Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/gOIYWKedDW6zQ_mS-MjDDisj6h4.roa
File: gOIYWKedDW6zQ_mS-MjDDisj6h4.roa (raw, json)
Hash identifier: TSxXzbskbwT5aZ3BFA2wiEoz7KN1Ysc6VPUfDhRvD24=
Subject key identifier: 80:E2:18:58:A7:9D:0D:6E:B3:43:F9:92:F8:C8:C3:0E:2B:23:EA:1E
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 1A8A5D
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/gOIYWKedDW6zQ_mS-MjDDisj6h4.roa
Signing time: Tue 26 Apr 2022 07:26:15 +0000
ROA not before: Tue 26 Apr 2022 07:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8376
IP address blocks: 86.108.0.0/17 maxlen: 24
46.185.128.0/17 maxlen: 24
79.173.192.0/18 maxlen: 24
185.98.220.0/22 maxlen: 24
92.253.0.0/17 maxlen: 24
217.23.32.0/20 maxlen: 24
194.165.128.0/19 maxlen: 24
149.200.128.0/17 maxlen: 24
213.186.160.0/19 maxlen: 24
94.249.0.0/17 maxlen: 24
37.202.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739357 (0x1a8a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Apr 26 07:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80e21858a79d0d6eb343f992f8c8c30e2b23ea1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:5e:d6:4e:f2:f6:1b:c3:6b:36:13:a5:5f:
af:f8:8a:9e:35:4b:01:d9:67:06:e3:60:94:af:6e:
04:a3:10:8e:0b:0f:39:ce:db:9c:70:f5:46:79:0d:
eb:df:51:ee:b1:44:29:1a:a4:a3:c4:f7:de:dd:8d:
d5:90:a0:fe:f4:c3:04:d0:9d:e5:2f:8a:85:d7:cc:
2c:a2:7b:37:1f:38:81:ec:93:f0:2e:2a:2c:6c:45:
29:ca:ce:c8:bb:61:f0:3a:0f:3b:7e:50:a3:2c:77:
1b:83:0b:b3:cf:e9:4f:93:68:0d:12:79:06:d3:80:
b4:61:c9:8c:10:c5:04:5a:12:8d:d8:5c:56:a1:84:
67:37:db:ec:bc:03:b6:c3:ac:ab:6a:00:43:e5:74:
ee:08:a5:52:2e:ab:f5:2e:10:51:49:96:38:bc:15:
84:45:bb:4e:46:dc:67:2a:30:7c:70:8f:d5:35:a4:
b5:a9:95:fa:87:97:33:6b:6e:63:71:88:8b:98:5d:
ec:f0:8e:7a:d4:72:a6:e8:71:03:9c:c3:4f:63:1f:
23:1a:64:8e:fd:be:0c:95:9f:96:44:80:5f:23:33:
68:84:e2:30:3e:89:e6:7a:f6:e2:c6:fe:cf:4e:27:
1b:4a:3b:cb:88:92:d0:f7:79:86:b6:b0:b0:60:f0:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E2:18:58:A7:9D:0D:6E:B3:43:F9:92:F8:C8:C3:0E:2B:23:EA:1E
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/gOIYWKedDW6zQ_mS-MjDDisj6h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.64.0/18
46.185.128.0/17
79.173.192.0/18
86.108.0.0/17
92.253.0.0/17
94.249.0.0/17
149.200.128.0/17
185.98.220.0/22
194.165.128.0/19
213.186.160.0/19
217.23.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:8f:89:7f:63:0d:14:d8:31:25:56:8c:8f:38:13:b9:50:97:
ce:17:51:84:01:31:a9:f3:1a:1d:c4:ab:71:76:4b:dd:16:5b:
55:d6:ee:64:41:64:36:3c:aa:01:9b:59:b5:54:bc:42:c1:df:
dc:ec:42:a7:3d:70:9c:ac:99:3b:ed:a6:b7:f0:0c:bd:4e:aa:
61:16:01:c6:e4:86:c2:50:9c:cf:af:a2:f9:d6:6d:02:72:f3:
a7:0c:bd:1a:73:f3:5e:39:83:da:bc:20:05:d0:71:1a:a9:98:
3d:3c:d8:01:6a:6b:4c:c3:bc:1c:0c:ef:77:57:85:83:0b:ea:
f9:f4:b1:c3:c3:60:4a:d4:8f:17:c5:b8:fc:3f:11:42:a8:e9:
05:b5:71:a2:df:59:91:c3:a0:16:40:d7:9b:20:b0:d9:8a:dd:
55:6c:0e:ac:5e:3c:9f:d3:98:f9:2d:66:85:0a:4a:39:59:eb:
bc:5f:ad:28:7a:39:af:43:56:5b:9b:6c:b8:9d:a9:a7:5f:82:
0f:0d:ba:0a:7e:c7:df:8d:d7:47:4e:8d:8b:d5:71:22:cf:b4:
97:c5:97:de:c2:ae:84:6a:3e:5c:a5:3a:8c:40:1a:93:da:fb:
2b:5c:f3:dc:f3:7b:2b:45:17:27:f2:e9:58:3a:a8:30:91:c6:
88:a2:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:44 2024 by rpki-client on console-ams.rpki-client.org