Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/Ob04-JFhY9CBBOe8Z6bjbD9AcA4.roa
File: Ob04-JFhY9CBBOe8Z6bjbD9AcA4.roa (raw, json)
Hash identifier: +AlV84UwD57h9NlmJX1CxOL0ncdoKBEUoTgD3Rccbn8=
Subject key identifier: 39:BD:38:F8:91:61:63:D0:81:04:E7:BC:67:A6:E3:6C:3F:40:70:0E
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 0B6FE283
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/Ob04-JFhY9CBBOe8Z6bjbD9AcA4.roa
Signing time: Tue 12 Apr 2022 08:02:06 +0000
ROA not before: Tue 12 Apr 2022 08:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13101
IP address blocks: 80.66.192.0/22 maxlen: 22
113.30.180.0/22 maxlen: 22
185.181.128.0/22 maxlen: 22
113.30.220.0/22 maxlen: 22
185.152.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191881859 (0xb6fe283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Apr 12 08:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39bd38f8916163d08104e7bc67a6e36c3f40700e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:35:a5:ed:56:b0:e6:b3:e9:5f:23:2f:70:
9d:15:5d:93:92:3d:12:74:2c:63:eb:5e:19:cb:43:
d5:9f:ad:95:6c:22:e9:8c:82:15:54:51:2c:5d:d6:
01:68:a4:40:80:f6:aa:93:ad:77:ae:4c:90:21:44:
61:e0:95:e4:74:3e:a9:a6:fa:62:68:dd:dd:12:7e:
e4:21:79:65:4f:09:8b:72:c5:19:bd:80:f6:b0:56:
79:e6:9f:2f:5a:b7:9d:95:c5:31:be:36:ec:1d:79:
c9:ba:3d:80:aa:9e:9d:3f:6c:6d:81:1e:df:d8:ec:
bd:fc:0f:f9:f7:8d:c5:44:8f:57:1f:5b:6c:df:1d:
71:43:74:e8:6a:42:ac:a8:ca:39:6b:93:ad:c7:1d:
8c:10:2d:c4:f9:d5:2d:c5:16:71:8a:fb:1b:56:be:
ee:6c:88:c5:7b:b5:f0:34:e5:10:d9:4c:69:8f:81:
36:27:a9:54:23:b8:d0:c9:bd:d8:8c:8c:28:95:29:
03:86:58:45:af:82:e7:30:9f:52:3e:18:86:e7:d6:
3b:53:04:69:e7:d9:c2:b5:1b:fc:aa:c0:14:c4:eb:
cc:d7:ce:58:25:8e:61:37:ac:27:c1:e1:ee:20:de:
3d:bf:b1:4d:e1:c5:9b:b6:4f:32:a4:8d:e0:20:be:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:38:F8:91:61:63:D0:81:04:E7:BC:67:A6:E3:6C:3F:40:70:0E
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/Ob04-JFhY9CBBOe8Z6bjbD9AcA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.192.0/22
113.30.180.0/22
113.30.220.0/22
185.152.144.0/22
185.181.128.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ed:29:10:89:f1:56:41:73:0f:e2:2c:8b:05:d7:2b:bc:8c:
c7:4b:d4:d1:36:ae:35:35:cc:f4:50:9e:f2:14:01:71:fb:c2:
92:50:cb:bc:0e:ab:a5:dc:22:1c:f6:5e:36:0b:ef:fe:93:20:
26:81:69:e2:58:97:cc:41:fe:fd:41:cb:1d:ee:4d:c6:8b:09:
a5:e2:0d:ea:20:e3:d7:24:bd:99:97:b5:ac:82:8a:6d:19:b7:
89:89:54:de:e9:d6:70:28:11:f1:36:16:06:6a:64:99:06:b0:
eb:3f:da:f1:32:b2:74:4e:80:82:79:5f:8d:81:78:4b:99:87:
4a:04:f5:61:49:10:df:ef:17:f7:fc:6e:23:78:0f:ba:35:dd:
c4:c8:cf:a7:c0:ce:eb:5f:ea:e6:e2:62:f7:5a:79:8f:8a:bf:
a1:a2:b4:df:26:6e:15:88:35:cb:df:11:a2:5e:65:67:eb:a2:
5a:78:f5:80:27:c6:a9:31:ab:84:ba:44:b3:18:69:83:58:dd:
2e:12:5e:27:91:4a:0c:94:cb:89:81:3c:4a:a6:92:ab:59:14:
03:6d:9c:79:79:53:fa:99:9b:df:82:f7:25:88:45:8f:5a:7c:
69:0f:d6:89:1d:8e:ef:91:d4:ed:1a:90:22:75:31:e2:5e:c8:
d0:ae:c7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org