Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/fiQmrxuMx90y8cyKkXOdYCI-YYw.roa
File: fiQmrxuMx90y8cyKkXOdYCI-YYw.roa (raw, json)
Hash identifier: BXrDaC0MTkoufBgXTGE3vqfKzzAWg4yVu1xQLD0X0qQ=
Subject key identifier: 7E:24:26:AF:1B:8C:C7:DD:32:F1:CC:8A:91:73:9D:60:22:3E:61:8C
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 0357D304
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/fiQmrxuMx90y8cyKkXOdYCI-YYw.roa
Signing time: Sat 01 Jan 2022 07:57:33 +0000
ROA not before: Sat 01 Jan 2022 07:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 83.229.66.0/24 maxlen: 32
217.194.136.0/24 maxlen: 32
217.194.136.0/23 maxlen: 32
80.240.116.0/22 maxlen: 32
212.103.56.0/22 maxlen: 32
80.240.120.0/22 maxlen: 32
193.47.56.0/22 maxlen: 32
195.216.128.0/22 maxlen: 32
103.14.104.0/22 maxlen: 32
46.149.160.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56087300 (0x357d304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 07:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e2426af1b8cc7dd32f1cc8a91739d60223e618c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:fd:33:f4:7d:a2:0c:79:86:f7:f9:44:03:
02:67:64:e7:a6:7d:f8:41:74:6c:06:53:6b:fc:11:
23:45:47:85:56:7f:4f:37:c1:26:52:18:51:1c:36:
86:93:cf:63:d8:df:db:6c:13:ae:67:86:67:e0:9e:
65:9e:f2:a3:b7:e9:73:34:f5:dc:5f:3d:3a:93:bf:
1e:e4:6e:56:43:eb:f3:dc:61:9a:35:b8:2e:ee:ca:
78:88:de:12:5b:91:52:42:61:8a:5e:8d:6a:36:63:
ec:84:7f:6d:44:a0:45:33:7e:a1:48:f4:26:cd:e0:
66:3f:5f:e9:7f:fd:00:e8:d5:40:0d:54:bb:c8:f3:
d2:36:4b:59:08:f0:2d:cd:f3:bf:6e:ed:c1:fd:d2:
c6:b2:4e:15:07:d9:46:95:f1:94:43:4a:19:dd:56:
39:50:5a:73:7c:45:fc:d6:0b:ad:9e:bb:ec:65:05:
10:aa:e8:aa:2b:4c:aa:01:b5:66:88:2c:ed:e2:ea:
88:0a:c4:23:73:5b:9b:10:03:fd:04:59:27:15:51:
5c:24:7a:b7:45:fa:56:f3:62:e5:9c:78:24:4e:ea:
7f:71:99:9d:c3:d7:70:17:26:87:b5:a8:2b:a5:a2:
f9:79:15:b6:47:fd:ac:0c:91:6d:eb:61:59:c5:34:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:26:AF:1B:8C:C7:DD:32:F1:CC:8A:91:73:9D:60:22:3E:61:8C
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/fiQmrxuMx90y8cyKkXOdYCI-YYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.160.0/22
80.240.116.0-80.240.123.255
83.229.66.0/24
103.14.104.0/22
193.47.56.0/22
195.216.128.0/22
212.103.56.0/22
217.194.136.0/23
Signature Algorithm: sha256WithRSAEncryption
58:69:0c:ed:81:d6:87:a9:60:3f:29:66:0c:1a:ad:e3:4c:5c:
78:2d:2d:4a:c8:d8:9b:c2:92:95:5e:40:bb:be:7d:a7:c4:34:
61:cf:56:31:6a:46:e9:ad:e3:5b:7c:3c:c7:be:5b:1f:91:36:
29:ca:e9:4e:6c:94:0c:0f:91:f3:5d:d0:36:d9:ff:cc:6a:36:
94:c4:68:72:69:e1:5b:f4:19:11:6e:ff:d2:c2:51:bd:97:fe:
26:6a:dd:a2:6c:95:a7:bc:e5:dd:e6:84:2a:b9:3c:ec:32:13:
19:b2:ad:bb:b0:48:3f:05:1e:8c:87:ba:0f:65:39:95:f5:3a:
83:b1:70:fc:e3:29:7a:f7:b3:37:6d:6b:1e:85:02:9e:d1:48:
f4:d8:19:c2:23:6c:3f:78:5e:e4:ea:14:cd:5e:60:f0:b9:ab:
f7:7c:6c:c9:fc:6a:29:fe:5c:bd:08:78:86:51:ea:ce:14:0b:
69:ec:6d:11:43:8c:cb:d5:3a:ef:c1:a1:ba:fe:87:92:76:29:
82:98:34:8f:e0:85:2b:5a:b8:ee:46:7c:3e:b3:98:39:23:b4:
a0:d2:4f:bc:b0:21:f8:dd:e8:9d:a6:16:74:36:84:cf:9e:b9:
92:5f:29:52:5c:53:77:13:b1:a6:be:8d:3b:4d:62:f4:85:a8:
85:2d:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:42 2023 by rpki-client on console-fra.rpki-client.org