Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/APJpuaOOLFdG1RNYfZ0dZLlfwJw.roa
File: APJpuaOOLFdG1RNYfZ0dZLlfwJw.roa (raw, json)
Hash identifier: LqbJQSwHs9QKxYE0X1uSeRml7lEezjnBFddX5wRJVmo=
Subject key identifier: 00:F2:69:B9:A3:8E:2C:57:46:D5:13:58:7D:9D:1D:64:B9:5F:C0:9C
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 0184659FD0EC02C584293B90CA309C6B70B9
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/APJpuaOOLFdG1RNYfZ0dZLlfwJw.roa
Signing time: Fri 11 Nov 2022 07:38:03 +0000
ROA not before: Fri 11 Nov 2022 07:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200088
IP address blocks: 94.228.122.0/24 maxlen: 24
188.225.60.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
194.35.116.0/24 maxlen: 24
194.35.118.0/24 maxlen: 24
194.35.117.0/24 maxlen: 24
217.25.95.0/24 maxlen: 24
194.35.119.0/24 maxlen: 24
193.201.115.0/24 maxlen: 24
87.249.50.0/24 maxlen: 24
78.40.216.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
85.193.95.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
2a03:6f00:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:9f:d0:ec:02:c5:84:29:3b:90:ca:30:9c:6b:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Nov 11 07:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00f269b9a38e2c5746d513587d9d1d64b95fc09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:3a:a7:84:46:ff:fb:8e:14:df:04:bf:7f:
fc:5a:6d:60:78:97:7f:5a:83:6c:71:b5:0c:bd:77:
c5:ae:75:9f:34:55:0c:21:95:fc:b3:d4:0a:29:d9:
4d:6d:dc:ea:1f:25:9a:a2:e7:44:f8:6e:e6:93:37:
87:b0:66:d1:0f:e7:ee:b3:f5:aa:f5:7a:83:1f:e5:
54:25:81:ce:97:d1:9f:00:77:84:38:1f:74:69:0e:
1e:32:0f:50:8d:e7:e7:74:ae:70:e7:00:01:90:eb:
7c:66:69:95:44:5a:b4:9d:db:1f:ab:a9:f8:26:85:
6e:32:ad:02:6e:2b:31:ae:9a:6e:fc:02:41:d0:a7:
a4:5c:66:01:d8:18:98:2b:9e:98:7d:be:77:c8:64:
5e:e8:8b:0e:ef:25:cb:2e:6d:c8:7c:1d:91:c7:0a:
01:97:af:77:a2:ce:bd:c7:87:3a:33:41:25:a6:1a:
f2:e5:46:99:7d:5f:3e:fb:56:57:25:99:19:9c:ca:
df:91:16:32:ba:b2:7d:ec:9d:67:f4:cb:96:76:ae:
67:0c:8c:ae:90:76:62:da:f5:1b:47:89:f2:42:36:
ba:14:60:b7:8c:99:3b:79:49:64:bf:79:4c:b4:3e:
6c:e2:d7:41:b8:0b:5d:2c:cb:a6:0d:02:0e:bc:20:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F2:69:B9:A3:8E:2C:57:46:D5:13:58:7D:9D:1D:64:B9:5F:C0:9C
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/APJpuaOOLFdG1RNYfZ0dZLlfwJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
85.193.95.0/24
87.249.50.0/24
94.228.122.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
188.225.60.0/24
193.201.115.0/24
194.35.116.0/22
217.25.91.0/24
217.25.95.0/24
IPv6:
2a03:6f00:8::/48
Signature Algorithm: sha256WithRSAEncryption
40:d6:3f:ef:68:92:4b:e2:5b:7d:d4:60:09:cf:2c:f1:e4:e4:
f2:d2:b5:68:c6:b7:16:7d:77:e0:04:8f:ef:6d:3b:82:da:bd:
7c:84:f8:b6:7f:99:0d:4b:d6:75:51:7c:a8:71:9b:c6:19:dc:
6e:eb:12:0d:43:ff:48:43:1b:06:dc:de:b4:d5:71:eb:b6:55:
e5:47:07:22:ee:04:6c:fb:b5:11:0e:1b:e7:78:03:1b:86:e6:
c4:13:85:85:70:0b:b4:ac:df:79:96:7d:9c:bd:bd:b3:f1:17:
45:63:cb:10:29:50:fb:36:e6:4b:ec:19:f9:de:07:ab:d4:d9:
b3:be:18:c2:19:55:02:3a:5d:c0:6f:7b:61:59:2a:61:16:0c:
f4:5d:2d:b5:53:c4:67:a8:80:47:70:e8:22:38:68:52:12:f0:
83:cc:9c:78:35:a5:35:a4:7d:e3:01:31:ad:10:19:0a:16:c8:
33:6b:b0:ac:f5:3b:03:34:a5:1c:84:c0:1a:c2:c2:64:51:14:
a5:21:5f:e8:ad:cb:1a:d7:90:82:7a:96:5e:a2:84:f9:2a:a6:
bb:9f:09:7f:10:4d:f3:c4:61:4d:e6:73:cc:84:e2:59:d0:58:
df:8f:b5:de:8f:6d:96:ce:07:a9:68:c1:08:d6:01:10:46:c5:
9d:d8:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:49 2023 by rpki-client on console-fra.rpki-client.org