Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1-a6V6kKNon3jZWbbt01YqkCciTk.roa
File: 1-a6V6kKNon3jZWbbt01YqkCciTk.roa (raw, json)
Hash identifier: NSVqabsgz1NKbeXb0H2Sv1UItlmjRFWK5rrLitDJVD8=
Subject key identifier: F9:AE:95:EA:42:8D:A2:7D:E3:65:66:DB:B7:4D:58:AA:40:9C:89:39
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08A05FE4
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1-a6V6kKNon3jZWbbt01YqkCciTk.roa
Signing time: Sat 01 Jan 2022 11:04:10 +0000
ROA not before: Sat 01 Jan 2022 11:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.205.204.0/24 maxlen: 24
185.253.120.0/24 maxlen: 24
185.253.121.0/24 maxlen: 24
5.182.196.0/24 maxlen: 24
5.182.197.0/24 maxlen: 24
185.161.190.0/24 maxlen: 24
79.98.183.0/24 maxlen: 24
78.31.205.0/24 maxlen: 24
185.201.42.0/24 maxlen: 24
5.182.185.0/24 maxlen: 24
147.78.204.0/24 maxlen: 24
147.78.207.0/24 maxlen: 24
94.154.171.0/24 maxlen: 24
94.154.178.0/24 maxlen: 24
217.197.170.0/24 maxlen: 24
185.208.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144728036 (0x8a05fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 11:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9ae95ea428da27de36566dbb74d58aa409c8939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:23:d3:14:fe:9b:80:77:99:54:7e:5c:c0:
55:4e:63:a4:08:6d:b8:05:78:30:5f:e6:a0:9c:fd:
0f:ab:22:f0:c0:a5:08:02:e1:f9:81:1d:55:fe:07:
a9:a3:67:53:21:1f:a2:4b:a3:7d:01:8d:e3:e5:e0:
1f:35:5d:ae:82:16:2c:a2:a5:07:eb:ff:2d:56:ff:
f8:60:73:fd:76:5a:f7:bd:67:77:8a:dd:02:a1:b9:
48:a5:96:08:c7:5d:8b:44:fb:c5:53:5c:6f:0c:f1:
06:b7:c1:b0:04:1e:04:cf:48:c5:59:53:87:fe:73:
4e:fd:9d:44:ea:19:22:80:9d:33:ac:33:29:84:5e:
bc:c0:3d:10:a2:16:09:6c:89:67:cc:61:d0:61:7e:
e3:d1:8e:9a:c8:0b:de:2f:19:40:2c:d2:9b:28:54:
96:55:bd:c3:2b:b2:86:1c:14:fc:64:e8:7f:30:d3:
9d:f5:6e:f2:7d:35:f6:10:97:79:cd:58:8f:3d:3e:
bd:d8:83:99:08:3d:da:05:67:0a:24:1c:19:e1:e3:
89:17:31:8c:b3:2d:db:f0:71:5b:ea:2c:4d:a2:27:
77:e2:0c:ff:e0:d8:49:c3:a6:ca:65:32:a7:3f:3a:
78:63:4d:16:3b:98:24:38:36:b5:09:f8:ed:38:7e:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:95:EA:42:8D:A2:7D:E3:65:66:DB:B7:4D:58:AA:40:9C:89:39
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1-a6V6kKNon3jZWbbt01YqkCciTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.185.0/24
5.182.196.0/23
78.31.205.0/24
79.98.183.0/24
94.154.171.0/24
94.154.178.0/24
147.78.204.0/24
147.78.207.0/24
185.161.190.0/24
185.201.42.0/24
185.205.204.0/24
185.208.153.0/24
185.253.120.0/23
217.197.170.0/24
Signature Algorithm: sha256WithRSAEncryption
56:75:6a:26:3d:db:d1:e3:2b:8d:f6:ad:88:3b:a8:ec:22:4c:
13:84:74:53:ec:c8:be:8b:5a:74:8f:8e:56:40:cb:6c:94:aa:
ce:b2:2d:0b:ae:2e:20:62:03:d7:fb:70:ac:40:d9:65:c7:aa:
da:da:eb:9e:cb:03:9d:b6:0c:c3:98:58:61:99:b5:75:09:ef:
3f:14:f3:83:10:91:70:15:9b:88:4b:e1:62:3a:f6:45:22:7c:
da:a2:e0:35:03:7c:ba:3b:5b:7b:36:f7:8a:40:a7:cf:ae:fe:
f7:24:15:01:3a:80:62:29:f4:d7:11:f4:67:95:e5:d7:4e:e8:
2f:04:08:5b:dd:bc:a4:46:c1:19:78:da:71:17:1a:4f:41:0c:
60:97:0c:a1:11:e0:a6:34:67:f4:e7:0e:94:7d:ad:e3:43:d4:
c0:64:08:c7:63:50:e4:0c:14:ee:30:07:35:d4:2f:8a:a5:32:
45:e4:95:fd:24:84:0c:90:3a:6c:a9:cc:12:77:d4:d8:09:60:
64:4d:ee:82:42:c3:98:0b:ed:b5:ef:72:1a:75:0f:5c:1a:29:
39:3a:5b:cd:ef:1d:ca:6d:f0:7a:5e:0a:8e:1f:43:25:2d:03:
f3:fd:62:62:01:a9:71:93:c8:65:1d:a9:c0:23:1d:fd:4d:25:
51:a3:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org