Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/8G6IW9oux7tyXZ6a88r32eefJW8.roa
File: 8G6IW9oux7tyXZ6a88r32eefJW8.roa (raw, json)
Hash identifier: afjf0rFX7Vp+Y5Yz12YLws7hi6Q2JP7u/cZoh6Xdc9o=
Subject key identifier: F0:6E:88:5B:DA:2E:C7:BB:72:5D:9E:9A:F3:CA:F7:D9:E7:9F:25:6F
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 01825CB63D24AE8706C2FC92C8C2ABA234F7
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/8G6IW9oux7tyXZ6a88r32eefJW8.roa
Signing time: Tue 02 Aug 2022 04:00:23 +0000
ROA not before: Tue 02 Aug 2022 04:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47119
IP address blocks: 188.191.112.0/22 maxlen: 22
188.191.112.0/24 maxlen: 24
188.191.112.0/23 maxlen: 23
188.191.116.0/22 maxlen: 22
188.191.114.0/23 maxlen: 23
188.191.114.0/24 maxlen: 24
188.191.113.0/24 maxlen: 24
188.191.112.0/21 maxlen: 21
188.191.112.0/20 maxlen: 20
188.191.116.0/24 maxlen: 24
188.191.117.0/24 maxlen: 24
188.191.116.0/23 maxlen: 23
188.191.115.0/24 maxlen: 24
188.191.118.0/24 maxlen: 24
188.191.118.0/23 maxlen: 23
188.191.122.0/24 maxlen: 24
188.191.119.0/24 maxlen: 24
188.191.120.0/23 maxlen: 23
188.191.124.0/22 maxlen: 22
188.191.122.0/23 maxlen: 23
188.191.121.0/24 maxlen: 24
188.191.120.0/24 maxlen: 24
188.191.124.0/24 maxlen: 24
188.191.124.0/23 maxlen: 23
188.191.123.0/24 maxlen: 24
188.191.120.0/22 maxlen: 22
188.191.126.0/24 maxlen: 24
188.191.126.0/23 maxlen: 23
79.174.34.0/24 maxlen: 24
79.174.34.0/23 maxlen: 23
79.174.33.0/24 maxlen: 24
79.174.36.0/23 maxlen: 23
79.174.36.0/24 maxlen: 24
79.174.35.0/24 maxlen: 24
79.174.32.0/22 maxlen: 22
79.174.32.0/19 maxlen: 19
79.174.32.0/20 maxlen: 20
79.174.32.0/23 maxlen: 23
79.174.38.0/24 maxlen: 24
79.174.37.0/24 maxlen: 24
79.174.32.0/24 maxlen: 24
79.174.42.0/23 maxlen: 23
79.174.44.0/22 maxlen: 22
79.174.39.0/24 maxlen: 24
79.174.38.0/23 maxlen: 23
79.174.42.0/24 maxlen: 24
79.174.41.0/24 maxlen: 24
79.174.44.0/23 maxlen: 23
79.174.44.0/24 maxlen: 24
79.174.40.0/22 maxlen: 22
79.174.40.0/23 maxlen: 23
79.174.43.0/24 maxlen: 24
79.174.40.0/24 maxlen: 24
79.174.49.0/24 maxlen: 24
79.174.50.0/23 maxlen: 23
79.174.50.0/24 maxlen: 24
79.174.48.0/22 maxlen: 22
79.174.48.0/24 maxlen: 24
79.174.51.0/24 maxlen: 24
79.174.46.0/23 maxlen: 23
79.174.46.0/24 maxlen: 24
79.174.48.0/20 maxlen: 20
79.174.45.0/24 maxlen: 24
79.174.48.0/23 maxlen: 23
79.174.56.0/22 maxlen: 22
79.174.55.0/24 maxlen: 24
79.174.56.0/24 maxlen: 24
79.174.58.0/23 maxlen: 23
79.174.58.0/24 maxlen: 24
79.174.57.0/24 maxlen: 24
79.174.52.0/23 maxlen: 23
79.174.53.0/24 maxlen: 24
79.174.52.0/24 maxlen: 24
79.174.54.0/23 maxlen: 23
79.174.54.0/24 maxlen: 24
79.174.56.0/23 maxlen: 23
79.174.60.0/22 maxlen: 22
79.174.63.0/24 maxlen: 24
79.174.60.0/23 maxlen: 23
79.174.60.0/24 maxlen: 24
79.174.59.0/24 maxlen: 24
79.174.62.0/23 maxlen: 23
79.174.62.0/24 maxlen: 24
79.174.61.0/24 maxlen: 24
136.169.222.0/23 maxlen: 23
136.169.222.0/24 maxlen: 24
136.169.221.0/24 maxlen: 24
136.169.220.0/22 maxlen: 22
136.169.223.0/24 maxlen: 24
136.169.220.0/23 maxlen: 23
136.169.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:b6:3d:24:ae:87:06:c2:fc:92:c8:c2:ab:a2:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Aug 2 04:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f06e885bda2ec7bb725d9e9af3caf7d9e79f256f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:3b:f6:85:c4:ed:11:b8:8d:f0:07:e9:37:
64:fd:dd:25:a9:f2:17:90:80:b0:7f:28:db:bb:31:
09:1d:7c:9e:7b:89:c6:71:3b:0e:d0:7c:87:97:ba:
48:7b:d8:33:df:3b:5e:c9:a8:52:ca:a2:37:9d:37:
c2:4b:9b:9a:2c:9f:99:59:f5:2e:9a:7c:96:22:05:
88:46:cb:b3:3a:4c:11:07:09:ec:8a:4a:41:68:0b:
5e:94:aa:68:12:ae:bf:b5:ab:44:62:7d:b1:df:d3:
b6:d6:06:23:f1:fc:be:ba:8f:cf:1c:da:89:1e:ac:
cf:8b:57:49:6a:9c:ed:a3:72:f6:ab:ab:1f:fa:7c:
8f:73:a1:b4:2b:dd:4e:28:04:38:b2:f2:11:10:e3:
73:9b:51:15:d1:6c:d6:af:76:af:c0:6f:4f:41:9f:
51:56:13:94:06:ba:23:6d:66:0e:4b:c0:7e:b2:bc:
6e:a4:38:63:99:94:e3:c3:c5:77:ae:79:89:58:3a:
b0:b2:11:d7:3b:6c:f3:73:c4:f1:0a:d1:69:a1:0b:
a9:33:ea:f4:e9:14:8c:2d:f2:81:d4:12:e0:8f:dc:
d6:63:d1:7c:87:53:79:32:f7:4f:18:21:6a:a8:a1:
c0:55:5c:11:bf:e8:cb:1a:f2:e3:cc:ec:88:a6:64:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6E:88:5B:DA:2E:C7:BB:72:5D:9E:9A:F3:CA:F7:D9:E7:9F:25:6F
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/8G6IW9oux7tyXZ6a88r32eefJW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.32.0/19
136.169.220.0/22
188.191.112.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:32:90:ff:a1:f7:f1:f3:08:8c:c6:d6:97:58:f2:bd:3b:17:
55:77:05:d4:8d:62:a8:c9:94:76:4a:1b:35:bb:40:6b:2c:4f:
24:ac:bc:a7:e4:d7:92:64:36:25:98:64:0c:49:68:ff:63:30:
9e:56:73:f4:88:c9:6e:3b:77:8b:42:74:97:3d:6a:27:a7:fb:
40:aa:15:a6:40:51:c0:db:89:53:14:9b:70:e5:49:28:68:bf:
60:42:b2:ba:24:53:eb:43:47:2f:cc:d2:4e:fb:98:ee:35:87:
5c:78:7d:fd:1f:4b:0b:59:f5:06:c0:3c:3d:75:1d:4b:2a:3b:
29:3b:7e:99:82:d1:e6:10:a6:5e:0a:7d:23:cf:b2:c4:1a:b9:
4f:59:01:e1:16:e5:08:35:41:f0:2b:86:72:e0:12:68:cc:8e:
1b:dc:67:6a:91:3b:54:b0:cf:41:56:da:06:de:e2:f5:19:c9:
f3:52:e9:8c:61:14:53:fb:8e:bf:b0:87:66:29:6a:15:c7:80:
ce:e5:0f:c2:86:25:c4:c9:e4:b4:a7:a7:b0:36:36:b2:38:82:
22:8e:77:88:2c:63:53:76:6b:65:ee:6c:9f:dc:d5:ba:c6:ec:
d7:b9:39:d9:2d:0e:64:ff:cf:ec:89:84:10:2e:86:c1:52:4c:
4b:cb:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org