Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/1-S8GhMtFLoTaQYKFxihN_EboztQ.roa
File: 1-S8GhMtFLoTaQYKFxihN_EboztQ.roa (raw, json)
Hash identifier: deJMB8lBB96LLkJn/NPAGrgHWfqlVuXzSQX9y8g5J+s=
Subject key identifier: F9:2F:06:84:CB:45:2E:84:DA:41:82:85:C6:28:4D:FC:46:E8:CE:D4
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 018262CB91D1022A5193E9FAF719EAEE8340
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/1-S8GhMtFLoTaQYKFxihN_EboztQ.roa
Signing time: Wed 03 Aug 2022 08:21:24 +0000
ROA not before: Wed 03 Aug 2022 08:21:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 83.229.66.0/24 maxlen: 32
80.240.98.0/23 maxlen: 32
217.194.136.0/23 maxlen: 32
217.194.136.0/24 maxlen: 32
193.47.56.0/22 maxlen: 32
195.216.128.0/22 maxlen: 32
103.14.104.0/22 maxlen: 32
195.3.136.0/22 maxlen: 32
194.187.36.0/22 maxlen: 32
185.4.226.0/24 maxlen: 32
80.240.116.0/22 maxlen: 32
212.103.56.0/22 maxlen: 32
80.240.120.0/22 maxlen: 32
185.18.40.0/22 maxlen: 32
31.40.228.0/22 maxlen: 32
194.31.176.0/22 maxlen: 32
46.149.160.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:cb:91:d1:02:2a:51:93:e9:fa:f7:19:ea:ee:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Aug 3 08:21:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f92f0684cb452e84da418285c6284dfc46e8ced4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:32:1c:3f:5f:69:59:cb:8d:9e:37:a9:73:
a9:3e:c9:1c:4d:aa:60:fa:be:06:2c:a1:b4:e4:9b:
45:71:28:31:3c:b1:d9:15:1e:11:6e:fb:33:1e:82:
f0:fd:90:7e:fa:e9:23:55:f6:f3:a0:d7:b9:9b:ea:
9d:6a:5a:7a:98:98:de:f0:82:cc:06:c2:74:0f:95:
5a:b3:ce:76:4f:a3:a1:50:ff:25:94:46:e5:24:47:
af:63:b7:4a:e6:27:83:e2:73:ef:cb:30:ea:ad:58:
31:65:89:1b:6d:9d:55:ab:ff:84:ab:66:dd:f3:7d:
2e:60:63:79:fa:79:73:1c:94:f3:94:5d:eb:90:4b:
ff:3e:d3:08:fb:1b:b1:91:41:5e:69:39:13:80:df:
3a:c2:ff:68:b4:76:a8:8c:1a:cf:b6:db:c8:2d:56:
a1:57:9f:bf:01:46:60:fd:d9:bd:d8:c0:c2:61:67:
cd:3a:04:aa:da:d3:56:88:30:da:18:ce:48:e9:15:
3a:a2:47:3a:a8:0c:39:0e:a4:79:2f:e0:03:86:4c:
c5:86:1f:d9:c9:6a:d8:7c:71:45:00:f3:ca:96:64:
ce:a3:60:0f:20:98:36:4a:f7:58:29:42:df:4b:52:
06:01:8c:10:15:85:0f:ae:4d:cb:6e:ca:8a:ce:0a:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:06:84:CB:45:2E:84:DA:41:82:85:C6:28:4D:FC:46:E8:CE:D4
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/1-S8GhMtFLoTaQYKFxihN_EboztQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.228.0/22
46.149.160.0/22
80.240.98.0/23
80.240.116.0-80.240.123.255
83.229.66.0/24
103.14.104.0/22
185.4.226.0/24
185.18.40.0/22
193.47.56.0/22
194.31.176.0/22
194.187.36.0/22
195.3.136.0/22
195.216.128.0/22
212.103.56.0/22
217.194.136.0/23
Signature Algorithm: sha256WithRSAEncryption
35:8c:ae:8d:17:f4:3f:54:8f:48:90:18:5a:9d:89:8d:d9:09:
ae:60:42:da:df:c8:2f:6d:b8:76:71:3e:16:dc:65:c0:20:ac:
02:e2:cc:66:65:be:06:d6:66:72:42:82:e4:a4:01:5e:a2:1b:
77:bd:87:fe:26:23:01:dc:54:a2:a0:4d:87:22:f9:e0:ce:f2:
b8:b4:3a:04:af:6f:1a:3c:ca:9e:f2:38:7e:6c:34:92:f6:44:
5c:3e:e3:10:5f:22:2b:3a:3b:11:c7:36:1e:6e:11:94:8b:29:
3a:1b:25:4c:81:15:a6:c4:5f:64:af:1a:57:48:5b:b0:3f:54:
5d:9f:d0:ea:72:dc:24:71:ee:a5:88:22:8a:ab:f0:f4:c4:36:
0c:06:2a:67:40:98:ae:a1:e6:71:b8:5c:24:14:56:87:0c:ca:
de:8d:2d:2a:73:b7:15:35:2f:70:90:d8:4d:f6:e1:ae:1b:db:
a1:e1:12:1b:08:ba:4d:2e:d2:74:6b:eb:f4:c0:fa:7a:36:d3:
aa:ae:dc:82:f5:ca:bb:68:36:bc:49:42:b0:e9:e6:dc:d7:f2:
f2:00:07:d9:81:31:2a:9d:e9:48:41:a2:a5:af:1b:b7:e7:c0:
5f:49:74:75:80:b6:54:2d:00:b4:17:ed:c6:f7:94:d7:e6:d6:
03:80:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:42 2023 by rpki-client on console-fra.rpki-client.org