Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/A2YoLhTY3IJfCVTIwGFyd4caES8.roa
File: A2YoLhTY3IJfCVTIwGFyd4caES8.roa (raw, json)
Hash identifier: sBRzjODuuksQHeZ+Mlp9j+wOuaxyarJKN4v6iN3rpwU=
Subject key identifier: 03:66:28:2E:14:D8:DC:82:5F:09:54:C8:C0:61:72:77:87:1A:11:2F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 098AF820
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/A2YoLhTY3IJfCVTIwGFyd4caES8.roa
Signing time: Wed 01 Jun 2022 15:57:20 +0000
ROA not before: Wed 01 Jun 2022 15:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 91.186.216.0/22 maxlen: 24
178.253.32.0/24 maxlen: 24
178.253.33.0/24 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160102432 (0x98af820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 1 15:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0366282e14d8dc825f0954c8c0617277871a112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:19:30:0a:43:f7:90:04:10:a1:88:15:b2:
ec:0e:a7:f4:52:68:39:32:6f:ea:5f:fa:0a:0b:39:
ee:fb:18:82:48:bf:77:a4:11:39:f7:eb:56:2a:f0:
31:d2:fc:6f:51:f7:c0:55:36:0c:23:af:8d:92:ac:
e7:82:cb:33:6d:e6:a6:ff:8c:53:00:4c:cb:4b:56:
47:0b:ed:44:3d:0e:aa:fa:81:bc:a9:a2:e9:7d:87:
5f:dc:27:bd:46:6d:d1:17:75:22:50:cc:91:fd:5c:
4a:ca:5c:b6:b5:2a:6e:86:dd:24:87:14:49:a9:b4:
da:0b:65:f2:fd:24:3a:12:dc:a1:48:7f:84:cd:f7:
df:cb:bf:ea:71:8a:46:a9:ff:cb:da:87:c7:eb:99:
42:16:e4:f8:69:46:37:b4:98:32:a8:5e:64:3a:a3:
05:fc:44:6a:7b:a2:45:9f:92:e1:7e:f0:e7:6e:76:
ea:ad:a3:64:eb:5b:f6:6a:ea:61:49:c3:f5:a2:ad:
0a:cc:f4:ee:f2:a4:32:44:56:d6:a1:3f:5b:a6:f3:
5f:29:07:11:ae:1a:94:72:b3:55:23:8b:59:a1:23:
b9:31:ce:4d:74:aa:c1:f6:ed:8b:7e:f8:85:dd:04:
d9:5d:e6:d6:9c:b7:22:72:1a:e5:77:28:70:4f:14:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:28:2E:14:D8:DC:82:5F:09:54:C8:C0:61:72:77:87:1A:11:2F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/A2YoLhTY3IJfCVTIwGFyd4caES8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.240.0/22
83.147.252.0/22
91.186.216.0/22
178.253.32.0/23
Signature Algorithm: sha256WithRSAEncryption
24:7b:72:34:7a:1c:a4:ea:9e:67:59:84:a7:61:12:95:24:59:
ff:2f:f1:6f:c1:4b:2d:2d:94:0b:90:b1:a3:96:dd:7b:6c:d2:
fe:9d:8d:94:c2:2f:4f:0e:64:47:e4:f7:39:0e:2e:84:55:c0:
ea:05:7b:bd:25:ec:d6:29:43:56:3e:64:e0:31:e0:7b:32:46:
32:a0:f3:19:81:f5:30:55:14:15:be:a7:4d:e2:71:17:79:e1:
98:e8:54:f6:e8:96:d3:0e:46:26:ce:13:d4:41:7a:98:13:e8:
16:de:ae:fc:e4:09:ca:f0:21:00:f3:cd:da:19:01:bd:1f:65:
e7:b8:f9:01:49:a9:48:64:54:c3:b8:4b:39:a9:15:b9:77:94:
80:11:14:19:6e:bc:d7:92:81:40:8c:be:ea:74:cd:6d:a8:32:
16:d6:1d:56:16:72:24:ea:f7:62:98:29:a6:f0:da:50:f6:0b:
ad:75:e1:24:30:16:90:9e:af:a1:c7:c2:46:a0:9d:22:e8:9b:
30:8c:7a:2a:4c:ca:9b:f5:ec:60:e2:c1:68:44:90:0d:0e:ab:
15:ce:8c:20:01:6c:b7:10:fe:14:91:8b:62:00:95:ed:b8:fe:
c3:63:31:d4:e7:5c:23:46:cb:b8:f5:9c:30:6d:fb:d6:c3:5b:
7e:32:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org