Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/ow2EYxpwNXd8MR0ldescqMK9jMo.roa
File: ow2EYxpwNXd8MR0ldescqMK9jMo.roa (raw, json)
Hash identifier: s5w83i6XS/E7zmBxUpnKq3oO2StxKfAnGrKDSxZEKWA=
Subject key identifier: A3:0D:84:63:1A:70:35:77:7C:31:1D:25:75:EB:1C:A8:C2:BD:8C:CA
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 05B40281
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/ow2EYxpwNXd8MR0ldescqMK9jMo.roa
Signing time: Tue 01 Feb 2022 14:58:08 +0000
ROA not before: Tue 01 Feb 2022 14:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 81.89.246.0/24 maxlen: 24
212.62.67.0/24 maxlen: 24
212.62.72.0/24 maxlen: 24
212.62.85.0/24 maxlen: 24
84.201.65.0/24 maxlen: 24
84.201.66.0/24 maxlen: 24
84.201.73.0/24 maxlen: 24
84.201.98.0/24 maxlen: 24
2a00:1348:10::/48 maxlen: 64
2a00:1348:11::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95683201 (0x5b40281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Feb 1 14:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a30d84631a7035777c311d2575eb1ca8c2bd8cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:74:79:6d:1a:0d:1e:55:d8:95:aa:05:5b:
88:96:d9:db:80:01:fd:55:4f:56:a8:57:0a:2b:f4:
bf:8b:01:e3:db:92:fa:69:40:a8:bd:41:56:f5:29:
b8:aa:9d:e5:90:9f:31:2a:f4:b2:9a:f5:12:bb:7d:
59:52:8f:a9:37:48:03:59:0c:f9:a4:16:c3:d0:97:
05:5f:dd:03:25:6f:a6:d8:ca:9b:07:2a:66:1c:ad:
33:85:3e:c2:ef:e0:aa:53:26:43:89:54:c9:13:61:
67:04:fa:fa:e6:68:5d:4c:96:d9:e7:82:b0:d5:08:
24:fb:22:be:7e:ca:c2:33:e2:d8:54:b3:b6:c3:b5:
b3:45:37:8f:54:c7:12:89:6b:d0:06:c0:4a:ab:e5:
02:d2:e8:36:a2:5f:ee:3f:22:11:36:9b:70:73:43:
3a:a3:2a:4b:72:b1:47:df:9a:ef:c0:b9:16:64:cc:
a6:68:dc:8e:c7:47:dd:82:6c:e8:63:f5:d8:65:14:
7e:35:cb:56:64:3f:19:80:b3:fa:47:76:b3:2c:19:
e1:08:81:6f:be:d9:00:7b:17:f6:77:91:a4:da:a2:
76:43:46:ca:32:d5:d0:f2:75:c9:c9:a0:91:a2:d3:
a4:76:c1:67:59:5c:af:7d:83:87:3d:a6:79:93:09:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:84:63:1A:70:35:77:7C:31:1D:25:75:EB:1C:A8:C2:BD:8C:CA
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/ow2EYxpwNXd8MR0ldescqMK9jMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.246.0/24
84.201.65.0-84.201.66.255
84.201.73.0/24
84.201.98.0/24
212.62.67.0/24
212.62.72.0/24
212.62.85.0/24
IPv6:
2a00:1348:10::/47
Signature Algorithm: sha256WithRSAEncryption
49:f2:23:d4:02:8c:7e:cf:a0:9b:40:6e:57:30:08:4d:38:75:
bc:2c:e9:f0:55:4e:d7:a0:c1:03:6c:6b:4c:aa:51:0b:35:bd:
0a:04:5e:ed:a1:7e:d9:74:a3:c3:cd:6a:83:d8:0a:f9:45:87:
35:d8:06:a0:be:4b:b3:c3:7f:2d:e7:bc:82:ce:04:c4:c4:a4:
7b:da:ea:e7:a8:79:02:0e:e4:65:32:4e:2b:ae:87:b1:70:19:
98:72:ac:21:e8:71:5b:c5:58:d3:d2:d0:2a:01:74:d5:f7:bf:
ac:ce:03:50:e8:0a:c6:96:7e:91:91:a8:2c:b3:67:fd:9c:a1:
63:ce:b4:a1:20:96:29:cf:16:d7:c0:bd:23:17:80:4d:f4:08:
62:87:6d:89:5a:5e:7c:65:f9:3d:de:43:f2:9c:cd:4c:b7:16:
47:e8:c2:f7:a2:90:1c:55:df:bd:ae:bc:0f:bc:af:a0:ff:cf:
20:27:2a:98:e1:98:72:43:79:b4:8c:30:52:90:a6:03:68:6f:
90:6e:1c:84:f7:2d:86:6f:a5:47:57:d5:1f:4f:c7:22:88:0b:
a5:ed:2a:3b:77:ee:56:0b:ae:a2:77:47:28:e6:b2:31:42:68:
de:28:74:2c:d7:16:34:2d:8f:10:84:6e:f0:fd:60:a2:39:14:
87:94:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org