Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/XhfEyScF5pb7x7a8MDRqszSMkBw.roa
File: XhfEyScF5pb7x7a8MDRqszSMkBw.roa (raw, json)
Hash identifier: Khtd6UYNGfaMd4kgY4A4KmgGKup+eqe6DH1dmxye+tI=
Subject key identifier: 5E:17:C4:C9:27:05:E6:96:FB:C7:B6:BC:30:34:6A:B3:34:8C:90:1C
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 018378F77B8F03A0706B11383900D3016CC9
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/XhfEyScF5pb7x7a8MDRqszSMkBw.roa
Signing time: Mon 26 Sep 2022 08:43:48 +0000
ROA not before: Mon 26 Sep 2022 08:43:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200088
IP address blocks: 94.228.122.0/24 maxlen: 24
87.249.50.0/24 maxlen: 24
188.225.60.0/24 maxlen: 24
78.40.216.0/24 maxlen: 24
185.104.112.0/24 maxlen: 24
185.104.115.0/24 maxlen: 24
217.25.91.0/24 maxlen: 24
85.193.92.0/24 maxlen: 24
217.25.95.0/24 maxlen: 24
176.57.221.0/24 maxlen: 24
2a03:6f00:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:78:f7:7b:8f:03:a0:70:6b:11:38:39:00:d3:01:6c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Sep 26 08:43:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e17c4c92705e696fbc7b6bc30346ab3348c901c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:64:65:62:04:d0:0c:83:cf:87:db:db:0a:
aa:85:54:3e:ff:c8:1f:e2:eb:d7:6f:c5:1b:f0:fa:
07:8a:b1:b3:3b:bf:9b:94:03:33:61:45:f9:ca:d7:
a7:3a:a5:a6:88:7e:83:fa:74:0b:c3:c6:39:2b:e6:
fd:de:20:87:f6:51:f0:85:6c:e9:3d:f8:41:8b:06:
31:8c:b1:9a:79:e6:7b:80:68:96:85:e8:e5:a4:10:
82:5e:08:8e:92:50:18:48:ef:ef:c3:2c:ef:26:ce:
7b:d2:1e:31:54:95:1b:19:70:26:40:ea:e7:22:e5:
26:8c:52:e3:4d:0b:6f:ce:39:e3:78:4c:13:a2:f0:
55:9d:fc:05:2f:2c:2c:a9:41:a1:b1:67:f3:af:d5:
9c:52:1f:1b:c6:27:82:91:ab:52:65:87:18:27:e5:
2a:46:9d:34:4b:4e:3e:f6:73:6f:5a:8d:39:4a:29:
1a:35:01:5b:54:b6:ae:1c:73:8e:44:d2:72:6a:12:
fc:c0:0e:9e:12:bb:cb:4f:e7:10:60:ca:b7:a0:1c:
ae:df:41:16:c2:4f:48:e0:d0:d9:26:d6:f3:c7:5b:
e5:10:5a:3f:a6:23:61:c0:cc:37:e1:2e:5c:07:24:
ea:14:58:6d:54:df:89:6a:9a:9c:7c:b4:1b:32:d1:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:17:C4:C9:27:05:E6:96:FB:C7:B6:BC:30:34:6A:B3:34:8C:90:1C
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/XhfEyScF5pb7x7a8MDRqszSMkBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.216.0/24
85.193.92.0/24
87.249.50.0/24
94.228.122.0/24
176.57.221.0/24
185.104.112.0/24
185.104.115.0/24
188.225.60.0/24
217.25.91.0/24
217.25.95.0/24
IPv6:
2a03:6f00:8::/48
Signature Algorithm: sha256WithRSAEncryption
47:c3:88:28:1c:03:c0:5a:96:6a:85:3d:05:92:48:02:1f:34:
5a:e8:6c:45:2e:1d:1c:e6:11:37:ca:f2:27:a6:6c:a7:f5:13:
61:74:d0:64:9b:23:9e:f9:d4:6e:b2:1d:17:be:8a:4f:98:a9:
70:cf:83:6d:18:bc:e3:77:ad:de:cc:47:f4:36:6a:d1:d4:3a:
0b:d7:e8:63:28:5f:8d:3b:71:a5:7e:16:41:ee:dc:d0:a8:5a:
bf:1b:b6:44:34:85:6d:3e:a0:77:18:33:33:55:fa:4f:e9:02:
a2:12:2d:f7:eb:85:50:9e:1f:27:f1:ef:8a:fb:59:8c:cc:46:
7d:80:9e:2a:45:f7:96:f4:f5:4e:03:9e:13:1e:db:7c:42:79:
01:97:cf:28:80:78:42:f2:f9:76:cc:f2:6a:ed:e9:f4:a4:fa:
eb:ff:f6:c4:ac:af:24:7e:b1:7d:37:46:7b:17:19:22:71:a3:
68:c9:e2:66:90:f2:62:3b:c3:6e:5d:30:ba:e5:3f:32:89:95:
5f:3e:df:18:fa:93:1f:5e:04:45:32:25:8f:e9:15:b2:4f:95:
1c:4c:0b:fe:bd:12:48:3b:87:0c:d9:2d:cb:34:26:85:00:87:
5f:f9:11:8e:d1:1a:3a:f8:8d:e6:d7:77:73:f1:cb:16:64:e9:
eb:89:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:41 2023 by rpki-client on console-ams.rpki-client.org