Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/RXoUhSyHtukW1eDl1VJN1XRQOu8.roa
File: RXoUhSyHtukW1eDl1VJN1XRQOu8.roa (raw, json)
Hash identifier: 1ejfxcqF0smZOivyzhYc1NrXX8oOo46DmagH4JTiL+E=
Subject key identifier: 45:7A:14:85:2C:87:B6:E9:16:D5:E0:E5:D5:52:4D:D5:74:50:3A:EF
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 0182EBB0C1C8492587795BEA652557127A5B
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/RXoUhSyHtukW1eDl1VJN1XRQOu8.roa
Signing time: Mon 29 Aug 2022 22:20:05 +0000
ROA not before: Mon 29 Aug 2022 22:20:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8784
IP address blocks: 83.169.120.0/24 maxlen: 24
83.169.119.0/24 maxlen: 24
83.169.123.0/24 maxlen: 24
83.169.122.0/24 maxlen: 24
83.169.121.0/24 maxlen: 24
83.169.71.0/24 maxlen: 24
83.169.70.0/24 maxlen: 24
83.169.69.0/24 maxlen: 24
83.169.64.0/18 maxlen: 18
83.169.73.0/24 maxlen: 24
83.169.85.0/24 maxlen: 24
83.169.84.0/24 maxlen: 24
83.169.81.0/24 maxlen: 24
83.169.80.0/24 maxlen: 24
83.169.103.0/24 maxlen: 24
83.169.102.0/24 maxlen: 24
83.169.100.0/24 maxlen: 24
83.169.99.0/24 maxlen: 24
83.169.118.0/24 maxlen: 24
83.169.117.0/24 maxlen: 24
83.169.116.0/24 maxlen: 24
83.169.115.0/24 maxlen: 24
83.169.114.0/24 maxlen: 24
194.117.208.0/20 maxlen: 20
195.46.192.0/19 maxlen: 19
213.139.96.0/19 maxlen: 19
195.46.198.0/24 maxlen: 24
195.46.195.0/24 maxlen: 24
195.46.193.0/24 maxlen: 24
213.139.112.0/24 maxlen: 24
213.139.111.0/24 maxlen: 24
195.46.204.0/24 maxlen: 24
195.46.213.0/24 maxlen: 24
213.139.117.0/24 maxlen: 24
195.46.210.0/24 maxlen: 24
195.46.209.0/24 maxlen: 24
195.46.216.0/24 maxlen: 24
195.46.219.0/24 maxlen: 24
213.139.123.0/24 maxlen: 24
195.46.223.0/24 maxlen: 24
178.22.152.0/21 maxlen: 21
212.37.192.0/19 maxlen: 19
194.153.214.0/24 maxlen: 24
2a02:d50::/32 maxlen: 32
2001:4b90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:eb:b0:c1:c8:49:25:87:79:5b:ea:65:25:57:12:7a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Aug 29 22:20:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=457a14852c87b6e916d5e0e5d5524dd574503aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:08:a2:3d:5a:d1:7c:2c:7a:75:31:7b:be:
8e:b6:48:f2:58:72:73:85:d4:40:5e:16:d8:16:ba:
a2:38:95:53:4a:c5:44:3f:b3:c3:f0:17:63:cd:07:
87:28:27:b3:0c:af:6b:3c:cc:45:40:04:78:38:07:
0f:62:4f:7f:f7:9a:16:eb:6b:a7:9a:72:f3:5e:2a:
b9:10:9f:bf:d1:5f:18:38:91:67:a8:15:f9:9d:d5:
7e:a8:78:a5:da:0f:bf:9f:94:20:c0:49:b6:d5:17:
5a:ac:2f:51:21:5a:8d:be:47:97:87:a6:99:58:2e:
74:5c:8b:b7:3e:59:8a:ce:79:ea:28:36:52:f3:8b:
40:4c:5e:49:56:c7:80:89:0f:6e:d6:3b:11:c0:b6:
cd:4c:3e:ea:0e:97:42:3f:0a:63:d3:d7:57:bc:b1:
35:39:d0:23:54:f9:66:cb:94:7f:28:83:4b:eb:43:
13:2d:a2:00:5c:31:9b:cb:b5:7b:44:b2:a3:4d:a2:
a4:f1:14:0f:61:97:8a:49:8b:3d:f1:ef:0b:b7:3c:
94:68:10:42:32:0d:7e:4a:1a:f1:29:17:95:b7:89:
0c:8f:12:d4:66:37:c7:ac:2c:e8:7d:ce:fb:3e:cb:
4a:63:3b:28:4b:91:50:89:61:36:7f:0e:f4:3d:3b:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:14:85:2C:87:B6:E9:16:D5:E0:E5:D5:52:4D:D5:74:50:3A:EF
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/RXoUhSyHtukW1eDl1VJN1XRQOu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.169.64.0/18
178.22.152.0/21
194.117.208.0/20
194.153.214.0/24
195.46.192.0/19
212.37.192.0/19
213.139.96.0/19
IPv6:
2001:4b90::/32
2a02:d50::/32
Signature Algorithm: sha256WithRSAEncryption
4e:77:98:f0:b6:3f:af:49:6f:d3:72:71:44:21:f7:e2:eb:59:
64:fc:86:21:05:ce:a3:92:62:ae:2d:fd:ba:cb:69:8c:fb:09:
cb:9b:4a:45:83:2b:7a:0b:35:84:80:01:04:98:50:32:cb:ae:
e8:2e:aa:0b:ff:bf:28:77:51:08:b0:95:1e:2d:56:47:b4:48:
ff:4c:40:5d:84:f0:5a:4f:0f:6f:9e:4f:62:15:10:5e:a3:2c:
dc:a1:15:49:07:19:b3:82:c3:f3:60:35:ba:bd:80:99:fb:89:
fa:0a:21:c1:6c:0c:64:06:c7:e7:9f:cd:e7:8f:d2:8a:6e:9a:
5a:ae:28:23:92:6d:c3:ea:08:7a:b2:f6:8c:62:ca:36:21:a4:
d5:e2:3c:75:1b:79:c8:8f:62:6e:77:36:bb:f4:3e:81:ee:9f:
91:02:0a:ad:66:9d:bc:2a:32:59:2e:7d:a3:1b:c2:1e:6f:e0:
84:5f:1f:7e:0f:2c:63:7b:3f:c4:38:f1:64:f0:60:31:76:66:
db:cc:f4:fe:f6:05:10:cb:86:61:4c:93:39:f8:49:25:01:53:
07:66:a9:28:cc:95:f3:04:8f:f1:b0:01:60:5b:c6:a7:e2:90:
19:d1:fa:3c:2c:51:ca:a3:27:6a:99:5b:c2:fe:d3:27:a4:fa:
ec:c8:60:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:40 2024 by rpki-client on console-fra.rpki-client.org