Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FRY8mibhnyRSJ2Mv1OJ-cV1rexo.roa
File: FRY8mibhnyRSJ2Mv1OJ-cV1rexo.roa (raw, json)
Hash identifier: JhVWg0WYsg+0Aktre5d2ZY6LTGGD9WRsUR3/e7sb5R8=
Subject key identifier: 15:16:3C:9A:26:E1:9F:24:52:27:63:2F:D4:E2:7E:71:5D:6B:7B:1A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01850B63E0DA94E7F6B256B1E7A95556B0D4
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FRY8mibhnyRSJ2Mv1OJ-cV1rexo.roa
Signing time: Tue 13 Dec 2022 12:09:32 +0000
ROA not before: Tue 13 Dec 2022 12:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211619
IP address blocks: 88.209.228.0/24 maxlen: 24
88.209.236.0/22 maxlen: 22
88.209.246.0/23 maxlen: 23
88.209.253.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
83.137.156.0/24 maxlen: 24
83.137.157.0/24 maxlen: 24
83.137.158.0/24 maxlen: 24
83.137.153.0/24 maxlen: 24
178.210.232.0/24 maxlen: 24
178.210.233.0/24 maxlen: 24
178.210.237.0/24 maxlen: 24
178.210.234.0/24 maxlen: 24
178.210.235.0/24 maxlen: 24
45.9.168.0/24 maxlen: 24
77.242.152.0/22 maxlen: 22
92.52.218.0/24 maxlen: 24
194.41.47.0/24 maxlen: 24
88.151.62.0/24 maxlen: 24
5.182.112.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
5.182.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:63:e0:da:94:e7:f6:b2:56:b1:e7:a9:55:56:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Dec 13 12:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15163c9a26e19f245227632fd4e27e715d6b7b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:94:26:41:c7:7e:58:d7:5e:b4:e6:dd:f6:
72:78:4e:a2:ed:06:df:bb:41:d5:7b:2a:5d:82:2e:
b4:bb:89:bb:35:4d:d0:8e:8d:17:a7:8f:08:4f:db:
88:9b:4c:ba:1e:7b:91:ef:7b:36:51:6b:cc:9c:68:
e9:88:ab:30:d4:87:bf:13:10:33:1f:fe:2b:ec:18:
dd:2a:eb:e3:eb:76:c2:81:5f:a0:5b:1d:c8:49:77:
e9:74:8b:d8:dd:f3:64:c9:9c:ab:16:63:67:2d:17:
15:75:ea:50:a0:d8:13:08:12:18:a2:d2:a7:c6:7c:
b9:25:27:49:da:d9:54:dc:8a:20:61:e8:e6:1e:de:
c6:99:eb:8b:b3:45:73:4a:7f:bf:33:c7:04:49:02:
f4:50:5f:05:8c:ce:a1:b2:91:15:72:78:6d:ed:75:
52:c1:1b:1e:ce:4c:5c:2a:45:4c:81:03:a2:c7:0f:
de:20:40:0a:f1:03:e7:a8:82:6a:a1:12:fb:48:e2:
9f:c8:1f:27:15:4e:cf:41:7b:e5:52:07:e0:e8:8a:
d9:a4:fb:49:4a:a3:53:76:6b:b2:1c:b2:89:72:0c:
08:18:84:f2:e3:a4:86:e3:7d:19:78:93:dd:97:24:
7d:b5:da:2b:f0:27:b8:ac:3c:23:37:71:79:44:e1:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:3C:9A:26:E1:9F:24:52:27:63:2F:D4:E2:7E:71:5D:6B:7B:1A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/FRY8mibhnyRSJ2Mv1OJ-cV1rexo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.112.0/24
5.182.115.0/24
45.9.168.0/24
45.14.9.0/24
77.242.152.0/22
83.137.153.0/24
83.137.156.0/22
88.151.62.0/24
88.209.228.0/24
88.209.236.0/22
88.209.246.0/23
88.209.253.0/24
92.52.218.0/24
178.210.232.0/22
178.210.237.0/24
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:79:b2:0c:e8:df:87:c3:27:a3:96:ac:21:90:07:1c:7e:9c:
aa:7a:cc:95:a1:25:68:a8:13:d8:89:54:bf:3c:40:34:23:39:
c3:58:20:e5:47:70:ac:47:36:1c:78:5b:28:74:e3:c5:68:bb:
a7:22:39:ef:65:18:ad:05:89:d1:cb:b9:94:5e:73:13:0a:5a:
53:d9:79:c2:6c:8f:9e:6f:cb:56:35:50:75:6d:d6:d3:03:40:
7e:6c:bf:78:bf:e4:43:d2:18:34:9e:06:36:fb:a0:eb:a0:b5:
1f:15:7e:4f:0c:70:b3:b3:38:75:e1:61:33:e1:90:6c:6d:03:
f4:ad:4a:50:0c:83:be:28:7e:6b:c5:f4:89:65:6e:06:69:ba:
69:28:7e:d1:76:bd:4d:e4:72:25:ad:e6:dd:ec:1a:d8:38:fa:
9e:47:85:a5:f3:dd:24:80:db:ac:71:39:48:08:68:27:25:70:
da:2d:8f:62:b3:10:be:b1:a0:79:44:a3:56:c5:9b:34:11:3d:
ae:ce:1d:fc:c7:50:01:db:a9:87:4a:93:ca:5b:2b:5d:91:c7:
e7:12:7a:bf:f5:0f:6d:94:18:6f:96:0e:b5:f8:0f:c9:27:29:
e3:90:fe:a5:40:e9:94:32:b5:0a:d2:d0:ca:38:7e:1a:54:50:
b2:c0:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org