Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/SC1ryXjlpGARrDhdyIZkzrumbo8.roa
File: SC1ryXjlpGARrDhdyIZkzrumbo8.roa (raw, json)
Hash identifier: ejESRf0ng9+ka3tepjf9BCZYLyK44xIwBaBNd2mb0qI=
Subject key identifier: 48:2D:6B:C9:78:E5:A4:60:11:AC:38:5D:C8:86:64:CE:BB:A6:6E:8F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 02583971
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/SC1ryXjlpGARrDhdyIZkzrumbo8.roa
Signing time: Wed 26 Jan 2022 13:37:57 +0000
ROA not before: Wed 26 Jan 2022 13:37:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 164.215.98.0/24 maxlen: 24
164.215.97.0/24 maxlen: 24
164.215.96.0/24 maxlen: 24
164.215.99.0/24 maxlen: 24
85.158.147.0/24 maxlen: 24
109.205.210.0/24 maxlen: 24
88.151.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39336305 (0x2583971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 26 13:37:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=482d6bc978e5a46011ac385dc88664cebba66e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:ff:4d:24:12:a6:a7:96:e6:e8:7d:12:34:
17:b5:3e:20:42:5f:85:47:23:0c:f3:f6:50:76:cc:
8b:7f:4f:df:5c:00:18:72:8f:ef:06:8c:f7:28:1a:
02:66:6f:23:2d:2c:fc:2a:d1:3f:ef:65:05:6e:48:
d8:5c:e5:fa:8e:34:6b:8e:f9:4d:58:e2:1d:a5:88:
6e:2a:8d:1b:fc:87:34:5d:b8:96:64:00:a1:c6:9e:
0a:35:50:da:df:62:63:03:c4:4e:44:6c:1f:b6:35:
44:b8:61:d6:cd:81:55:b4:ac:1f:66:06:8b:ee:96:
a1:22:56:c1:98:eb:52:c7:c4:90:15:f1:e8:ba:c8:
ea:26:34:9d:57:d1:56:7a:8c:18:ae:9e:95:cc:6d:
4d:45:31:7e:c8:ac:8e:29:d8:b6:0a:f5:ec:c8:a6:
bd:63:41:7c:04:d1:b4:c2:f1:2a:5a:a3:02:90:2c:
54:a8:67:a9:f1:52:6c:31:2e:ed:5f:16:8f:35:65:
a1:b8:2e:5b:29:bc:30:b4:c3:dc:93:bb:70:17:cf:
3c:2f:b5:b6:5c:26:8f:bf:06:53:14:58:a3:28:e4:
d0:d9:b7:71:03:15:58:51:d5:0e:ae:45:cf:00:f6:
61:cb:ec:e1:ce:ae:1a:32:c6:b3:5e:d3:7d:93:66:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:6B:C9:78:E5:A4:60:11:AC:38:5D:C8:86:64:CE:BB:A6:6E:8F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/SC1ryXjlpGARrDhdyIZkzrumbo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.147.0/24
88.151.194.0/24
109.205.210.0/24
164.215.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:e0:eb:0a:d1:60:40:47:dc:49:86:53:00:7d:e2:84:45:1b:
a1:1b:a9:80:b0:83:98:53:ba:92:25:b9:03:cd:55:82:8a:dc:
32:69:9b:a0:9a:10:4b:f8:c0:cb:b5:6f:e0:5d:94:9b:cb:9d:
74:d8:c7:55:df:4e:26:cf:f9:61:26:bb:56:4e:85:e3:77:d1:
85:eb:be:52:d3:c9:ea:f8:dc:84:cf:dc:a9:10:50:21:77:71:
b5:0b:de:bc:c4:c7:20:af:d9:2b:8c:67:63:77:96:64:07:0a:
78:d0:d3:e8:bd:36:a4:29:93:49:eb:a1:d3:43:36:1b:46:9f:
ad:f3:40:ed:c1:0b:84:23:bd:3b:b1:b3:ca:9e:fd:95:11:28:
2b:77:2b:37:4b:dd:67:1e:7a:90:b4:86:99:96:07:2c:3e:04:
fd:02:d9:24:fb:11:e9:29:6f:78:77:bc:08:6b:55:e7:6c:4e:
4c:1b:cd:94:5c:e7:73:76:14:6f:26:f5:61:98:ed:b1:f7:83:
b6:8c:e6:e8:94:be:45:e9:bd:c5:90:b2:4f:eb:04:0c:67:8d:
c0:31:1b:9d:52:02:dd:a0:0b:b9:10:2f:9d:a6:3b:ed:93:9f:
79:42:37:56:3c:7d:9c:3c:82:11:59:3a:89:9d:1f:60:51:d3:
d5:83:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org