Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Hb4p1nKt9JcJ6BMfiEOwhJZ_rNI.roa
File: Hb4p1nKt9JcJ6BMfiEOwhJZ_rNI.roa (raw, json)
Hash identifier: 5AtMcjvQ4b8FwZram2231bVvxRZD76/ZcVQxRWD22mA=
Subject key identifier: 1D:BE:29:D6:72:AD:F4:97:09:E8:13:1F:88:43:B0:84:96:7F:AC:D2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01825F555214A1D250DB040733558F13B585
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Hb4p1nKt9JcJ6BMfiEOwhJZ_rNI.roa
Signing time: Tue 02 Aug 2022 16:13:23 +0000
ROA not before: Tue 02 Aug 2022 16:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.160.0/21 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.216.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:55:52:14:a1:d2:50:db:04:07:33:55:8f:13:b5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 2 16:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dbe29d672adf49709e8131f8843b084967facd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:f7:b4:34:79:cf:9a:b5:cf:22:b7:e6:cb:
77:e4:5a:5a:4e:35:9c:07:74:37:a4:05:59:c6:d6:
4a:5a:79:87:2d:1a:96:93:62:52:e7:56:6c:63:98:
61:33:05:dd:0e:20:8f:c0:4d:d4:93:76:c1:31:37:
38:58:9d:37:7f:18:28:dc:1e:8a:bc:df:d7:0e:5a:
14:42:7e:11:9a:8a:36:23:c4:07:41:f5:77:c4:80:
21:a3:71:3f:ba:9f:2a:93:e3:15:df:4a:82:c4:11:
26:9a:2c:8f:dd:a0:9f:d9:88:e8:ff:27:92:55:1e:
11:f5:a7:a7:e7:fc:35:00:be:cc:8c:df:e3:c6:01:
ed:55:2a:d7:23:8a:3b:06:fb:5e:c9:31:c3:7a:e2:
37:82:4e:0d:98:c7:16:ef:7c:c1:27:7e:05:5c:65:
81:a9:d0:a7:0c:e4:f0:f7:3a:31:4a:11:73:75:a3:
01:60:23:d6:2c:29:3c:b0:42:a3:a4:a1:67:2a:07:
2c:42:ab:5b:19:98:4c:b8:0c:eb:21:a3:6d:9e:d4:
b3:24:4e:78:47:a1:30:74:38:c7:e2:df:ab:76:e9:
53:85:fe:6c:c4:50:be:72:de:de:3c:30:3a:5b:7f:
f1:26:09:ac:ae:47:8a:df:96:03:81:33:6c:9a:03:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:29:D6:72:AD:F4:97:09:E8:13:1F:88:43:B0:84:96:7F:AC:D2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Hb4p1nKt9JcJ6BMfiEOwhJZ_rNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
91.186.194.0-91.186.203.255
91.186.212.0-91.186.219.255
94.241.136.0/21
94.241.160.0-94.241.183.255
178.253.31.0-178.253.33.255
178.253.44.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:1d:51:6e:44:53:ae:4e:28:46:66:52:b4:1e:2a:e3:85:8f:
65:b0:77:44:be:91:1f:9d:03:6f:04:81:b3:8f:f6:28:e5:49:
5a:d1:c9:64:ae:37:99:59:6b:81:9a:1d:a9:ce:a1:3a:b6:fb:
9a:b7:11:a9:e7:eb:b3:1b:e8:a2:17:96:da:f1:8d:73:42:9f:
da:42:41:af:d7:c0:94:86:6b:8f:24:21:74:d6:1e:91:58:02:
e7:27:15:fb:56:3c:c5:81:6b:d3:71:2d:67:9e:78:f3:4f:b4:
16:d5:6a:ba:45:f5:ae:f2:81:06:7b:1f:b8:1b:b0:a4:92:19:
46:2f:af:fd:b2:8a:4f:40:21:ad:74:6f:f1:1f:a6:a1:29:11:
c0:6a:7c:06:29:57:8e:b9:fd:12:ec:16:6f:8e:f8:50:bc:9c:
a0:ac:f1:43:61:97:21:fc:26:34:5a:9c:9c:1a:1f:c9:73:7f:
ae:20:de:31:1a:ee:e0:e5:dc:ab:27:8d:d1:26:5e:d0:af:4f:
df:62:85:bf:f1:a4:35:7a:70:6b:1c:11:81:56:1f:04:25:b2:
94:59:43:f5:b5:38:d6:20:7a:7f:f6:1d:ab:3a:35:0d:2c:9c:
6b:8a:64:d9:b0:35:c5:04:da:40:15:4b:09:b0:8b:da:37:8d:
a6:b0:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org