Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/QC2_8bFs1WNUXD3u4CLVRASBvuM.roa
File: QC2_8bFs1WNUXD3u4CLVRASBvuM.roa (raw, json)
Hash identifier: xBva+of6JiTTHZBNDUmQ/yuKGO3hwoJhs3A6ItHMfWA=
Subject key identifier: 40:2D:BF:F1:B1:6C:D5:63:54:5C:3D:EE:E0:22:D5:44:04:81:BE:E3
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 018382CA884E268BB7DA1883DDDC138B8FB6
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/QC2_8bFs1WNUXD3u4CLVRASBvuM.roa
Signing time: Wed 28 Sep 2022 06:30:54 +0000
ROA not before: Wed 28 Sep 2022 06:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200088
IP address blocks: 94.228.122.0/24 maxlen: 24
87.249.50.0/24 maxlen: 24
188.225.60.0/24 maxlen: 24
78.40.216.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
85.193.93.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
217.25.95.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
2a03:6f00:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:82:ca:88:4e:26:8b:b7:da:18:83:dd:dc:13:8b:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Sep 28 06:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=402dbff1b16cd563545c3deee022d5440481bee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:3f:e5:2f:0d:eb:b4:eb:9a:66:43:62:4d:
83:18:d2:aa:74:2b:3e:c6:b9:fe:1f:f0:f9:07:b7:
48:44:b1:ca:54:1b:dd:e2:54:e7:6e:d8:5a:c7:ea:
fa:c8:79:ec:f8:bf:a7:ed:be:41:14:6c:80:e8:ba:
83:0a:00:6b:34:53:fc:fa:74:d5:f5:24:1a:99:1c:
73:59:ba:78:26:82:58:da:2e:9e:fd:f1:ad:46:e6:
af:4f:66:2b:00:43:d9:ea:93:13:bd:94:ac:e2:e6:
7e:3b:84:56:75:c0:29:50:75:2c:b2:20:0f:86:7c:
3b:40:76:0c:2d:5d:fc:54:b1:79:49:db:79:8c:25:
f4:6f:0d:74:8b:d5:42:fa:02:5a:21:8e:50:d8:06:
21:fe:14:6c:00:97:2a:fb:08:bf:ec:39:57:97:6e:
97:ee:ab:6a:b5:d1:7b:8c:dc:e9:36:42:53:6c:26:
c9:28:0c:db:86:3f:d3:8b:af:ec:6b:41:79:05:2b:
d3:b4:98:2c:11:42:15:98:8e:c7:5d:ab:c3:69:5d:
56:69:9c:7f:91:ff:17:77:01:50:35:2c:de:16:0c:
16:4f:ef:f3:00:25:81:26:37:57:64:fc:16:1a:d1:
6b:7e:d1:7a:4a:e0:06:ad:82:22:4c:6c:21:f8:8a:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2D:BF:F1:B1:6C:D5:63:54:5C:3D:EE:E0:22:D5:44:04:81:BE:E3
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/QC2_8bFs1WNUXD3u4CLVRASBvuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/23
87.249.50.0/24
94.228.122.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
188.225.60.0/24
217.25.91.0/24
217.25.95.0/24
IPv6:
2a03:6f00:8::/48
Signature Algorithm: sha256WithRSAEncryption
a6:e4:c3:19:07:bb:3d:7e:51:00:2c:ca:23:8e:9c:7f:f6:24:
49:4f:d0:1d:32:a5:82:95:4f:a9:31:38:fc:c4:ab:ba:46:7d:
5e:13:3b:8e:15:bf:09:4a:cd:d3:42:45:3d:40:36:39:a4:94:
3d:8a:4a:a6:88:ee:55:f4:d6:e7:8b:ee:db:26:43:d1:af:e8:
02:8b:12:3d:b6:45:ae:84:de:19:14:a4:2a:6b:7f:a4:6b:a4:
19:06:e0:79:be:94:7b:c2:aa:e1:eb:eb:ca:a7:0d:cc:e9:8c:
a2:ae:4d:87:e1:70:c7:7b:e3:b0:2d:e9:02:bb:fc:87:69:65:
9f:3f:41:6d:0c:64:32:3a:23:8a:c7:22:1c:9b:a5:71:16:8d:
6d:d3:a3:89:1b:9d:fe:5f:a8:6e:28:31:f4:78:fe:fd:d3:5b:
e2:f6:bc:5c:37:e5:01:4e:d2:17:21:97:85:8c:1e:0c:f6:01:
5b:b3:79:29:38:b5:b2:e5:9e:53:94:44:67:2f:4a:b7:fa:41:
42:50:d9:c4:35:35:9b:b6:ce:a5:ea:a6:69:65:5d:cb:88:14:
14:64:e4:53:77:82:a2:53:94:32:bc:78:db:4d:e6:2d:3f:12:
ba:a3:ea:ac:c5:58:58:51:90:8d:f8:74:9d:80:5f:a2:a1:2c:
57:2d:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:40 2023 by rpki-client on console-ams.rpki-client.org