Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/T-PYwt4r3PDvCJRHvbUScrHGg8s.roa
File: T-PYwt4r3PDvCJRHvbUScrHGg8s.roa (raw, json)
Hash identifier: DQWw44ebH1+quBdDfYZ+tTBo9dhUv2xe7DH+U3gykY4=
Subject key identifier: 4F:E3:D8:C2:DE:2B:DC:F0:EF:08:94:47:BD:B5:12:72:B1:C6:83:CB
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 16C8899D
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/T-PYwt4r3PDvCJRHvbUScrHGg8s.roa
Signing time: Sat 01 Jan 2022 10:55:42 +0000
ROA not before: Sat 01 Jan 2022 10:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8248
IP address blocks: 81.186.192.0/19 maxlen: 19
194.63.224.0/20 maxlen: 24
81.186.0.0/17 maxlen: 24
81.186.128.0/18 maxlen: 18
194.63.160.0/19 maxlen: 19
194.63.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382241181 (0x16c8899d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Jan 1 10:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe3d8c2de2bdcf0ef089447bdb51272b1c683cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:ad:9b:4b:09:91:27:46:f9:aa:e1:4f:1f:
04:91:f6:4f:d4:ce:22:29:1f:58:4b:1b:89:70:2c:
10:60:56:b7:1b:f5:b1:d0:b6:38:f8:11:5a:9d:2b:
9e:86:52:21:f7:a8:9f:ed:9a:9b:a4:5c:5b:a7:fe:
e5:0a:e1:47:ff:d4:11:30:02:c1:6c:bb:e7:8f:5c:
2f:db:ee:fa:10:9f:40:93:0f:45:35:24:99:62:2e:
fd:10:d7:4b:7f:f7:5c:27:d0:49:db:57:13:28:a7:
e8:10:b2:7c:2e:89:26:55:c5:c4:46:7b:9a:5b:d5:
a1:1f:5a:e4:15:c0:13:eb:ff:dc:8c:56:be:3b:8b:
e1:5a:7c:50:dc:3d:de:c3:89:6c:72:96:6e:39:13:
f4:73:38:83:dd:cb:5f:e9:c3:69:ef:be:c4:39:cb:
82:f5:c2:f7:2d:38:aa:75:73:5e:6b:52:26:f4:7b:
63:40:33:7c:8b:63:93:57:34:f7:7c:1d:bb:1a:56:
fb:02:04:82:23:b2:02:a3:12:38:b1:84:72:87:72:
fa:c5:d0:4e:fb:a6:b8:97:e3:a5:cd:f7:5f:d3:2a:
ce:40:dc:b7:35:1e:a0:07:1e:49:3a:ce:21:a5:e1:
d4:85:e5:2d:5d:76:1a:ee:40:d7:ae:2c:7d:1c:24:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E3:D8:C2:DE:2B:DC:F0:EF:08:94:47:BD:B5:12:72:B1:C6:83:CB
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/T-PYwt4r3PDvCJRHvbUScrHGg8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.186.0.0-81.186.223.255
194.63.160.0-194.63.239.255
Signature Algorithm: sha256WithRSAEncryption
44:20:ec:b1:8b:1c:1f:9b:59:ff:7e:4b:ed:8e:86:ac:90:6a:
9b:41:8d:37:b0:82:84:ae:58:02:39:d1:59:d2:4b:45:37:f1:
b6:56:9d:25:72:42:08:df:a0:06:7b:98:56:5a:0c:ff:2e:bb:
26:ec:72:e0:85:34:b6:5a:8c:a9:39:2a:79:86:c9:fd:3e:24:
4e:ca:1e:60:c2:eb:9d:f8:29:9d:e0:f7:8f:7a:db:1e:2e:d8:
10:0f:3c:1d:29:41:70:20:5f:e1:7b:bf:f2:7e:b8:f2:9e:7b:
9d:b7:7d:29:94:8e:09:7b:83:66:f4:f9:12:bb:47:f9:69:6a:
03:4d:17:58:b5:0a:de:27:9c:cb:2d:cc:3a:26:57:37:be:a7:
ca:24:89:64:4b:48:f3:93:19:03:8d:56:1c:f9:45:8f:0d:97:
5a:fc:1e:49:d6:83:93:9b:f4:b7:65:d2:60:0c:79:39:10:e0:
ee:46:b8:30:76:6e:92:1e:1c:87:3b:ea:e6:f8:43:ec:e6:59:
14:c8:98:c4:7c:fe:42:9b:79:3c:34:c8:cf:c8:0b:89:59:51:
61:82:69:b8:a1:94:f6:be:a4:0b:bd:9d:a7:b3:07:96:72:c1:
50:0d:37:2a:4a:87:0f:fd:69:d2:f6:ae:77:e9:b7:d2:30:1b:
67:66:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:24 2023 by rpki-client on console-fra.rpki-client.org