Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/ivgCfpidGESxI-mJZyYi4myyaJo.roa
File: ivgCfpidGESxI-mJZyYi4myyaJo.roa (raw, json)
Hash identifier: VMbiDJtKnvU6oj3m2tVvInUK0Vfb/h47F6qNI9FlDmQ=
Subject key identifier: 8A:F8:02:7E:98:9D:18:44:B1:23:E9:89:67:26:22:E2:6C:B2:68:9A
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 0183C7CE610CF4D9420CB673380189820E8F
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/ivgCfpidGESxI-mJZyYi4myyaJo.roa
Signing time: Tue 11 Oct 2022 16:08:54 +0000
ROA not before: Tue 11 Oct 2022 16:08:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213260
IP address blocks: 87.238.28.0/22 maxlen: 22
80.249.32.0/20 maxlen: 20
89.249.176.0/21 maxlen: 21
80.67.112.0/20 maxlen: 20
87.238.0.0/20 maxlen: 20
46.232.144.0/21 maxlen: 21
87.238.16.0/21 maxlen: 21
87.238.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:ce:61:0c:f4:d9:42:0c:b6:73:38:01:89:82:0e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Oct 11 16:08:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8af8027e989d1844b123e989672622e26cb2689a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:47:dc:21:01:ff:0a:06:e5:4e:7c:1e:a7:
3f:5f:d3:99:8e:2c:75:b8:5d:5a:2d:98:51:52:ab:
3b:33:1c:84:26:68:7e:47:43:f4:f6:da:7f:3f:37:
2a:c5:10:8e:5c:cf:02:51:8d:bc:1d:40:44:3b:a3:
77:ba:75:ec:e5:92:c4:93:7c:da:b2:02:b3:c6:cf:
bc:cd:7e:ad:7b:12:55:af:55:15:36:36:9f:93:89:
c4:0c:d5:bf:ad:43:58:7d:e3:3f:dd:5f:58:49:df:
9f:de:1f:fa:2b:4e:da:1f:0a:11:8c:bb:72:b5:71:
94:f6:1b:19:53:cd:86:78:4b:98:3a:34:8e:e5:fc:
05:a5:95:80:92:84:b5:2d:a4:41:80:ad:97:41:cb:
cc:f2:e9:13:a3:c0:e4:cc:d8:b4:29:09:5c:cd:ff:
9a:73:a9:3e:d5:8c:aa:1a:4a:c7:f8:4c:d4:7c:e3:
86:c0:ee:47:50:9a:29:87:2f:af:63:24:56:88:1e:
77:6a:0b:01:06:5a:9f:48:aa:7b:b4:58:1e:c1:a8:
6d:7f:23:4f:e5:27:ae:10:7e:0e:f4:c9:44:6d:59:
e1:d0:e2:a3:70:36:38:10:32:a0:89:04:14:71:a3:
25:ea:f4:0a:e0:3b:6f:a4:06:38:f3:04:35:ae:54:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F8:02:7E:98:9D:18:44:B1:23:E9:89:67:26:22:E2:6C:B2:68:9A
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/ivgCfpidGESxI-mJZyYi4myyaJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.144.0/21
80.67.112.0/20
80.249.32.0/20
87.238.0.0/19
89.249.176.0/21
Signature Algorithm: sha256WithRSAEncryption
de:68:d2:5b:4f:2c:0a:d7:0d:d5:2f:60:99:f8:8e:b4:c8:8a:
23:49:d3:5d:ae:78:9c:a2:7e:a6:8e:86:0a:26:72:32:1c:11:
ea:2b:66:39:21:0c:6c:c0:5f:02:3a:00:b7:bc:fd:79:a6:f6:
a3:a9:9d:68:21:4b:d5:ff:3d:c5:df:2f:d9:f6:a3:9b:7f:89:
2e:07:ae:26:80:8b:cd:e9:c4:10:7f:ac:4f:33:fc:b2:b4:a5:
3b:70:6c:1d:7a:25:be:8f:3e:88:e1:16:fd:3c:6e:b2:ca:d8:
68:11:64:f9:b8:0f:fe:63:5d:7b:72:ea:9b:7c:18:81:df:2f:
e4:72:5b:fa:28:57:ab:d0:05:d1:9a:1c:c3:4d:cf:83:74:cc:
0d:ff:36:35:1b:8c:87:84:1d:f0:27:bf:66:95:06:0c:48:af:
52:35:e1:d8:81:b9:10:0a:33:02:51:bc:d4:fa:55:c1:6c:12:
08:d5:f1:d0:d1:c4:de:54:21:09:3f:56:78:8f:a5:71:94:dd:
b7:a8:50:af:51:7f:0a:86:4d:50:a7:15:12:5a:88:25:1b:82:
cc:9c:2e:99:73:c3:ff:5c:0f:7b:1d:1d:e9:0e:cb:f4:49:f1:
4f:36:4d:0c:b8:77:0b:76:8a:38:ab:4d:57:7b:39:55:1c:3e:
8b:9b:4c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:59 2025 by rpki-client