Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/0_yId1ESkeMhrbghNTRNAyZHgv8.roa
File: 0_yId1ESkeMhrbghNTRNAyZHgv8.roa (raw, json)
Hash identifier: D7+Cm324ravc0NyTGyHAfg0z1hHjyNgK/tsy6lHcI5M=
Subject key identifier: D3:FC:88:77:51:12:91:E3:21:AD:B8:21:35:34:4D:03:26:47:82:FF
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 1ABAC266
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/0_yId1ESkeMhrbghNTRNAyZHgv8.roa
Signing time: Sat 01 Jan 2022 10:04:13 +0000
ROA not before: Sat 01 Jan 2022 10:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 84.247.148.0/24 maxlen: 24
84.247.146.0/24 maxlen: 24
84.247.151.0/24 maxlen: 24
84.247.152.0/24 maxlen: 24
84.247.168.0/24 maxlen: 24
84.247.169.0/24 maxlen: 24
84.247.173.0/24 maxlen: 24
81.88.68.0/23 maxlen: 23
81.88.70.0/24 maxlen: 24
81.88.67.0/24 maxlen: 24
81.88.74.0/23 maxlen: 23
81.88.73.0/24 maxlen: 24
81.88.76.0/24 maxlen: 24
81.88.78.0/24 maxlen: 24
81.88.79.0/24 maxlen: 24
84.247.130.0/24 maxlen: 24
84.247.132.0/24 maxlen: 24
84.247.145.0/24 maxlen: 24
84.247.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448447078 (0x1abac266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Jan 1 10:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3fc8877511291e321adb82135344d03264782ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:0c:8e:cf:6a:6a:de:17:6c:25:af:91:07:
bc:a5:bc:f9:ea:06:4b:2b:37:93:ce:a4:10:3d:c2:
19:91:b5:b0:0c:b2:23:f3:af:c4:e7:0f:08:95:1a:
31:37:97:95:0b:c2:3f:76:1d:72:33:ed:56:fd:25:
b2:7b:ee:72:21:1c:20:e7:3b:ef:33:a5:e7:bc:e7:
9f:4d:68:cc:72:79:a4:27:dc:f5:d2:f0:3b:d7:0b:
6a:33:6a:06:a0:c1:23:16:a8:85:9e:0e:6f:a1:f0:
9d:7a:f6:1c:4b:e4:ff:24:da:77:21:82:00:a8:de:
37:05:ef:56:83:95:e4:80:b6:88:a7:85:e9:62:ca:
8e:b0:10:92:2c:57:f7:04:7b:0d:d0:11:60:cb:d3:
dd:9b:89:73:80:16:f6:8e:3a:03:a2:e6:ff:c7:81:
6d:c0:3c:92:ec:e0:c3:e9:ed:c2:69:a4:68:bd:e3:
87:60:f5:b5:1f:9c:60:6f:a1:c3:22:af:b2:db:e5:
de:01:26:61:a1:ee:86:c3:33:7f:95:59:39:25:2a:
dc:b3:8d:52:3e:98:72:8e:50:f2:6e:82:90:f3:83:
9b:71:84:dd:d9:0c:59:b5:c1:f3:92:1d:11:33:96:
04:dc:85:60:58:8e:f3:96:0f:9b:40:46:bd:de:0b:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:88:77:51:12:91:E3:21:AD:B8:21:35:34:4D:03:26:47:82:FF
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/0_yId1ESkeMhrbghNTRNAyZHgv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.67.0-81.88.70.255
81.88.73.0-81.88.76.255
81.88.78.0/23
84.247.130.0/24
84.247.132.0/24
84.247.142.0/24
84.247.145.0-84.247.146.255
84.247.148.0/24
84.247.151.0-84.247.152.255
84.247.168.0/23
84.247.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5b:9a:37:3b:93:0d:b2:fc:54:ad:b1:b7:d9:7d:27:bd:7b:
ce:c6:b5:e6:9f:59:13:d0:09:9c:72:7a:6e:40:fe:6c:6a:d4:
a9:43:32:d8:6c:1c:59:93:8f:c8:41:69:d6:7e:09:cc:79:ed:
32:64:c4:1f:22:8d:0d:91:5f:d9:7d:8f:9d:6d:82:4f:10:d6:
6a:69:04:9e:36:53:0d:c8:70:52:35:08:f4:58:fc:27:04:4f:
ab:80:14:b3:08:82:f4:b9:ad:73:34:47:c5:24:aa:0b:42:2c:
f9:05:c7:6f:68:85:9b:26:8a:60:b4:52:b4:ba:84:41:83:55:
51:f5:e7:f1:76:d1:d0:e0:db:70:ec:30:ca:2c:8d:bd:bc:d6:
6e:f0:f7:e9:7a:6e:a9:23:0d:86:2f:80:34:b2:67:4d:4f:9c:
6c:1a:a4:b3:67:64:d1:3d:b1:73:94:d5:af:c8:ea:00:93:0d:
6d:39:dc:83:86:44:65:29:12:69:38:1f:37:00:6a:74:79:20:
0b:5d:c1:08:2d:27:51:c9:98:d8:dd:0f:ac:93:b0:24:0e:a2:
ab:ef:b7:11:3b:16:bf:0d:16:a1:9a:e4:f0:5f:b7:9c:e2:82:
72:e3:97:e0:cf:21:81:47:fb:82:4e:29:be:04:d7:3c:51:d9:
11:5b:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:07 2023 by rpki-client on console-ams.rpki-client.org