP5w1rboMU.roa
File: 7L8vj6mHZ6Df9o1aHZP5w1rboMU.roa (raw, json)
Hash identifier: tQtalJhJPHjIdeB845NOmHWXpGKX1Q8ldM4EbinOWtc=
Subject key identifier: EC:BF:2F:8F:A9:87:67:A0:DF:F6:8D:5A:1D:93:F9:C3:5A:DB:A0:C5
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16C55942
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7L8vj6mHZ6Df9o1aHZP5w1rboMU.roa
Signing time: Sat 01 Jan 2022 02:51:17 +0000
ROA not before: Sat 01 Jan 2022 02:51:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3343
IP address blocks: 80.250.191.0/24 maxlen: 24
86.110.116.0/24 maxlen: 24
86.110.118.0/24 maxlen: 24
86.110.117.0/24 maxlen: 24
86.110.119.0/24 maxlen: 24
85.143.191.0/24 maxlen: 24
80.250.184.0/24 maxlen: 24
80.250.183.0/24 maxlen: 24
80.250.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382032194 (0x16c55942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecbf2f8fa98767a0dff68d5a1d93f9c35adba0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:1e:2d:e6:cd:b6:e8:48:5a:05:d0:42:55:
14:ad:ae:8f:a9:6e:6b:0c:53:01:67:33:f6:75:18:
2a:22:49:28:f9:dd:f0:f2:a1:8a:14:3b:79:11:3b:
8d:9e:73:48:75:14:6a:c6:e4:b9:ef:10:14:ba:f1:
7f:06:87:54:1a:59:70:72:f2:6b:d9:f1:72:21:98:
54:76:a1:c5:a7:3f:9a:dc:46:d7:9c:d5:90:be:e6:
d5:41:70:49:ec:57:f0:17:01:eb:c3:b9:39:11:1e:
ed:00:e6:f5:a9:89:32:90:63:73:e4:5a:07:2f:e8:
c2:62:79:12:c5:57:39:0c:20:06:49:91:0f:59:ec:
39:96:a0:8b:6b:20:61:74:26:2c:53:fe:22:64:a0:
53:5b:4b:be:9e:9b:6f:27:3c:27:3f:d4:e1:83:4e:
23:5b:4e:c2:93:58:ef:9f:1d:c1:6e:7b:9d:e6:a2:
44:f4:f9:fa:1f:4f:82:1c:8d:8c:39:cc:a1:8e:f1:
f1:88:07:25:5f:d3:09:dc:74:24:b2:e5:16:ab:71:
63:1c:66:4f:ee:7f:bd:2f:a3:ab:02:41:ca:83:ad:
e0:55:8d:79:8c:26:d8:35:e8:52:2d:ec:25:d0:c4:
19:c0:71:c7:42:e1:3c:0f:91:d5:03:5f:98:1e:e3:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BF:2F:8F:A9:87:67:A0:DF:F6:8D:5A:1D:93:F9:C3:5A:DB:A0:C5
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/7L8vj6mHZ6Df9o1aHZP5w1rboMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.182.0-80.250.184.255
80.250.191.0/24
85.143.191.0/24
86.110.116.0/22
Signature Algorithm: sha256WithRSAEncryption
22:84:20:bf:25:8f:40:02:5c:b0:f7:c5:a7:45:16:7a:60:84:
93:62:35:99:ff:31:3a:8b:f5:bb:6f:35:0f:86:e4:36:7f:f7:
dc:09:ef:08:3d:4b:e2:4e:90:e2:fc:2a:0d:67:61:7b:4d:b9:
9b:10:16:2a:9e:c5:7c:5a:be:36:a2:9b:87:ae:d8:10:1d:96:
de:ad:b7:be:ad:e6:6e:94:28:9d:2a:62:b7:08:f5:3f:55:1a:
5b:7b:06:6c:44:fc:8f:74:61:84:57:ed:a2:a0:4c:7f:c7:8c:
f1:0a:d4:86:9e:e4:ac:e6:10:b2:a5:3b:9e:63:eb:15:fd:c8:
88:9c:b6:e0:66:f5:18:93:d1:13:b1:28:91:dc:ba:fa:3a:4e:
f6:fd:f7:3f:a2:ad:60:c3:56:b6:99:98:e7:97:be:ff:d2:c8:
03:27:30:dc:01:3a:01:d5:b4:1a:e4:68:c9:23:a0:83:e7:5b:
fc:9d:09:4e:67:44:64:fb:07:bc:1c:6e:35:24:5c:8d:4b:7c:
3a:53:f2:53:57:21:82:c8:63:60:88:34:2a:30:f8:bd:38:e8:
8a:58:ff:58:18:65:2a:34:91:79:1d:a2:68:8f:67:82:a7:00:
38:b3:d5:2d:6d:1f:7f:3d:bd:ef:0b:18:cd:9b:9c:42:5a:88:
33:0e:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org