Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eawTWfjV2PGq0yimh8Vk8rVaoGA.roa
File: eawTWfjV2PGq0yimh8Vk8rVaoGA.roa (raw, json)
Hash identifier: bohH7SncoOYa3uNLcuqqgWJcYuX5lUEcjYHFi54JG4k=
Subject key identifier: 79:AC:13:59:F8:D5:D8:F1:AA:D3:28:A6:87:C5:64:F2:B5:5A:A0:60
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09D499DB
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eawTWfjV2PGq0yimh8Vk8rVaoGA.roa
Signing time: Fri 01 Jul 2022 08:52:02 +0000
ROA not before: Fri 01 Jul 2022 08:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.160.0/21 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.216.0/23 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
178.253.38.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164927963 (0x9d499db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 1 08:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79ac1359f8d5d8f1aad328a687c564f2b55aa060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:9a:65:97:20:fb:32:ce:3a:63:8c:51:d3:
1c:4d:17:0f:e4:05:0a:3b:13:95:90:d2:ae:c7:9d:
5c:4d:19:6e:0f:e5:7f:04:57:3b:ba:3c:bb:ee:89:
d6:fb:de:6a:b2:16:33:2c:cb:80:74:a5:8a:a0:ac:
be:08:b4:35:60:0b:b9:34:b0:ba:75:17:76:9e:25:
19:ba:0d:d6:27:78:64:c0:9a:78:ec:c6:0a:59:db:
50:26:63:76:66:52:08:ed:32:19:fb:5a:60:c6:02:
69:88:17:8c:a5:93:1a:a1:ae:e4:62:2e:8a:21:4e:
04:53:46:62:3c:2a:7e:33:9b:5b:6b:f6:8b:ee:e4:
02:d6:5d:8c:b5:70:05:20:0a:45:0d:f8:73:8e:c0:
fb:d1:6a:08:2c:71:59:47:8f:dd:24:a2:82:d5:4f:
99:cd:ff:4a:ea:37:23:05:22:3e:68:fc:2e:b8:a1:
3d:b0:3a:38:43:81:f8:36:1c:c6:83:d5:16:ed:1c:
6e:24:ab:ce:0b:7e:8d:a6:ef:64:d0:99:df:b2:98:
8e:8d:67:9c:46:d6:a6:41:50:1f:20:2b:8a:1b:c8:
1d:32:bd:1b:b7:dc:02:e5:74:bd:73:12:b4:f7:60:
25:0d:aa:2f:bf:04:a2:44:52:04:e5:37:09:b7:64:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AC:13:59:F8:D5:D8:F1:AA:D3:28:A6:87:C5:64:F2:B5:5A:A0:60
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eawTWfjV2PGq0yimh8Vk8rVaoGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
91.186.194.0-91.186.203.255
91.186.212.0-91.186.219.255
94.241.136.0/21
94.241.160.0-94.241.183.255
178.253.32.0/23
178.253.38.0/23
178.253.44.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:06:ef:10:e7:33:96:8c:4d:7a:39:f9:e6:6c:21:bf:b7:22:
3f:61:97:58:d3:c5:d0:70:62:c6:d3:9a:4e:be:b4:f7:fc:c5:
d7:bc:48:3e:2a:a8:39:98:c7:33:e3:78:45:d5:40:c9:70:34:
05:e1:c2:1f:6a:41:ca:6a:d4:ea:eb:e9:74:50:09:16:e6:89:
be:84:9a:34:fb:f8:ed:07:67:a4:81:48:3c:65:c7:a5:d5:45:
1b:3d:25:22:d7:a4:27:2b:96:82:17:dc:85:fe:0f:08:1a:c1:
66:d1:3f:99:fd:ec:e3:86:81:f1:a8:81:c1:32:ed:d1:98:54:
b0:d0:71:1a:ee:12:44:7e:b1:36:c0:92:6f:df:03:7f:88:45:
b2:f2:8e:5a:99:80:4a:7d:da:b6:73:e5:f3:76:4f:70:f7:81:
c2:dc:77:c7:4e:c7:e6:27:a3:c0:97:b3:f8:1a:12:61:85:9c:
95:ac:45:c7:02:9b:2d:ce:37:99:1d:be:79:08:a3:b7:f2:32:
d2:b5:de:cd:1d:6f:a6:76:2d:5b:40:31:d4:ab:0f:59:40:3c:
fc:49:b5:10:b6:93:f1:9f:ca:27:e6:cf:a7:54:9b:40:d3:fc:
07:4a:d7:7f:dc:40:23:80:bf:07:07:46:9d:63:43:a0:e0:ef:
45:e5:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org