Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/TE3OoNapj1A7q_Z-M2GyJUcS4A4.roa
File: TE3OoNapj1A7q_Z-M2GyJUcS4A4.roa (raw, json)
Hash identifier: AI8YUfs/CMTXrjPq57pA/7CxO3diXLER/bKzgjVcKg0=
Subject key identifier: 4C:4D:CE:A0:D6:A9:8F:50:3B:AB:F6:7E:33:61:B2:25:47:12:E0:0E
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 0181DA7D24A2ED98180F1D1F5DFD4D45E78F
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/TE3OoNapj1A7q_Z-M2GyJUcS4A4.roa
Signing time: Thu 07 Jul 2022 21:07:23 +0000
ROA not before: Thu 07 Jul 2022 21:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8784
IP address blocks: 83.169.120.0/24 maxlen: 24
83.169.119.0/24 maxlen: 24
83.169.123.0/24 maxlen: 24
83.169.122.0/24 maxlen: 24
83.169.121.0/24 maxlen: 24
83.169.71.0/24 maxlen: 24
83.169.70.0/24 maxlen: 24
83.169.69.0/24 maxlen: 24
83.169.64.0/18 maxlen: 18
83.169.73.0/24 maxlen: 24
83.169.85.0/24 maxlen: 24
83.169.84.0/24 maxlen: 24
83.169.81.0/24 maxlen: 24
83.169.80.0/24 maxlen: 24
83.169.103.0/24 maxlen: 24
83.169.102.0/24 maxlen: 24
83.169.100.0/24 maxlen: 24
83.169.99.0/24 maxlen: 24
83.169.118.0/24 maxlen: 24
83.169.117.0/24 maxlen: 24
83.169.116.0/24 maxlen: 24
83.169.115.0/24 maxlen: 24
83.169.114.0/24 maxlen: 24
194.117.208.0/20 maxlen: 20
195.46.192.0/19 maxlen: 19
213.139.96.0/19 maxlen: 19
195.46.198.0/24 maxlen: 24
195.46.195.0/24 maxlen: 24
195.46.193.0/24 maxlen: 24
213.139.112.0/24 maxlen: 24
213.139.111.0/24 maxlen: 24
195.46.204.0/24 maxlen: 24
195.46.213.0/24 maxlen: 24
213.139.117.0/24 maxlen: 24
195.46.210.0/24 maxlen: 24
195.46.209.0/24 maxlen: 24
195.46.216.0/24 maxlen: 24
195.46.219.0/24 maxlen: 24
195.46.223.0/24 maxlen: 24
178.22.152.0/21 maxlen: 21
212.37.192.0/19 maxlen: 19
194.153.214.0/24 maxlen: 24
2a02:d50::/32 maxlen: 32
2001:4b90::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:7d:24:a2:ed:98:18:0f:1d:1f:5d:fd:4d:45:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Jul 7 21:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c4dcea0d6a98f503babf67e3361b2254712e00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:d5:e5:0e:ea:5e:76:a1:11:b5:6a:dd:18:
c0:47:3c:b6:aa:cf:a9:ab:98:cf:e6:16:a7:a9:e0:
98:68:65:9b:f5:9c:e5:dc:b7:04:52:11:97:55:00:
8d:14:a6:2b:e0:8f:83:50:40:24:73:08:64:34:b8:
86:1e:f1:2a:e6:2e:e9:bb:4b:ef:62:77:0a:55:b2:
2f:06:d3:c4:e1:47:88:b9:ee:e0:40:49:02:c4:a0:
bb:f8:52:18:70:41:2a:aa:5e:92:ee:cc:13:30:32:
99:6d:2f:79:02:ce:59:77:91:07:71:0f:d9:ae:22:
06:1b:c4:16:56:38:c7:64:af:24:c8:5b:f5:59:61:
b7:74:b7:9f:4b:2e:b0:c4:bc:a7:ea:4b:75:d3:a3:
58:31:ca:68:8d:ba:46:6b:89:f2:22:34:ee:e2:42:
65:e9:12:dc:d1:ec:88:c4:01:87:3c:a0:67:43:7b:
71:fa:3b:57:ae:2d:0e:3a:cf:0b:df:8f:f3:18:55:
3e:4e:c7:83:ee:35:31:d9:06:c4:15:d0:ba:b8:72:
84:cb:2c:38:13:0d:11:84:46:34:43:65:51:42:05:
95:64:72:6a:ae:67:38:de:02:25:e7:d6:29:2a:7b:
1d:74:e4:71:d9:7a:d4:5c:05:e6:71:5a:14:93:45:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4D:CE:A0:D6:A9:8F:50:3B:AB:F6:7E:33:61:B2:25:47:12:E0:0E
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/TE3OoNapj1A7q_Z-M2GyJUcS4A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.169.64.0/18
178.22.152.0/21
194.117.208.0/20
194.153.214.0/24
195.46.192.0/19
212.37.192.0/19
213.139.96.0/19
IPv6:
2001:4b90::/32
2a02:d50::/32
Signature Algorithm: sha256WithRSAEncryption
d0:90:90:19:7b:f7:1e:65:6c:cd:36:d7:ec:3f:5e:b6:98:3b:
04:91:58:7f:e9:cd:38:5b:a7:e5:db:f7:29:5b:7b:94:44:a5:
82:1c:15:78:61:ea:3e:1c:b6:93:7b:d6:30:4b:7f:a0:ee:f7:
33:b5:34:21:b6:64:1d:2b:26:ed:97:ec:41:15:02:3e:e0:10:
2c:42:7d:75:34:b1:fc:48:89:0c:f0:7b:5e:2c:f1:cb:d0:84:
45:5d:cd:bd:f4:c6:db:71:68:9d:cc:ca:37:d6:3c:de:2d:a7:
88:f0:25:1d:8c:9c:d2:6c:08:fa:dc:3d:44:38:9e:1a:04:21:
b6:f2:49:fe:9b:57:94:a7:63:af:09:0f:8f:dc:b8:61:da:cd:
3c:77:f3:81:dc:b6:d5:f9:32:a5:bd:92:8d:63:b4:8d:43:1b:
e6:3b:0b:c5:15:83:3a:48:10:62:a8:4d:6c:c8:71:23:81:22:
89:02:f9:3e:98:af:7c:24:ae:17:06:87:3e:ec:44:7c:68:ef:
99:5c:28:79:97:99:d4:3f:fb:3a:29:c1:4e:80:5a:03:56:9e:
a6:55:4c:ae:2f:ec:1b:85:09:b7:31:85:21:f9:0b:3f:bc:5a:
c7:ec:c0:8e:02:df:12:05:f8:5c:5f:b7:56:48:65:be:42:9c:
b7:1e:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:40 2024 by rpki-client on console-fra.rpki-client.org