Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/G3ibsksaVl2au8lM-gTO3yeBE54.roa
File: G3ibsksaVl2au8lM-gTO3yeBE54.roa (raw, json)
Hash identifier: 2nqWxY5ELfoR53Dad5HXchzSQrt0VFKnYmWXSZa09Lo=
Subject key identifier: 1B:78:9B:B2:4B:1A:56:5D:9A:BB:C9:4C:FA:04:CE:DF:27:81:13:9E
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 03F9A1EB
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/G3ibsksaVl2au8lM-gTO3yeBE54.roa
Signing time: Sat 01 Jan 2022 14:57:00 +0000
ROA not before: Sat 01 Jan 2022 14:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42632
IP address blocks: 176.58.36.0/23 maxlen: 23
176.58.32.0/22 maxlen: 23
176.58.40.0/24 maxlen: 24
176.58.62.0/23 maxlen: 23
146.255.201.0/24 maxlen: 24
146.255.200.0/24 maxlen: 24
146.255.200.0/23 maxlen: 23
146.255.216.0/22 maxlen: 22
146.255.220.0/22 maxlen: 22
146.255.192.0/22 maxlen: 23
146.255.198.0/23 maxlen: 24
146.255.197.0/24 maxlen: 24
146.255.196.0/24 maxlen: 24
77.220.160.0/23 maxlen: 23
77.220.164.0/22 maxlen: 23
77.220.168.0/22 maxlen: 23
77.220.172.0/23 maxlen: 23
83.222.96.0/22 maxlen: 22
77.220.174.0/23 maxlen: 23
77.220.176.0/21 maxlen: 24
77.220.180.0/24 maxlen: 24
77.220.184.0/21 maxlen: 21
83.222.100.0/22 maxlen: 22
83.222.104.0/22 maxlen: 22
83.222.112.0/22 maxlen: 22
83.222.108.0/22 maxlen: 22
83.222.116.0/22 maxlen: 22
212.76.128.0/21 maxlen: 23
212.76.136.0/21 maxlen: 23
212.76.144.0/22 maxlen: 22
212.76.152.0/22 maxlen: 24
212.76.156.0/22 maxlen: 22
2a02:878:a::/48 maxlen: 48
2a02:878:a801::/48 maxlen: 48
2a02:878:1::/48 maxlen: 48
2a02:878:10::/48 maxlen: 48
2a02:878:a80e::/48 maxlen: 48
2a02:878:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66691563 (0x3f9a1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jan 1 14:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b789bb24b1a565d9abbc94cfa04cedf2781139e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:aa:4c:b9:73:d9:b4:77:e2:8e:d8:d1:4c:b9:
0b:4b:c5:ec:e2:b6:4f:29:1f:ca:47:87:bc:af:e6:
c8:79:15:a2:cd:26:7a:c1:40:fd:77:2d:31:67:81:
fb:2e:07:0a:68:a5:09:fa:1a:0a:1c:24:52:96:6c:
f1:21:40:b3:4f:bb:a6:05:87:de:88:44:ea:fc:a7:
08:7f:de:f6:6c:7f:bb:5c:e9:86:1a:72:59:a0:cd:
4e:38:2c:61:df:8c:ec:b8:64:53:1d:cf:00:b5:ec:
dd:8d:da:d3:d2:82:b7:6d:ae:c1:c2:0e:c8:38:25:
8c:3f:05:37:a9:c8:60:c7:22:91:a9:77:52:9c:a4:
98:19:02:16:ca:1a:44:ff:46:05:7c:7a:4b:5b:2b:
fb:32:9c:a3:5c:56:37:05:6d:d5:78:80:db:a8:b5:
db:8a:c5:d9:f4:5c:75:4a:a3:bd:53:f8:17:e1:e0:
6e:72:89:a0:2d:1f:b1:89:f0:49:5b:ab:58:00:22:
70:da:a1:25:4c:55:02:dd:12:76:16:04:7f:f5:e2:
25:39:80:ea:c9:c7:19:c7:37:fe:55:14:99:5c:27:
e3:5d:07:a0:9a:9e:8e:1f:80:7b:56:c1:be:af:5f:
51:df:10:80:d2:6f:fa:55:21:0f:6d:72:e5:45:1d:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:78:9B:B2:4B:1A:56:5D:9A:BB:C9:4C:FA:04:CE:DF:27:81:13:9E
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/G3ibsksaVl2au8lM-gTO3yeBE54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.160.0/23
77.220.164.0-77.220.191.255
83.222.96.0-83.222.119.255
146.255.192.0-146.255.201.255
146.255.216.0/21
176.58.32.0-176.58.37.255
176.58.40.0/24
176.58.62.0/23
212.76.128.0-212.76.147.255
212.76.152.0/21
IPv6:
2a02:878:1::-2a02:878:2:ffff:ffff:ffff:ffff:ffff
2a02:878:a::/48
2a02:878:10::/48
2a02:878:a801::/48
2a02:878:a80e::/48
Signature Algorithm: sha256WithRSAEncryption
21:b7:a5:4a:02:ca:99:f3:7e:3c:f5:af:1e:fd:73:e3:cd:a1:
57:8c:cd:18:38:e6:2f:5a:0b:99:57:84:9f:54:b3:76:a1:fd:
20:61:90:02:3f:8d:00:de:ff:e0:b4:94:67:bb:e0:3b:6e:23:
de:cb:0a:c8:b9:f0:40:68:16:47:a7:cb:d4:e3:82:61:ed:a9:
b3:a4:ab:d1:3e:ed:c0:35:ed:ad:47:dd:be:52:e4:8e:15:d6:
9c:b2:5d:e9:e8:18:91:46:cc:d6:bb:78:fa:a4:1c:bb:4f:60:
17:c1:18:16:3d:b4:29:96:5c:8a:54:f0:cb:e4:63:12:e5:5d:
2f:60:f4:77:cc:e0:65:6a:ad:ac:36:c2:f9:94:11:17:82:a3:
eb:88:37:ef:4e:c6:89:c3:86:b2:78:76:6f:91:ec:bf:cf:b4:
88:2c:90:f5:56:42:88:21:50:91:59:de:a2:c3:d7:01:3c:a2:
a0:8c:80:cd:ba:96:b9:46:7b:6a:b6:10:10:65:5d:97:dd:ae:
d0:a9:ab:40:18:65:d3:4b:f8:6d:e0:ee:27:9a:29:8f:12:2b:
81:41:fe:1e:3b:28:8b:0f:52:70:02:73:1a:d9:96:8e:00:f8:
43:fa:a0:ec:08:c2:c1:49:26:bd:ef:96:08:6d:c7:c2:84:01:
bf:fb:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-fra.rpki-client.org