Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Tb3XSL_hzKrgAB0oHAlvP0Anf80.roa
File: Tb3XSL_hzKrgAB0oHAlvP0Anf80.roa (raw, json)
Hash identifier: lNF4KvAl0l0Y0b6kNjhiSJcra+rv5YFhvaHCsQbLFw0=
Subject key identifier: 4D:BD:D7:48:BF:E1:CC:AA:E0:00:1D:28:1C:09:6F:3F:40:27:7F:CD
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01827EA0779C865DC07533E16C2A95E5BC2E
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Tb3XSL_hzKrgAB0oHAlvP0Anf80.roa
Signing time: Mon 08 Aug 2022 18:03:41 +0000
ROA not before: Mon 08 Aug 2022 18:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 94.26.90.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.35.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
93.152.205.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
93.152.224.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:a0:77:9c:86:5d:c0:75:33:e1:6c:2a:95:e5:bc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 8 18:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dbdd748bfe1ccaae0001d281c096f3f40277fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:f3:36:a6:86:95:bf:17:c5:32:b6:94:30:
10:f5:07:0b:28:cb:30:91:49:6e:78:7a:63:6b:a9:
02:47:fc:d1:10:1e:59:92:5e:94:b5:a8:e5:0f:56:
08:9e:34:27:81:b6:26:7e:64:f9:cf:dd:85:d2:d5:
d0:1f:03:3d:fd:ee:53:0a:93:11:47:7b:c5:56:6e:
d0:76:e0:02:7e:1b:3b:9e:cb:50:86:af:3d:ab:01:
cc:80:ec:7b:40:27:9f:54:c5:c7:df:25:79:62:db:
dd:9f:55:0b:d6:16:62:0d:58:12:8b:0b:98:b2:08:
af:78:6a:7d:d6:2e:4a:33:78:67:5b:e0:c9:40:2a:
1d:67:d5:2b:c1:a5:f4:5f:68:62:46:cf:fb:2e:dc:
5d:e0:bf:f7:aa:12:45:0d:a7:38:69:7f:01:0b:67:
2d:79:9e:9c:e1:49:2c:66:94:c3:46:5c:50:e5:a0:
5a:a4:e1:39:4f:05:70:6c:c6:e3:48:19:42:0a:f3:
2d:77:fa:b5:ed:bb:bb:ef:17:e4:b4:25:80:c1:61:
4f:7d:09:b3:3e:81:a9:41:23:8b:89:ae:64:ec:b8:
97:37:ab:3d:cc:62:40:6e:e6:f9:a3:b3:c8:9e:e2:
e4:14:2d:f4:41:77:b3:0b:9d:1a:6b:a9:e2:08:0b:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BD:D7:48:BF:E1:CC:AA:E0:00:1D:28:1C:09:6F:3F:40:27:7F:CD
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Tb3XSL_hzKrgAB0oHAlvP0Anf80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
91.92.33.0-91.92.35.255
91.92.49.0/24
93.152.205.0/24
93.152.207.0/24
93.152.209.0/24
93.152.215.0/24
93.152.219.0/24
93.152.221.0/24
93.152.223.0-93.152.225.255
94.26.90.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e9:bf:7c:ea:ac:06:4a:ae:a5:3e:01:42:3a:6f:55:0a:a8:
e3:eb:17:b4:c2:20:b8:e4:84:4d:78:8f:27:a0:3c:c0:97:8e:
75:28:b6:04:53:03:44:a4:7b:65:42:3f:28:72:ce:c1:5a:12:
16:80:cf:2e:a0:1c:b4:d5:06:69:b6:17:2a:e8:83:23:f1:f9:
d6:74:3c:f0:f2:60:fb:e8:f6:14:59:1b:90:6f:38:33:31:27:
d8:83:14:0f:ed:b8:ce:02:37:01:39:6c:a2:1e:09:fe:c2:d5:
df:bb:d7:d3:cd:02:f2:af:b6:ca:e0:1d:1c:a5:62:7c:08:47:
84:9e:fe:07:83:b5:54:e6:3d:ca:2d:30:3b:e7:7e:e7:2f:a8:
a8:b7:c0:4e:8d:52:20:11:9e:6b:bd:a4:a0:29:05:f5:fa:86:
5e:d4:e8:ae:60:d6:cc:76:af:c6:0c:59:83:68:49:bf:40:d2:
ae:75:db:09:51:33:0c:b1:4e:70:fa:ec:c2:bb:31:cb:7a:fa:
f8:a9:c0:83:28:66:74:25:b7:05:69:c9:1c:4d:74:fe:a5:84:
a8:37:0f:db:43:ce:9f:ad:86:7d:e2:05:ec:00:c1:71:4f:3f:
91:86:61:cc:4e:6d:7f:5b:4d:0c:3d:ff:6a:ee:01:c9:d8:a9:
eb:f4:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org