Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1c275VF8PjbscigTXJSiEzqmwLw.roa
File: 1c275VF8PjbscigTXJSiEzqmwLw.roa (raw, json)
Hash identifier: dKiUG6ILfWKEB7PYw/3v6gAuSKwiCyfSyRCF1k7bFBc=
Subject key identifier: D5:CD:BB:E5:51:7C:3E:36:EC:72:28:13:5C:94:A2:13:3A:A6:C0:BC
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08A074FA
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1c275VF8PjbscigTXJSiEzqmwLw.roa
Signing time: Mon 07 Mar 2022 10:26:22 +0000
ROA not before: Mon 07 Mar 2022 10:26:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
94.241.176.0/21 maxlen: 24
83.147.212.0/22 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144733434 (0x8a074fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Mar 7 10:26:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5cdbbe5517c3e36ec7228135c94a2133aa6c0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:0a:0f:b7:13:99:9c:12:1e:6b:f3:90:03:
46:8c:81:e3:6f:eb:73:fc:02:51:bf:c0:a2:4c:54:
b3:7d:76:f0:65:91:35:98:e7:c6:c3:2b:c9:dd:0b:
fd:f1:25:6c:84:0c:ff:32:2a:2e:ff:fe:f2:24:fd:
d4:70:b0:01:4d:10:e0:36:88:29:ff:7f:e4:96:f2:
fa:21:cf:26:a7:fd:87:4e:b7:09:0c:43:1b:c9:a4:
d0:6b:31:64:5f:9f:85:93:a3:9e:56:c8:b8:dc:d2:
e6:83:bc:40:ee:67:07:4d:26:d0:99:bf:bf:0b:d8:
ca:de:da:eb:37:e4:11:cc:e2:2d:cb:9c:a7:56:bd:
9b:3b:8c:6c:12:b6:ee:05:50:d5:28:a2:4d:14:f0:
e8:e8:18:fc:2f:79:e2:2a:d6:c2:ac:42:57:a4:b4:
56:5c:fb:94:57:f8:0d:ae:fb:a0:e3:65:29:b9:4d:
8a:f7:42:3f:38:d2:ca:7b:c2:cc:cf:47:f3:df:2e:
aa:bc:5a:84:1d:5e:18:a0:0f:f2:5d:f2:18:42:ee:
0d:60:11:e2:69:fe:37:bb:1a:38:48:08:59:56:eb:
cd:90:bf:bf:67:72:f8:02:8d:da:0d:cb:5c:a9:7f:
1b:58:25:6c:b7:2b:dd:15:51:0a:d2:94:d4:87:e9:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:BB:E5:51:7C:3E:36:EC:72:28:13:5C:94:A2:13:3A:A6:C0:BC
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1c275VF8PjbscigTXJSiEzqmwLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0/22
83.147.232.0/22
83.147.244.0/22
91.186.216.0/21
94.241.176.0/21
Signature Algorithm: sha256WithRSAEncryption
71:3e:db:ab:d4:99:d6:36:a2:06:76:cf:a2:69:89:91:f3:68:
3b:84:d4:31:7e:74:61:17:7e:f2:00:81:13:82:e0:29:05:63:
c7:4d:47:19:70:df:0e:9e:b7:71:84:e6:dd:db:4f:a0:70:07:
37:4d:65:ad:0d:ec:6f:5d:66:ca:c3:46:35:76:2a:6b:44:39:
50:e4:78:43:d2:82:d1:48:ed:4f:b8:5a:f6:51:a9:90:06:5d:
96:74:49:98:5a:54:c7:b2:11:8e:2d:38:1f:d3:a0:93:6c:d4:
4e:7f:f2:72:2c:39:3c:4a:4f:41:30:1c:09:b5:eb:dd:bc:f7:
85:eb:e7:0b:fd:45:1d:ba:e8:25:44:e8:4a:fa:ed:92:6a:49:
95:81:19:90:b6:8b:d4:7c:93:f7:e1:85:ef:06:9a:55:7e:ef:
ea:10:1b:7d:96:b1:eb:6e:54:be:8c:d4:cd:6f:37:f8:58:79:
ec:0f:bd:9a:20:63:90:ca:b5:b1:a6:a0:86:cf:c9:23:14:91:
7a:d6:0c:3d:96:cc:3c:5e:86:6d:4d:72:40:73:a0:4c:c5:f4:
6c:7f:ee:8b:88:be:50:f1:c2:71:a3:2f:57:f5:cb:0a:0e:46:
01:95:a1:41:56:33:0f:85:78:9e:a6:dd:45:29:77:19:97:ad:
79:bc:92:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org