Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/qr4KcHUlLvUOTnvCh_w-U7IcxwU.roa
File: qr4KcHUlLvUOTnvCh_w-U7IcxwU.roa (raw, json)
Hash identifier: bOFcUAlpZlPOQpKOLpqM0c2A1qUSMX4eN8EMy6ksv9U=
Subject key identifier: AA:BE:0A:70:75:25:2E:F5:0E:4E:7B:C2:87:FC:3E:53:B2:1C:C7:05
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09780E2C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/qr4KcHUlLvUOTnvCh_w-U7IcxwU.roa
Signing time: Wed 25 May 2022 14:51:13 +0000
ROA not before: Wed 25 May 2022 14:51:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.241.176.0/21 maxlen: 24
91.186.196.0/22 maxlen: 24
91.186.194.0/23 maxlen: 24
94.241.136.0/21 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.212.0/22 maxlen: 24
91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
94.241.160.0/21 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.216.0/23 maxlen: 24
83.147.222.0/23 maxlen: 24
178.253.32.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
178.253.38.0/23 maxlen: 24
83.147.232.0/22 maxlen: 24
178.253.52.0/23 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158862892 (0x9780e2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: May 25 14:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aabe0a7075252ef50e4e7bc287fc3e53b21cc705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:85:9a:b4:5e:22:d2:a7:74:d9:2a:a0:c2:
8e:f2:8b:8d:99:7f:d0:27:ae:c1:a5:cb:cc:f3:7a:
d2:74:e2:a6:8b:ab:cc:f0:44:73:78:bd:d9:5f:c8:
4b:fe:44:e2:28:9f:90:00:dd:88:8c:9e:a4:5c:32:
b9:60:27:04:9d:19:7b:d9:cd:88:35:1e:ea:a3:05:
f6:1d:11:f0:8a:b6:d6:97:f1:63:99:ce:67:2e:9b:
ef:27:23:c2:f0:57:68:54:82:aa:37:23:b2:72:b2:
2c:e6:5c:ae:66:fb:09:cc:f3:56:0c:a3:8e:8e:9a:
d7:34:ee:d8:a8:cd:71:b6:af:6f:91:e1:bf:76:52:
bb:e5:a3:d7:c0:7b:22:49:07:5c:42:a3:59:90:42:
6e:aa:e5:06:d9:ea:0f:26:bb:66:4b:be:f6:a1:92:
ba:9d:55:68:c8:a5:66:ae:49:73:5a:05:5b:06:79:
56:e2:d0:cb:da:78:61:ae:a5:a8:41:46:e2:9b:03:
00:45:98:9b:5b:ca:51:11:cd:5b:44:5a:f3:8d:00:
a4:3b:7d:8f:eb:ad:ab:af:6c:2e:bf:f8:59:2e:de:
36:35:70:1b:b5:54:8a:3b:da:c8:74:56:c4:46:ca:
37:13:af:0d:dc:b9:17:35:98:4c:9c:28:4d:03:12:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:0A:70:75:25:2E:F5:0E:4E:7B:C2:87:FC:3E:53:B2:1C:C7:05
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/qr4KcHUlLvUOTnvCh_w-U7IcxwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/23
83.147.222.0/23
83.147.232.0/22
83.147.248.0/22
91.186.194.0-91.186.203.255
91.186.212.0-91.186.223.255
94.241.136.0/21
94.241.160.0-94.241.183.255
178.253.32.0/23
178.253.38.0/23
178.253.44.0/23
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:7f:86:14:26:c2:d5:f5:50:f8:e7:86:db:d4:ca:74:2f:87:
35:cb:b5:99:b9:cd:d9:14:1b:65:f9:15:f2:fc:25:42:fa:3b:
54:b8:51:00:21:b5:a0:35:e6:9f:81:1c:ab:79:84:dc:76:17:
fb:a4:e9:bf:ea:85:41:ce:d3:bd:63:bd:b6:2d:2c:65:ae:ec:
2e:95:a3:39:ba:a5:a4:12:52:76:42:70:26:7f:9e:d9:12:b2:
a6:91:01:d0:6e:98:93:0f:b4:fc:13:e4:d3:f4:6a:88:23:b4:
65:4c:70:92:90:bc:50:d6:0e:c1:bb:c4:55:a9:ed:eb:ad:de:
b9:13:f5:32:f5:24:0e:8d:ec:bd:bf:cb:45:7b:7c:05:f5:69:
46:fa:2e:db:f4:0b:c7:65:38:d9:89:93:dd:94:cc:99:75:fb:
7e:75:79:9e:9a:b1:ca:22:6f:bd:2c:a5:49:c6:e0:3f:a9:91:
d7:5f:a2:de:92:d4:dc:7e:84:6e:f3:2f:cd:68:cc:82:67:1e:
18:bb:47:11:63:e4:3d:5b:02:94:6e:c3:e6:20:14:0c:ad:83:
c0:3a:e3:64:f6:45:80:e4:73:e2:b0:63:3c:54:9d:58:57:52:
2a:9e:8a:97:36:60:af:3c:1c:e3:5e:85:62:f2:56:d8:41:12:
da:31:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org