Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ge0bwPnUdxHd2zSUYqws4B7MimQ.roa
File: ge0bwPnUdxHd2zSUYqws4B7MimQ.roa (raw, json)
Hash identifier: Dips1MbJzPOeP9PwlxNyvN/S/ivrv7kUXfsZcH2Ro6o=
Subject key identifier: 81:ED:1B:C0:F9:D4:77:11:DD:DB:34:94:62:AC:2C:E0:1E:CC:8A:64
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0734D41F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ge0bwPnUdxHd2zSUYqws4B7MimQ.roa
Signing time: Thu 16 Jun 2022 05:01:45 +0000
ROA not before: Thu 16 Jun 2022 05:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 94.26.89.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.219.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120902687 (0x734d41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 16 05:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81ed1bc0f9d47711dddb349462ac2ce01ecc8a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:22:2d:bb:28:80:62:1a:21:54:9e:15:1a:
a4:c2:51:f4:89:bd:80:8e:50:3e:2a:dd:59:e2:d4:
0e:5b:00:ad:2e:8b:81:69:78:56:95:21:3a:a0:0f:
60:23:ab:41:9c:9b:0e:80:3c:fe:9a:69:fd:b4:1d:
fd:61:8b:fc:8b:3c:50:99:6d:af:ba:90:a0:73:05:
f1:f0:f1:3f:e4:c3:da:ee:c1:d9:23:b4:15:8b:ee:
bb:46:8e:5d:26:10:35:80:c4:a2:7d:96:72:04:6c:
80:54:b4:07:b5:e5:f2:b0:29:6a:f2:88:59:c9:a1:
c1:92:0f:f4:61:38:c9:f8:e0:c6:0f:6c:7b:eb:9e:
c6:31:bc:10:ed:25:45:d7:22:9f:7e:7c:b4:bf:cd:
c3:36:5b:11:21:e3:94:d2:e9:12:dd:26:21:91:3e:
c4:9f:de:83:eb:81:b2:87:c6:56:3f:99:4c:99:35:
d5:6e:38:6c:e4:61:dd:df:0c:45:d2:29:10:fb:50:
72:cc:16:f2:cd:28:08:1b:95:4e:69:ac:4c:7b:b4:
50:66:b8:8c:85:85:e3:15:bc:77:62:91:69:60:89:
21:36:38:8f:de:1c:ed:31:7a:e3:54:90:0c:38:c6:
66:a9:2b:b8:ea:fa:c4:6b:c8:7d:91:11:81:56:d1:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:1B:C0:F9:D4:77:11:DD:DB:34:94:62:AC:2C:E0:1E:CC:8A:64
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/ge0bwPnUdxHd2zSUYqws4B7MimQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/23
91.92.34.0/24
93.152.207.0/24
93.152.211.0/24
93.152.217.0-93.152.219.255
93.152.223.0/24
93.152.227.0/24
94.26.89.0/24
94.190.195.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e7:27:ee:39:8c:c0:78:7f:d8:e1:d3:08:05:db:e7:5e:ba:
b7:47:51:45:fb:3a:d4:54:2b:2a:68:24:2c:e3:12:af:6c:42:
55:64:37:49:2c:69:4a:ee:f8:c8:13:12:1d:b0:d6:ac:6e:24:
eb:14:dd:26:d3:fc:39:c1:14:89:f4:d6:84:90:49:3f:9c:f3:
9c:e9:52:82:48:4f:52:5c:78:c7:14:09:e5:2d:0a:aa:98:1a:
56:91:1c:69:b0:37:3e:f6:c8:96:51:67:fd:58:e7:40:92:35:
91:fd:ea:e7:d3:da:9e:5e:bd:71:44:6b:28:e4:94:1a:da:cd:
a3:6d:ba:ab:a8:c5:85:98:4e:25:27:31:ca:97:c4:8f:d4:49:
b0:cf:58:75:d2:a0:c6:74:a9:d2:37:da:f2:89:b6:d9:60:0a:
a6:10:ed:af:6e:3b:c4:8c:95:e4:f5:eb:ff:dc:80:5c:63:b7:
65:83:01:54:1b:80:5b:62:d3:01:4e:10:4d:a8:85:39:98:41:
0c:1b:f7:02:91:61:0c:50:5a:68:6d:10:3d:78:d9:08:57:8d:
22:1d:c6:a1:2c:c9:b8:d4:1d:f4:8f:51:05:a8:49:3a:ff:2f:
26:41:c4:a8:77:f9:a1:30:c6:53:6f:88:09:e4:c0:e4:47:44:
ac:69:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org