Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/aDRog6CHZS9iVyyeZkKIKv32-m0.roa
File: aDRog6CHZS9iVyyeZkKIKv32-m0.roa (raw, json)
Hash identifier: R+pC/iowr1SsIba7I+S3/BkcFIjjlJ45yya6FWsZolk=
Subject key identifier: 68:34:68:83:A0:87:65:2F:62:57:2C:9E:66:42:88:2A:FD:F6:FA:6D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 092C40C6
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/aDRog6CHZS9iVyyeZkKIKv32-m0.roa
Signing time: Fri 29 Apr 2022 20:12:39 +0000
ROA not before: Fri 29 Apr 2022 20:12:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
94.241.160.0/21 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.12.0/23 maxlen: 24
83.147.216.0/23 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
178.253.38.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
178.253.55.0/24 maxlen: 24
83.147.252.0/22 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153895110 (0x92c40c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 29 20:12:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68346883a087652f62572c9e6642882afdf6fa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:72:4c:ce:11:62:25:fb:db:d7:63:9b:6a:
ee:81:fe:dd:9a:33:41:8e:90:61:c1:4e:bb:cc:2a:
07:35:02:fc:32:17:96:de:fa:db:f1:20:ff:57:af:
7c:bc:fc:fa:71:55:9b:8a:da:91:03:e8:5d:b7:3b:
95:ab:12:65:73:be:0d:53:a2:60:3c:87:78:f9:be:
6d:06:51:50:5b:f0:98:4d:56:35:80:5e:16:a4:cb:
71:85:fe:32:7a:01:db:0a:3d:7b:83:e8:0a:1e:ba:
e6:47:8f:c0:57:9d:86:a8:dc:9d:e4:f0:d0:f2:2d:
11:58:a7:74:47:27:c9:c7:1a:13:31:64:ed:35:7e:
08:a3:d7:ed:ba:ef:4d:4b:c6:0c:0f:a3:3c:29:bf:
25:c6:dc:fe:6f:5b:6c:b2:5b:be:52:2c:b4:0a:a3:
20:0f:ad:8f:6c:b3:1c:d5:3a:93:ef:f8:68:f0:54:
db:d8:5d:bf:b8:ce:8b:1a:80:18:36:a0:5f:7b:55:
e7:df:82:c5:68:17:cf:0b:ab:76:07:07:57:2d:23:
24:51:b4:3d:b4:6a:81:7b:5d:f6:bf:83:97:0e:79:
57:b8:5a:e0:ed:c6:10:91:44:eb:cc:08:a7:77:c6:
43:6b:9d:8e:52:c9:85:f1:15:b5:b4:b9:e8:84:c7:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:34:68:83:A0:87:65:2F:62:57:2C:9E:66:42:88:2A:FD:F6:FA:6D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/aDRog6CHZS9iVyyeZkKIKv32-m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
83.147.240.0/22
83.147.248.0/21
91.186.194.0-91.186.203.255
91.186.212.0-91.186.223.255
94.241.136.0/21
94.241.160.0-94.241.183.255
178.253.12.0/23
178.253.32.0/23
178.253.38.0/23
178.253.52.0/23
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:55:83:cf:6d:ae:ba:fb:c6:ac:68:45:b3:96:12:dc:9d:71:
31:b5:54:66:e2:d0:cb:0f:2d:35:0a:9e:98:f4:c0:d4:5c:35:
1a:1b:f2:64:7f:a0:05:10:6b:f2:1c:4e:c6:b6:16:71:8f:94:
70:ff:2b:e7:a9:93:3c:61:1b:3d:de:d2:37:b9:9a:2d:fe:63:
b9:10:9f:b6:36:ae:6a:37:03:0a:1e:49:30:9e:a6:57:dd:2c:
7c:c4:30:1b:48:f2:8c:a1:c4:a4:0e:c6:80:9b:68:35:20:bc:
97:05:38:46:a4:22:b2:db:c6:1f:90:a5:10:75:14:78:09:cc:
45:e5:87:7e:86:ea:34:1d:1c:72:5a:86:f4:a7:19:23:d2:1f:
a2:bf:61:77:6f:22:c8:98:1c:a8:70:2c:05:16:26:5b:02:15:
10:cb:6e:bb:84:00:f9:c8:ab:42:1c:b8:72:2a:3a:c3:0d:74:
14:db:27:58:94:64:ac:61:53:68:1a:1d:b1:ed:a2:8c:30:0a:
f8:4a:19:23:d2:b2:04:41:94:9c:91:6b:e3:b4:d8:5e:9f:6f:
23:36:3e:6f:b1:cd:f2:1a:99:ca:10:06:be:77:f7:11:8c:3b:
72:b9:85:af:2a:7c:08:4d:2b:18:bc:e5:b4:6c:d8:01:0a:ad:
f2:f0:6b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org