Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/vIMMTaGX53LWObLM1f9HBKvvNlI.roa
File: vIMMTaGX53LWObLM1f9HBKvvNlI.roa (raw, json)
Hash identifier: /42RQYSk/6qddg+MroWLCu4Nz1BwJhyM0Qo+cOi1Uug=
Subject key identifier: BC:83:0C:4D:A1:97:E7:72:D6:39:B2:CC:D5:FF:47:04:AB:EF:36:52
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 093E89C0
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/vIMMTaGX53LWObLM1f9HBKvvNlI.roa
Signing time: Sat 01 Jan 2022 07:52:36 +0000
ROA not before: Sat 01 Jan 2022 07:52:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21161
IP address blocks: 193.138.83.0/24 maxlen: 24
185.195.180.0/22 maxlen: 22
194.110.196.0/24 maxlen: 24
178.249.84.0/22 maxlen: 22
178.249.80.0/22 maxlen: 22
194.121.11.0/24 maxlen: 24
2a02:2198::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155093440 (0x93e89c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Jan 1 07:52:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc830c4da197e772d639b2ccd5ff4704abef3652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:9b:b0:37:6c:f5:db:3d:c1:0a:71:29:24:
fa:4d:00:23:99:57:9d:e4:15:a1:e7:ad:6e:2f:a3:
39:3d:83:76:2e:6c:41:6f:40:21:02:91:bc:b3:7d:
c9:88:67:c8:54:fc:63:36:b1:6d:fb:0c:b0:1a:06:
4b:a4:9e:79:28:0d:c2:75:7f:20:c0:89:8a:8e:39:
07:c1:e5:26:0b:2c:88:af:18:3f:86:d9:64:97:99:
d8:84:8a:af:26:86:39:7e:c8:7f:11:04:9e:dc:02:
dd:9d:fd:c2:87:7f:09:96:0e:9c:f5:34:49:7c:81:
f4:39:41:55:9b:91:5b:40:c0:bd:06:7d:05:c7:70:
1a:2e:3e:ac:d9:0d:63:56:4b:a6:91:86:f1:3e:11:
99:84:71:86:20:7e:db:db:15:f7:86:38:6d:9a:a8:
20:2f:44:cb:06:7b:da:ef:bd:a9:7d:0b:55:5c:06:
dc:a2:1c:33:7f:0e:d0:2f:d7:59:75:7e:1b:4b:e3:
b6:f1:2d:3b:df:94:65:63:86:3e:8e:db:ce:fa:7b:
7d:9f:52:a9:6c:dc:b9:a5:c2:ab:0a:69:70:be:aa:
60:17:2f:95:e0:e5:12:a0:a0:15:16:06:de:e8:58:
e4:ef:24:e5:35:24:af:c9:6c:01:27:8d:38:b2:2a:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:0C:4D:A1:97:E7:72:D6:39:B2:CC:D5:FF:47:04:AB:EF:36:52
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/vIMMTaGX53LWObLM1f9HBKvvNlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.80.0/21
185.195.180.0/22
193.138.83.0/24
194.110.196.0/24
194.121.11.0/24
IPv6:
2a02:2198::/32
Signature Algorithm: sha256WithRSAEncryption
2b:e1:f6:1d:8a:67:cb:c3:b9:65:61:d5:0f:bc:4d:60:12:ee:
7b:84:7e:37:a5:e0:0b:cc:93:64:1c:fc:b3:25:fd:85:2f:56:
4f:7d:cc:42:e8:50:7c:ff:8e:cd:24:67:36:f3:56:3f:99:8b:
34:14:9c:35:06:11:ae:8a:82:66:17:3b:f7:99:26:f2:ab:3b:
0d:97:c0:b8:65:58:9c:5f:7d:01:53:1e:df:57:7e:71:18:98:
87:50:cc:b8:ec:91:ce:68:03:3b:87:f5:b7:24:73:5e:1f:0f:
e2:19:e3:73:ce:fd:94:8d:df:b5:55:76:f8:6a:29:48:ff:49:
9a:d9:8e:a1:03:00:e8:f3:c9:1f:a1:52:bf:3c:24:1d:ab:cf:
8e:21:e0:e0:46:ec:d6:be:ac:52:7c:b3:f2:4b:b0:a6:ef:65:
52:21:bc:8c:2a:a7:5f:90:1f:d7:ad:8f:a8:2e:63:51:41:79:
20:60:66:bf:db:7e:7f:d9:55:35:40:ef:49:a0:4b:0e:3c:4f:
73:12:30:09:af:e6:41:5f:9d:a4:59:a6:22:39:3a:40:be:f1:
75:5b:62:0c:05:18:99:be:99:39:3e:f9:51:b3:e9:64:71:bd:
48:22:d7:4c:ff:b8:7f:b1:f3:d9:40:8b:24:62:d4:7e:fb:5e:
2a:fb:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:30 2024 by rpki-client on console-ams.rpki-client.org