Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/IQM28SP3IzBf7rRn0Ck_rBgUPBs.roa
File: IQM28SP3IzBf7rRn0Ck_rBgUPBs.roa (raw, json)
Hash identifier: cNYfRf7ibpNrmrT0pwdASsmB9dPy1sWjYezCE/Ukdlk=
Subject key identifier: 21:03:36:F1:23:F7:23:30:5F:EE:B4:67:D0:29:3F:AC:18:14:3C:1B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0183C3854FCBEE01007516F77F4E9A8B0429
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/IQM28SP3IzBf7rRn0Ck_rBgUPBs.roa
Signing time: Mon 10 Oct 2022 20:10:37 +0000
ROA not before: Mon 10 Oct 2022 20:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.216.0/23 maxlen: 24
178.253.31.0/24 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c3:85:4f:cb:ee:01:00:75:16:f7:7f:4e:9a:8b:04:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 10 20:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=210336f123f723305feeb467d0293fac18143c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:aa:fc:f3:90:48:bc:62:ee:35:3d:91:66:
8c:85:1b:09:1b:09:c5:86:d9:75:d7:c9:3c:4c:36:
14:88:2c:4c:fb:db:6e:98:ca:b9:d1:3e:8a:48:df:
b9:f3:9d:8e:ca:7e:62:65:55:b9:dc:df:99:c3:3c:
fa:fd:5e:33:b6:8b:dd:47:c6:2b:1e:1e:42:16:0f:
dc:eb:0b:36:5f:4a:3b:db:fe:2a:08:11:9e:63:65:
73:9e:21:36:3c:79:a2:d6:8d:1d:4d:2c:7b:f0:2a:
dd:71:39:30:03:3e:5c:4d:5d:94:c3:b2:44:15:41:
c8:9d:8f:11:be:5b:d3:e3:b0:4f:f7:1d:6a:ae:71:
1f:95:02:67:68:71:70:87:5a:03:6c:dc:5d:d7:5c:
23:cb:95:a6:14:27:73:9a:71:7d:52:55:73:f2:fe:
ce:28:73:9f:51:39:c8:f7:1c:70:95:7d:5e:4d:56:
af:6f:ac:89:c6:4b:d8:f2:9e:f9:fd:e9:99:ed:2c:
84:e8:18:bd:bb:7d:dd:85:16:a8:25:86:d9:38:f5:
9e:4c:54:0a:c0:53:1d:64:a8:b0:1a:84:4b:95:eb:
2c:20:72:2c:a0:fe:57:8f:ce:f9:84:74:ff:45:de:
e6:85:cd:9f:cf:81:63:be:b5:0f:30:58:95:b9:ad:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:03:36:F1:23:F7:23:30:5F:EE:B4:67:D0:29:3F:AC:18:14:3C:1B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/IQM28SP3IzBf7rRn0Ck_rBgUPBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
91.186.196.0-91.186.203.255
91.186.212.0/22
94.241.136.0/21
94.241.168.0-94.241.183.255
178.253.31.0-178.253.33.255
178.253.44.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
15:bc:75:f9:d6:bb:b0:72:e7:9f:c4:f9:63:2a:53:ac:6c:09:
69:94:7c:50:a6:42:7c:7f:a8:cd:fa:b7:50:9e:73:60:0a:41:
82:12:74:41:c2:90:23:1c:25:e5:cd:18:20:b0:02:ce:c1:d5:
d5:e2:75:77:e1:35:1e:96:99:03:ed:2f:a1:9d:29:f4:8f:64:
c4:93:57:57:1c:05:8a:61:a4:e3:fa:e1:c4:48:99:c1:bc:a3:
e3:c9:13:42:8f:87:6f:63:b5:71:57:20:54:01:61:ec:a0:de:
91:1a:4c:15:ec:c7:f0:7c:27:1e:80:4c:3d:9c:74:d7:03:46:
77:5c:47:00:2c:b0:7e:cb:5f:bc:84:74:7c:8b:59:cd:ff:c8:
30:82:06:b1:28:aa:25:88:90:4e:37:a2:c0:51:b3:aa:5d:33:
69:0e:ec:26:60:c9:37:ae:cd:f7:b1:5f:23:eb:3e:16:50:d8:
7c:dc:fb:48:84:cf:7a:d7:ff:e7:16:b7:d9:53:06:b0:0d:46:
9b:4c:42:2c:db:68:32:b4:a8:6f:50:22:4f:0d:b8:3e:d4:64:
c0:5a:47:21:fe:ef:7f:02:4a:24:a2:86:e2:9b:68:43:cc:fe:
7b:e3:a9:57:d5:1c:ff:25:ff:4a:0b:22:80:1b:54:bf:a2:69:
8d:41:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org