Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2OiKMB_GVsK5oVfb81kQ2nyIRJM.roa
File: 2OiKMB_GVsK5oVfb81kQ2nyIRJM.roa (raw, json)
Hash identifier: i4vZX4jdSYhlFsUXReaijOFkNvkN5VkqMur2mELe+Yw=
Subject key identifier: D8:E8:8A:30:1F:C6:56:C2:B9:A1:57:DB:F3:59:10:DA:7C:88:44:93
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08FFD2AF
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2OiKMB_GVsK5oVfb81kQ2nyIRJM.roa
Signing time: Wed 13 Apr 2022 08:55:39 +0000
ROA not before: Wed 13 Apr 2022 08:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.204.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
94.241.160.0/21 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.12.0/23 maxlen: 24
83.147.216.0/23 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
178.253.55.0/24 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150983343 (0x8ffd2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 13 08:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8e88a301fc656c2b9a157dbf35910da7c884493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:4f:95:a1:24:47:77:d5:40:89:4a:de:d7:
f9:da:27:c5:5a:eb:e1:d5:91:78:88:40:98:21:51:
17:b9:91:6d:ea:73:03:10:3e:90:54:27:66:60:f1:
c0:21:b7:ac:28:af:b8:ed:93:65:5c:df:04:3e:47:
ff:81:bd:8e:c5:26:e3:f1:eb:0e:57:96:3c:5f:58:
4f:2c:7a:ce:07:71:3c:49:9e:77:6f:8b:26:94:5b:
c5:85:af:9b:72:dc:70:5a:8f:05:65:d4:e6:0f:08:
52:c2:05:d5:5d:91:f5:19:d6:81:a4:03:c2:f3:ae:
6f:70:f6:02:99:e1:77:1c:8d:db:db:0e:82:b5:26:
92:c5:1e:41:0e:f1:b5:7c:6e:b5:b4:ab:1a:d7:cf:
fa:2b:06:14:b9:4a:56:00:92:73:96:c8:0e:bf:a2:
e2:0b:02:56:98:4d:2f:cd:cf:a4:38:f4:87:7c:16:
71:0a:ed:32:d7:93:38:46:1f:6e:48:fc:94:94:6d:
6b:71:12:e6:cf:a1:15:7a:f4:d3:4f:76:07:25:ba:
a9:d5:2e:b5:74:6f:60:f7:09:75:32:4a:98:7e:aa:
f1:d4:0b:c1:15:ff:c2:98:36:b1:2d:67:3c:86:6e:
84:51:ca:96:39:b9:68:65:6d:38:8d:8f:c8:7b:f9:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E8:8A:30:1F:C6:56:C2:B9:A1:57:DB:F3:59:10:DA:7C:88:44:93
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/2OiKMB_GVsK5oVfb81kQ2nyIRJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
83.147.240.0/20
91.186.194.0-91.186.207.255
91.186.212.0-91.186.223.255
94.241.136.0/21
94.241.160.0-94.241.183.255
178.253.12.0/23
178.253.32.0/23
178.253.52.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:85:ba:dd:04:9b:5c:fc:be:88:b0:08:83:fa:9b:52:4f:3b:
29:3d:c1:b7:9e:5f:ed:aa:e7:95:44:fa:33:41:ba:d3:89:6d:
ab:52:cd:68:f1:0d:68:52:7f:ed:49:f8:28:f4:47:e2:38:9e:
69:3e:b2:a7:3a:3f:0a:48:12:a6:90:28:7b:6f:25:af:49:0b:
a0:f7:e6:0d:d2:88:80:2b:1c:79:23:dd:3b:bf:bf:39:a3:69:
b3:c4:95:e2:c5:04:31:f4:16:c3:7c:63:86:3e:55:15:f2:e5:
41:17:45:c5:3f:5d:01:ee:95:83:1e:fe:b6:c6:b9:66:da:e4:
99:3f:2e:77:ad:33:b0:a7:e7:f2:cb:5f:d1:6d:f4:07:fd:ba:
03:4b:21:19:d4:f9:dd:e0:73:30:9c:1c:fb:37:e0:0c:a9:70:
54:69:72:51:4d:0f:23:a1:18:66:70:ab:9f:98:00:17:b3:a0:
84:19:d3:d8:93:d3:34:e4:3f:c5:83:a7:e7:49:ba:4b:78:e5:
cc:39:94:da:59:f4:a7:81:38:7c:27:ee:34:ea:b1:4b:1d:60:
47:42:a3:c7:8b:a0:bc:9a:60:52:0e:e7:6f:9a:ca:b4:79:8c:
77:dd:b6:95:41:62:37:d1:2c:54:ee:fe:8f:60:0b:e8:f5:68:
61:6e:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org