Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/OlatH7Gf0__Ihwm32JiI_Oad0d0.roa
File: OlatH7Gf0__Ihwm32JiI_Oad0d0.roa (raw, json)
Hash identifier: 0ulivMD1RViqSkDtYCRu7yNiI9YdTT/wHhb5JtEIiVs=
Subject key identifier: 3A:56:AD:1F:B1:9F:D3:FF:C8:87:09:B7:D8:98:88:FC:E6:9D:D1:DD
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CA12618
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/OlatH7Gf0__Ihwm32JiI_Oad0d0.roa
Signing time: Sat 01 Jan 2022 05:04:47 +0000
ROA not before: Sat 01 Jan 2022 05:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.244.222.0/23 maxlen: 23
185.244.221.0/24 maxlen: 24
185.228.227.0/24 maxlen: 24
89.31.219.0/24 maxlen: 24
193.84.135.0/24 maxlen: 24
84.245.48.0/21 maxlen: 21
84.245.58.0/23 maxlen: 23
84.245.56.0/24 maxlen: 24
84.245.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211887640 (0xca12618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a56ad1fb19fd3ffc88709b7d89888fce69dd1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:4a:0f:21:06:3b:55:63:a7:fd:fa:d8:f8:
a7:6b:d3:b1:ce:f8:d2:32:6e:1e:71:63:e8:93:d5:
33:eb:a4:8e:06:f0:bf:d5:5a:c3:8a:ee:18:9a:6b:
f5:f2:21:ec:2e:eb:79:f5:3c:ea:68:ad:12:ae:06:
5d:ea:a2:ab:db:dc:c4:7b:d3:e3:07:78:16:3a:b4:
3e:e2:85:ec:21:d0:cc:4c:77:f0:6c:81:89:e6:ab:
71:90:32:49:37:30:2e:3a:4d:18:23:7d:8d:80:97:
14:19:d0:65:99:29:54:bb:90:71:d3:d6:69:51:65:
2e:49:6d:13:64:73:6b:60:ce:fe:12:ef:c1:48:69:
f1:c9:35:f5:52:32:4b:79:0a:6f:f0:2b:57:6a:c5:
1f:c7:87:9f:6b:bd:06:fa:df:5c:cc:48:44:47:f1:
ac:51:4f:61:5e:62:51:bd:09:ec:57:12:92:a7:3f:
4d:87:cb:e2:08:ef:88:79:d6:f2:a9:6c:d1:f5:81:
11:2c:e1:36:a9:9d:9e:cf:f3:8f:c2:0b:ff:73:de:
2f:d4:d9:e3:84:db:0c:18:f7:f1:00:6c:ae:36:1d:
15:7b:7a:78:3b:5d:7f:14:5a:17:11:45:b6:21:b5:
2d:eb:44:44:a2:da:27:19:57:d5:cf:f5:7e:3b:b8:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:56:AD:1F:B1:9F:D3:FF:C8:87:09:B7:D8:98:88:FC:E6:9D:D1:DD
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/OlatH7Gf0__Ihwm32JiI_Oad0d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.48.0-84.245.56.255
84.245.58.0-84.245.63.255
89.31.219.0/24
185.228.227.0/24
185.244.221.0-185.244.223.255
193.84.135.0/24
Signature Algorithm: sha256WithRSAEncryption
75:51:a8:bc:5f:a3:f4:a6:27:68:00:d0:b3:77:bc:64:2c:e9:
be:dd:0a:4e:88:72:23:61:69:72:d6:42:30:83:38:10:0e:e7:
0a:1f:c3:29:2f:45:3c:2d:81:8b:7f:72:ad:52:7b:55:e0:8f:
69:82:6b:92:b8:8b:0f:c3:54:1c:a6:5d:c0:da:97:29:83:18:
44:92:f4:13:d4:ed:7e:00:91:15:e1:fb:d0:75:5a:f3:b4:ca:
64:c4:39:4c:3a:67:13:e8:68:49:ab:f8:28:37:74:c3:2f:a1:
a6:d2:06:55:3a:5a:60:e9:aa:42:95:47:99:6b:31:37:04:76:
cd:cc:a0:a3:fd:ef:5b:5b:f8:15:d3:df:03:3f:d9:b2:25:1d:
66:1d:11:21:83:35:44:8f:75:90:e3:d8:43:c6:7a:a0:5b:1d:
d0:80:90:4e:d1:58:d2:e5:24:20:f4:91:9d:f1:e1:19:80:f6:
f9:72:e7:5d:ef:68:bf:e7:68:a9:e6:79:d4:5a:ea:71:46:75:
29:d2:39:c8:c4:39:fe:d9:a8:45:0c:56:67:59:2d:be:33:70:
8a:07:92:90:63:84:dc:a6:05:61:c6:fa:70:8c:68:ae:b1:52:
0a:09:cb:c7:6b:ed:7f:07:19:44:1f:6e:82:e7:f8:6f:4b:0d:
f5:d9:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org