Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/AiZL1JNB2YPw-wTt5T0ZiF2DqJE.roa
File: AiZL1JNB2YPw-wTt5T0ZiF2DqJE.roa (raw, json)
Hash identifier: So6nNQRX/ei79IIacz5ZcZ6wsQNKXYQW+rIweZidcv0=
Subject key identifier: 02:26:4B:D4:93:41:D9:83:F0:FB:04:ED:E5:3D:19:88:5D:83:A8:91
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 27017338
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/AiZL1JNB2YPw-wTt5T0ZiF2DqJE.roa
Signing time: Sat 01 Jan 2022 15:00:42 +0000
ROA not before: Sat 01 Jan 2022 15:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60095
IP address blocks: 185.44.8.0/22 maxlen: 22
185.44.11.0/24 maxlen: 24
185.44.8.0/23 maxlen: 23
185.44.8.0/24 maxlen: 24
185.44.10.0/23 maxlen: 23
185.44.10.0/24 maxlen: 24
185.44.9.0/24 maxlen: 24
93.157.253.0/24 maxlen: 24
93.157.252.0/24 maxlen: 24
93.157.252.0/22 maxlen: 22
93.157.252.0/23 maxlen: 23
93.157.254.0/24 maxlen: 24
93.157.254.0/23 maxlen: 23
93.157.255.0/24 maxlen: 24
136.169.212.0/22 maxlen: 22
136.169.212.0/23 maxlen: 23
136.169.212.0/24 maxlen: 24
136.169.213.0/24 maxlen: 24
136.169.215.0/24 maxlen: 24
136.169.214.0/23 maxlen: 23
136.169.214.0/24 maxlen: 24
2a02:1c8:a::/48 maxlen: 48
2a02:1c8:40::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654406456 (0x27017338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 15:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02264bd49341d983f0fb04ede53d19885d83a891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:f2:d0:5b:c1:df:ea:ac:d1:4f:43:b0:4b:
c7:cf:af:ad:c8:f5:38:41:df:32:98:d5:cd:6a:0f:
f4:05:c1:45:45:c1:d5:95:3c:d4:22:6e:23:8c:37:
70:07:a5:ca:af:a7:87:8e:dc:bd:bc:cc:be:76:1f:
41:9f:e4:33:64:48:c8:9b:98:b9:08:34:c2:23:26:
87:02:ac:04:17:0d:df:40:50:34:26:e4:94:5f:c8:
a7:e6:1a:03:f7:94:3a:b6:8a:10:7e:8a:f1:a9:7a:
4b:22:97:99:49:14:56:2b:68:68:77:1d:91:9b:41:
d0:83:68:3c:ac:c7:cb:56:ee:b1:3b:56:9b:c1:4c:
72:ff:a7:b5:23:c7:41:a3:47:05:85:df:2a:6d:9d:
64:fc:fa:05:69:07:37:6d:e8:32:33:1d:ba:73:92:
98:9f:25:3f:3e:c4:f0:76:a3:d8:c0:d4:48:04:0b:
83:07:97:82:75:79:7e:bb:96:43:e3:5b:98:e2:7c:
ba:d9:ba:41:7e:95:fa:2c:35:5f:6d:66:86:c9:b7:
00:a2:fb:82:80:ba:e9:7f:cd:bd:78:10:c2:45:44:
7a:d3:22:39:3e:e6:48:31:b3:15:77:76:ac:ed:d0:
05:d6:05:b2:79:60:cf:7f:32:9a:c9:0a:db:00:ea:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:26:4B:D4:93:41:D9:83:F0:FB:04:ED:E5:3D:19:88:5D:83:A8:91
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/AiZL1JNB2YPw-wTt5T0ZiF2DqJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.252.0/22
136.169.212.0/22
185.44.8.0/22
IPv6:
2a02:1c8:a::/48
2a02:1c8:40::/44
Signature Algorithm: sha256WithRSAEncryption
19:75:61:85:ff:f4:37:00:22:69:a1:47:77:ac:93:7b:fb:13:
51:3c:7a:e9:e8:da:fd:2d:a3:ad:7e:36:a7:de:69:35:98:89:
fe:bc:3c:e5:fe:3b:e7:43:38:47:46:b1:c5:f5:38:2a:23:57:
88:93:d8:41:98:54:3b:34:be:1f:31:2c:83:9a:36:df:40:95:
5c:e5:46:ae:42:2e:bc:4b:3a:f0:56:4e:84:af:54:00:f2:66:
31:f0:a0:11:60:b9:88:2c:f3:6c:87:e4:0b:92:f3:52:17:9d:
56:a2:c7:f6:0a:60:26:20:e8:ac:92:e8:f4:68:b1:26:b7:be:
3d:46:b7:be:7c:45:b1:03:53:e2:3e:3c:2f:f5:82:ba:13:14:
3c:60:c4:da:e2:85:fc:3a:5a:8c:ce:a8:42:bb:2e:76:ec:c4:
30:0d:7c:d4:37:9b:c1:14:da:1a:c1:60:cd:38:08:0f:4a:75:
c2:8f:04:62:a9:73:2a:15:a4:60:57:09:e9:b7:81:e3:a2:ee:
42:85:93:2d:fa:fb:59:7c:18:94:b9:d8:88:44:ab:e9:03:c8:
4f:4c:8a:e9:55:57:eb:8e:52:a5:5a:0e:cd:71:88:56:b1:2d:
6a:66:66:e9:25:99:4c:4c:62:df:b2:16:ce:6e:88:34:9f:c4:
3b:fb:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org