Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1-GK8yS6wp2pgAm96hiL6IiNQIPw.roa
File: 1-GK8yS6wp2pgAm96hiL6IiNQIPw.roa (raw, json)
Hash identifier: HFGu5YMJVNEoChHy7nITBrYkQN6EF12NRX8FBty9ocg=
Subject key identifier: F8:62:BC:C9:2E:B0:A7:6A:60:02:6F:7A:86:22:FA:22:23:50:20:FC
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 06F7D1A9
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1-GK8yS6wp2pgAm96hiL6IiNQIPw.roa
Signing time: Fri 20 May 2022 04:28:34 +0000
ROA not before: Fri 20 May 2022 04:28:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 94.26.90.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116904361 (0x6f7d1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 20 04:28:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f862bcc92eb0a76a60026f7a8622fa22235020fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:45:c2:f3:44:fd:e3:cc:32:d2:98:07:2c:
31:c5:d1:ee:46:5c:62:5f:ec:07:d0:f0:e0:22:d6:
b9:47:5c:7e:6e:0d:1f:d5:55:ae:d0:18:39:e9:04:
40:96:d6:86:e3:a7:a3:dc:6b:b7:51:ba:f6:ff:10:
bc:9a:54:b3:1a:ef:5e:1e:b6:77:16:05:44:1a:c1:
cf:07:35:94:b0:50:c5:d9:19:ba:67:ae:13:f9:43:
31:0a:de:5e:3d:70:78:d7:79:06:39:c2:e8:31:13:
62:db:66:b1:59:c0:18:d4:cc:be:c4:1b:d6:90:3a:
ab:25:36:e4:05:63:1c:16:d4:cc:78:4f:c6:2c:a7:
03:d1:29:b9:92:c0:64:b9:c8:04:9b:4c:fd:e2:a9:
e3:a2:16:f4:55:19:a0:f2:a6:26:b8:d0:72:90:0b:
11:e7:d6:c9:29:b1:ce:8a:8f:94:84:9c:a7:5d:ba:
4b:f4:0d:6c:af:87:3a:81:58:e2:30:33:30:78:d4:
1d:1a:da:5d:31:5f:51:f9:61:44:ed:0a:3d:82:0c:
99:c1:45:57:1e:bc:40:b0:56:42:33:e9:b3:94:33:
31:07:a0:cf:a3:5b:fc:e0:4f:58:49:17:02:c6:a3:
e3:d1:9c:8f:03:6d:b7:a6:fd:73:9b:75:40:07:f7:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:BC:C9:2E:B0:A7:6A:60:02:6F:7A:86:22:FA:22:23:50:20:FC
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1-GK8yS6wp2pgAm96hiL6IiNQIPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
91.92.33.0/24
91.92.35.0/24
91.92.49.0/24
93.152.205.0/24
93.152.209.0/24
93.152.211.0/24
93.152.215.0/24
93.152.221.0/24
93.152.224.0/23
94.26.90.0/24
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:39:3e:69:87:59:03:47:74:0a:1e:d2:a1:51:89:3b:40:56:
6c:55:6e:b2:2b:66:81:d6:ed:4b:40:66:a1:48:c1:77:a9:b6:
70:09:48:d5:fd:6f:9c:b7:cf:3b:6b:11:b0:8c:f4:3c:c9:7f:
55:d5:d2:1d:f5:d9:2f:0c:54:d5:88:ae:7b:23:c0:ef:8e:36:
08:78:d3:36:23:5b:b3:c0:e5:46:d5:69:36:c1:ec:24:fb:83:
18:87:af:fa:14:40:b5:c0:0f:72:7e:81:89:07:9e:6c:ca:e6:
dd:ec:50:da:d9:87:1f:32:5e:9d:72:73:eb:fd:e0:ed:d7:00:
3f:19:5b:15:05:4d:e4:21:db:55:7f:67:af:d4:c6:07:78:a7:
0a:6e:88:87:72:d1:d2:25:fb:89:ee:d1:01:0c:55:1f:e9:be:
68:f3:97:eb:23:4d:13:ca:26:df:ab:45:69:d5:f0:f4:22:94:
4f:08:12:17:ac:38:cb:54:72:9d:e4:26:bd:e2:39:26:75:6f:
76:fc:49:43:88:2d:39:cd:6b:dd:04:f6:e7:ac:c9:80:61:09:
2c:14:6a:99:fd:00:47:f8:41:f4:3e:9e:fe:c0:21:e8:3d:ad:
1e:0c:8a:80:6f:cd:d5:96:3f:73:3a:91:74:5d:88:b9:25:ae:
c7:09:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org