Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/pPjosDwYj8mDHxYyiTp0Un42Lag.roa
File: pPjosDwYj8mDHxYyiTp0Un42Lag.roa (raw, json)
Hash identifier: bCcuWFoWjrkt8reDZwK6dwt0aeGBHN/4UPB42bb06a0=
Subject key identifier: A4:F8:E8:B0:3C:18:8F:C9:83:1F:16:32:89:3A:74:52:7E:36:2D:A8
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F2C6883
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/pPjosDwYj8mDHxYyiTp0Un42Lag.roa
Signing time: Thu 24 Feb 2022 19:38:02 +0000
ROA not before: Thu 24 Feb 2022 19:38:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12578
IP address blocks: 185.38.56.0/22 maxlen: 22
46.109.0.0/16 maxlen: 16
195.122.28.0/24 maxlen: 24
81.198.0.0/16 maxlen: 16
78.84.0.0/16 maxlen: 16
195.114.32.0/19 maxlen: 19
194.8.16.0/21 maxlen: 21
194.8.24.0/22 maxlen: 22
195.13.201.0/24 maxlen: 24
80.232.150.13/32 maxlen: 32
84.237.128.0/17 maxlen: 17
195.13.128.0/17 maxlen: 17
80.232.128.0/17 maxlen: 17
80.232.150.0/24 maxlen: 24
95.68.0.0/17 maxlen: 17
87.246.144.0/20 maxlen: 20
195.2.96.0/19 maxlen: 19
195.122.0.0/19 maxlen: 19
87.246.160.0/19 maxlen: 19
62.85.0.0/17 maxlen: 17
195.13.228.0/24 maxlen: 24
195.13.253.0/24 maxlen: 24
195.13.249.0/24 maxlen: 24
87.110.0.0/16 maxlen: 16
91.105.0.0/17 maxlen: 17
2a02:2330::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254568579 (0xf2c6883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:38:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4f8e8b03c188fc9831f1632893a74527e362da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:60:1a:03:17:8e:a8:58:a9:68:4c:ee:32:
be:96:1d:b0:db:92:dd:9e:0c:c3:cb:85:df:74:47:
49:75:73:10:75:fb:8e:6b:f1:7a:11:a2:79:63:51:
e4:6b:99:e5:48:22:47:dd:96:a6:b1:77:4b:75:52:
33:7b:51:41:f6:11:ad:ed:ba:3c:55:df:05:15:2e:
d4:a4:a5:c8:78:29:8b:ea:45:29:fc:eb:34:66:2d:
eb:6c:79:3f:69:fc:06:87:21:9c:e9:8c:bd:36:1f:
eb:86:6a:32:aa:ac:18:4f:94:9a:29:6a:7a:f2:55:
7a:e2:7d:54:ca:8e:e8:dd:b8:22:77:59:25:c3:4b:
f0:4d:df:b9:29:2a:ef:b4:ca:c0:9a:ff:69:23:14:
d7:99:99:cd:a2:c6:47:f8:30:a7:5f:7a:01:6c:b1:
89:7e:6b:67:03:99:ac:c6:93:36:cb:b1:9d:79:a3:
4d:d1:19:36:a6:c5:b6:07:3e:66:7f:ab:fc:2a:e9:
2a:30:86:e5:d7:55:82:22:e5:23:03:3b:49:54:14:
70:75:d9:ad:6d:fb:44:86:71:e1:a4:0b:24:69:da:
51:4d:47:c7:42:34:4e:93:7f:4d:64:0c:ed:9b:14:
fd:3a:5d:bf:4f:b4:ee:26:a4:dd:29:05:7c:3c:58:
39:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:E8:B0:3C:18:8F:C9:83:1F:16:32:89:3A:74:52:7E:36:2D:A8
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/pPjosDwYj8mDHxYyiTp0Un42Lag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.109.0.0/16
62.85.0.0/17
78.84.0.0/16
80.232.128.0/17
81.198.0.0/16
84.237.128.0/17
87.110.0.0/16
87.246.144.0-87.246.191.255
91.105.0.0/17
95.68.0.0/17
185.38.56.0/22
194.8.16.0-194.8.27.255
195.2.96.0/19
195.13.128.0/17
195.114.32.0/19
195.122.0.0/19
IPv6:
2a02:2330::/29
Signature Algorithm: sha256WithRSAEncryption
0d:b9:9f:5a:10:d8:84:a6:42:24:76:89:ca:79:29:3b:01:5a:
a6:11:08:58:f4:c5:b6:1c:2d:fa:a9:a5:4d:03:67:66:e6:59:
1c:b3:e3:77:55:64:77:44:52:db:54:91:b7:3c:e2:ad:f4:78:
50:2a:14:06:7f:1c:09:38:1f:c5:bf:93:b3:ea:5f:df:ca:aa:
d2:3c:a7:4c:9d:ab:f1:85:6f:62:6a:88:ae:00:c7:3a:19:ad:
08:f9:72:41:b7:09:59:29:59:1a:2b:03:19:31:04:1f:1f:05:
91:2a:3d:f7:f7:f8:ba:c7:ad:15:c8:07:7c:75:19:01:64:02:
f6:91:dc:d8:b6:0c:da:fa:16:08:11:40:57:f0:ab:56:74:08:
a8:60:6b:fc:15:97:29:0a:75:ce:ed:33:90:fb:5d:c4:7a:fa:
2c:19:a9:db:75:08:22:1b:3b:fc:a4:b8:09:31:db:e8:78:5d:
a2:5d:5f:ac:31:30:20:df:4e:cc:00:5a:0e:02:82:09:03:67:
db:04:bb:bc:d6:b2:51:47:b9:3b:5b:bf:cd:c2:63:77:93:02:
dd:95:9f:e2:e0:16:4a:7d:5b:a6:46:79:75:cd:58:55:a9:c7:
ff:41:9c:e6:2e:3e:99:a2:54:43:67:b3:9c:70:4e:06:22:e8:
f9:5c:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-ams.rpki-client.org