Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/8K0IJ86dMUpum782onDrvvFfl_0.roa
File: 8K0IJ86dMUpum782onDrvvFfl_0.roa (raw, json)
Hash identifier: TrNWv1aDl7LVFZb/M5NmZX5MllB9Yi+yjXGtbbvuJvo=
Subject key identifier: F0:AD:08:27:CE:9D:31:4A:6E:9B:BF:36:A2:70:EB:BE:F1:5F:97:FD
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 05FD93F4
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/8K0IJ86dMUpum782onDrvvFfl_0.roa
Signing time: Mon 21 Feb 2022 11:44:10 +0000
ROA not before: Mon 21 Feb 2022 11:44:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 91.92.35.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100504564 (0x5fd93f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 21 11:44:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0ad0827ce9d314a6e9bbf36a270ebbef15f97fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:87:cd:1d:3f:f8:76:56:5c:94:68:30:ae:
a4:bf:2c:b7:70:50:53:aa:74:53:e1:8c:64:e5:0e:
1a:70:dd:ed:e1:3c:ab:fa:8e:3f:9f:fb:05:39:4c:
68:c2:e7:83:b4:04:bb:12:60:b9:f2:98:2f:41:7f:
66:42:60:b6:ec:f2:9f:a9:f4:41:07:62:f7:fb:25:
a7:3f:15:64:71:38:19:f9:e0:57:0d:86:b9:48:31:
c7:51:9c:ac:27:a2:57:31:0c:14:7c:c2:cf:8b:cf:
98:df:57:70:cc:b1:f6:e4:52:ef:62:02:b6:52:25:
f4:6f:6e:80:7d:c2:10:6f:6b:c9:2b:ef:02:47:e0:
b4:5d:4b:9b:60:8b:27:d1:c9:17:aa:4b:d7:06:d8:
19:b4:34:0f:c6:7b:07:81:d3:cc:f2:33:1a:b6:c8:
77:04:60:ad:f0:74:6d:30:77:60:25:7c:96:9d:70:
63:24:03:5d:4f:69:b0:a6:b5:be:04:88:10:a0:cd:
19:e8:c5:69:a1:cd:bb:b9:72:be:78:7a:2b:27:51:
2b:ba:b1:f7:40:4f:25:bf:3e:e3:cd:ae:a8:f9:e1:
f2:29:8b:1c:b8:41:c5:a6:ff:48:f9:25:d6:5d:31:
28:37:ea:97:63:07:31:86:8c:62:27:59:a9:24:2c:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AD:08:27:CE:9D:31:4A:6E:9B:BF:36:A2:70:EB:BE:F1:5F:97:FD
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/8K0IJ86dMUpum782onDrvvFfl_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
78.159.156.0/24
91.92.33.0/24
91.92.35.0/24
91.92.49.0/24
93.152.209.0/24
93.152.212.0/24
93.152.215.0/24
93.152.221.0/24
93.152.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3a:28:6f:6f:c3:2e:bd:4b:d1:c9:3e:23:4b:4e:0a:4b:2f:
c7:d6:09:0d:0a:12:4c:64:6f:d1:45:5a:75:c7:96:93:26:bd:
a2:8f:26:9e:33:9d:0d:69:42:e3:42:ae:1a:3b:68:1a:a6:13:
21:c5:9e:2c:59:b0:dc:7f:8d:58:5f:81:7c:fa:74:f7:8f:0d:
fb:ce:12:41:a2:81:22:3d:9f:83:bc:27:2b:b5:b3:4c:1f:34:
e2:cb:5a:66:97:d8:35:7d:cf:1f:ec:4f:50:c3:e1:dd:4a:15:
a6:dc:ff:c8:59:77:1d:67:18:47:9c:bf:d4:94:d5:8f:18:dd:
e6:07:d9:37:55:8d:98:b5:4f:66:cf:33:11:ee:db:db:07:cf:
37:e9:52:2c:42:1a:82:52:11:b1:ab:dd:51:ce:4b:08:19:a2:
07:26:40:7a:71:af:d5:8b:2f:ae:e9:26:14:1b:38:d1:de:8b:
6f:a1:5e:79:0c:1a:96:31:a3:ff:9c:d6:d6:30:af:c1:85:db:
1a:a9:19:c7:76:36:65:d6:00:c7:9c:15:00:5c:d1:c3:cf:0a:
f0:c9:1e:6c:dc:9a:86:50:c8:dc:f2:13:d9:88:a5:7e:3c:12:
09:ec:b2:8b:2f:14:5a:cf:42:78:a7:0b:6c:49:00:9e:f0:97:
33:c6:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org