Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/_MocOAUtUK8c2HCKR2-rdABWU_8.roa
File: _MocOAUtUK8c2HCKR2-rdABWU_8.roa (raw, json)
Hash identifier: +10EAbuWqBuRA1Sj6JLPiJZ7JgBNlNs7FawRvuCJpnU=
Subject key identifier: FC:CA:1C:38:05:2D:50:AF:1C:D8:70:8A:47:6F:AB:74:00:56:53:FF
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 0E1AC5BB
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/_MocOAUtUK8c2HCKR2-rdABWU_8.roa
Signing time: Sat 01 Jan 2022 14:07:32 +0000
ROA not before: Sat 01 Jan 2022 14:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3170
IP address blocks: 83.97.16.0/22 maxlen: 24
195.191.218.0/23 maxlen: 24
193.35.56.0/22 maxlen: 24
193.105.188.0/24 maxlen: 24
185.17.196.0/22 maxlen: 24
195.74.52.0/22 maxlen: 24
2a03:ee40::/32 maxlen: 32
2a07:240::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236635579 (0xe1ac5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Jan 1 14:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcca1c38052d50af1cd8708a476fab74005653ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:e5:1e:b5:66:cc:4e:b1:50:33:28:47:88:
4d:c7:bd:14:39:84:da:74:b6:3c:27:11:14:b1:54:
24:3a:e9:78:03:77:d0:e5:7f:56:2e:b5:d5:bf:48:
a7:32:40:b2:ca:0c:f0:e0:dc:f9:a6:ee:73:90:77:
c6:83:03:8c:b3:5e:d6:02:3c:03:38:61:71:d7:83:
c5:47:b2:9b:cb:74:a7:9e:6b:73:ba:02:2c:a7:0b:
42:6f:78:e9:1d:c8:5b:68:00:2f:c7:29:35:a6:ab:
2e:62:73:fb:e2:7c:25:32:cf:5c:c1:dc:e5:a7:83:
c7:72:8d:6e:41:3a:52:6f:3d:f8:77:a4:27:77:cb:
50:c0:2f:22:ae:19:22:44:8b:d8:70:02:e5:af:16:
0d:a3:26:72:e3:51:9f:a5:f3:a0:4f:32:8c:7e:80:
01:7b:c1:62:83:d3:fe:b6:c4:22:7f:ff:e9:0b:b1:
13:d9:14:ac:a4:6c:5b:0d:83:5a:b8:2e:70:c7:8b:
22:00:d2:a5:43:25:a1:9f:90:29:09:55:4d:32:cf:
0e:26:80:19:93:04:4a:07:59:79:3b:23:87:5a:4b:
f1:3a:64:ac:11:35:f8:dd:47:df:5c:9c:37:dc:ae:
00:20:cd:28:d2:7e:3e:bc:7b:97:4b:f7:28:50:6a:
b6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:1C:38:05:2D:50:AF:1C:D8:70:8A:47:6F:AB:74:00:56:53:FF
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/_MocOAUtUK8c2HCKR2-rdABWU_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.16.0/22
185.17.196.0/22
193.35.56.0/22
193.105.188.0/24
195.74.52.0/22
195.191.218.0/23
IPv6:
2a03:ee40::/32
2a07:240::/29
Signature Algorithm: sha256WithRSAEncryption
80:29:bf:73:9f:71:3d:48:97:6b:59:ee:5b:25:d1:3e:5f:bf:
d4:6c:8b:31:f7:13:ee:b3:97:15:ef:8b:ac:97:c2:a3:a4:aa:
e2:71:da:3b:c1:4a:59:1a:0e:44:35:f7:89:80:9e:db:40:21:
69:4b:c7:a9:66:4b:cf:3b:ec:d5:97:56:a1:7c:58:89:e7:b9:
6a:b5:d2:ea:f7:00:d5:33:e0:4a:69:01:d6:f2:ef:85:bb:51:
80:71:ea:f5:20:f7:63:18:4f:b1:59:0e:32:08:f0:dc:ba:dd:
a1:63:db:a5:21:d4:cb:c3:49:b7:a0:d6:d4:1e:b9:21:32:8f:
f4:bc:58:3c:21:a7:3e:e9:60:af:6c:fa:c4:54:1e:6b:52:50:
a2:35:12:54:ad:d3:eb:12:dd:7a:0d:42:40:8d:36:71:ae:14:
a2:5c:fd:ac:df:f8:7f:be:78:0b:5a:ba:b7:98:f3:f4:2c:e1:
9f:ae:9c:92:74:36:1e:6c:de:72:66:3e:c8:bd:77:d4:07:4f:
57:03:3b:19:a7:99:66:c5:9a:7b:63:17:74:94:5f:3d:fb:24:
37:4b:79:12:e0:09:60:f5:d3:0f:39:d5:f6:31:2a:c2:b7:8d:
18:97:4a:c0:3c:77:ff:2c:4d:86:8e:23:e7:fc:03:b4:a7:95:
a7:be:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:06 2024 by rpki-client on console-ams.rpki-client.org