Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/SVdAa59R62PJwOQqVEcGtSC-W1w.roa
File: SVdAa59R62PJwOQqVEcGtSC-W1w.roa (raw, json)
Hash identifier: wqkD8zW45GGIHXSE6Wjr/5bPJwIxK1t4YRCVAUhIi7k=
Subject key identifier: 49:57:40:6B:9F:51:EB:63:C9:C0:E4:2A:54:47:06:B5:20:BE:5B:5C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0181F38860DD942135474CD91F088380DE22
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/SVdAa59R62PJwOQqVEcGtSC-W1w.roa
Signing time: Tue 12 Jul 2022 17:50:09 +0000
ROA not before: Tue 12 Jul 2022 17:50:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 91.186.220.0/22 maxlen: 24
178.253.40.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f3:88:60:dd:94:21:35:47:4c:d9:1f:08:83:80:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 12 17:50:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4957406b9f51eb63c9c0e42a544706b520be5b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:d4:dc:cd:5d:64:3d:17:9a:32:cf:c9:13:
83:16:26:a6:6f:e4:70:4f:7c:5d:57:79:64:d7:52:
78:42:f4:cc:15:c5:7e:38:d9:ca:5b:c3:42:ad:a3:
8c:0f:53:46:3b:c9:fc:cc:b3:15:58:52:17:24:04:
6f:c1:c4:3f:3d:3e:e4:20:80:14:cf:04:53:dc:4d:
c6:4d:bf:96:52:1d:db:19:9d:2e:e4:eb:1e:2a:06:
b4:08:2e:47:87:42:db:d7:c1:a7:b9:58:86:58:ad:
71:d2:41:a9:4e:1f:33:0a:97:58:61:dd:f0:88:64:
dc:99:fb:28:58:10:86:08:b8:5c:48:5e:4f:20:7c:
19:a8:8c:35:ae:b7:10:0a:e0:be:33:2c:4a:ca:77:
b9:02:e8:c1:45:40:d1:9e:3f:de:23:b1:11:ce:f2:
fb:b2:5d:d7:c5:22:32:6e:b5:80:a6:ab:e2:fc:db:
e8:c0:cb:10:3c:b3:f2:45:e2:12:18:d0:59:e9:a9:
52:38:62:82:c3:4c:52:74:a1:d8:2a:15:a7:ad:2a:
40:bd:0d:29:8e:e6:35:52:66:d4:48:94:90:1f:a7:
93:93:4e:fb:8f:99:fa:f3:e7:2c:87:0c:00:d0:38:
99:5f:3c:17:79:5e:1d:52:46:b5:75:1f:af:19:d8:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:40:6B:9F:51:EB:63:C9:C0:E4:2A:54:47:06:B5:20:BE:5B:5C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/SVdAa59R62PJwOQqVEcGtSC-W1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.220.0/22
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:f1:92:a3:c9:49:fc:e2:0a:cd:57:ca:16:f6:9d:70:7c:13:
b0:bf:53:bf:48:3d:1a:db:f6:62:c3:54:81:a1:b9:c1:70:e0:
54:f7:0a:2e:8a:b1:be:ec:5a:8c:a4:95:e5:68:90:dd:ed:bf:
3e:e5:98:4d:41:92:fa:50:f9:42:93:70:0a:5d:d1:f9:2b:80:
92:20:34:f3:98:09:11:83:fc:be:8a:82:f4:8e:7e:35:ad:6f:
a9:2c:b1:3a:2d:85:17:e1:19:4c:f8:f8:c2:bf:6e:93:b2:7a:
50:2c:78:95:76:d8:54:c1:0b:26:7b:82:50:48:a3:fa:7e:71:
f8:e0:5d:af:92:61:c3:2e:73:0d:bd:19:cf:e5:f5:58:26:9b:
10:91:a1:ec:b6:08:19:87:93:47:d5:44:e5:0e:c8:28:2d:f9:
b7:da:e4:f6:64:d4:ea:12:02:0d:57:b6:17:bf:74:ff:5e:d4:
72:88:ee:1f:15:19:7e:c9:b8:3e:8b:2f:40:3d:ce:5d:05:58:
39:72:76:61:ec:2d:2d:20:93:ca:c3:c5:21:10:45:e4:36:5a:
14:ca:87:1f:ac:81:94:36:00:23:69:44:3c:17:38:49:60:1c:
77:6a:91:a7:fb:72:b9:e6:0a:63:5a:67:12:1f:e0:f1:ab:84:
fd:86:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org