Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/_OPgJIWlZogG7_4JoZrjfqKrdSk.roa
File: _OPgJIWlZogG7_4JoZrjfqKrdSk.roa (raw, json)
Hash identifier: /SjL5D1GM9F7gDQ2e+LLGP/6mjX1cKEv/J0JgYQXSQ8=
Subject key identifier: FC:E3:E0:24:85:A5:66:88:06:EF:FE:09:A1:9A:E3:7E:A2:AB:75:29
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 0183A6F7DEA1A5DCBFEFAEA8BA16CBA22E3B
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/_OPgJIWlZogG7_4JoZrjfqKrdSk.roa
Signing time: Wed 05 Oct 2022 07:06:45 +0000
ROA not before: Wed 05 Oct 2022 07:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42929
IP address blocks: 185.142.136.0/22 maxlen: 22
195.8.62.0/24 maxlen: 24
45.156.244.0/22 maxlen: 22
2.56.80.0/22 maxlen: 22
193.36.182.0/24 maxlen: 24
193.104.36.0/24 maxlen: 24
193.33.222.0/23 maxlen: 23
2a07:2d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a6:f7:de:a1:a5:dc:bf:ef:ae:a8:ba:16:cb:a2:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Oct 5 07:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fce3e02485a5668806effe09a19ae37ea2ab7529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:f7:28:c8:c3:02:6f:69:7a:91:6a:fa:6f:
c5:23:dd:a4:1f:48:10:85:92:7c:76:2c:48:7f:3b:
a3:13:06:b7:4f:f2:63:52:22:13:f4:cf:d8:09:49:
59:b4:d5:6b:2d:ee:07:18:cf:de:0f:d3:e5:db:82:
e3:78:52:5b:a0:45:28:4d:0b:53:94:87:87:c4:30:
21:2f:09:2e:1e:03:89:92:16:ac:a5:76:5d:79:a6:
76:d0:a4:87:50:35:bd:45:f7:c6:34:9b:50:92:80:
db:a3:29:e3:58:f7:91:74:3b:9c:ae:15:39:bb:20:
bd:b5:69:f5:5e:69:d2:38:8b:d9:65:4d:bb:0e:57:
57:25:c4:10:14:88:58:e4:34:70:91:27:92:35:6f:
e8:31:94:3f:83:80:d8:33:a0:dc:38:ce:dd:66:0b:
85:15:c1:f6:e9:10:fa:5d:98:1f:91:2c:8b:9b:55:
a9:f6:a8:e5:14:f6:27:5a:08:55:67:74:88:e2:a9:
99:f9:ec:22:57:9e:07:33:37:b5:0b:d2:b1:47:fa:
f2:02:6e:0f:60:29:26:ec:ce:7d:21:db:76:79:71:
a6:0e:46:4a:69:b5:2a:e4:de:96:03:72:4f:37:0a:
48:9c:a9:bd:3c:2b:8a:b1:e4:cf:03:85:05:fc:f0:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E3:E0:24:85:A5:66:88:06:EF:FE:09:A1:9A:E3:7E:A2:AB:75:29
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/_OPgJIWlZogG7_4JoZrjfqKrdSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.80.0/22
45.156.244.0/22
185.142.136.0/22
193.33.222.0/23
193.36.182.0/24
193.104.36.0/24
195.8.62.0/24
IPv6:
2a07:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:4d:d5:c6:a9:0c:69:1e:22:f8:22:8e:8a:de:d9:b4:41:4f:
94:b6:55:64:58:a5:3e:24:b5:82:e9:08:b5:02:d2:24:9d:b6:
66:5b:54:4d:40:21:a6:b2:5e:82:5a:d3:0c:cf:50:74:cf:5f:
9e:bb:cd:58:9d:54:b2:13:3f:bb:ef:05:e3:91:f1:80:51:1b:
63:d3:0d:68:89:31:83:b0:0a:a9:2f:53:82:d0:37:b2:08:05:
3a:15:2f:35:72:f3:a1:e0:94:57:a1:f4:d9:3e:ab:73:b4:a3:
48:cf:57:1a:03:6c:bc:ce:75:13:2f:95:05:c0:aa:7b:a5:f3:
e0:2e:86:1d:0f:fb:3b:77:11:13:aa:6a:44:d1:f8:49:c0:77:
b0:e5:38:f7:8d:ef:cf:d9:c9:96:67:af:3b:bc:8a:42:cc:b3:
47:64:59:be:11:a1:f6:56:4d:ee:9e:86:18:0b:4d:4a:41:69:
9f:bd:83:f4:eb:8b:cb:16:c8:7b:42:f0:f9:3e:96:cb:da:90:
03:7f:0d:0b:66:e1:ae:68:f2:e9:e0:92:b4:ea:85:c0:7a:9c:
ac:a8:36:e4:69:c2:b4:8d:ca:c9:c1:b5:a8:cb:54:e9:e1:13:
ad:ca:21:31:fc:26:6e:30:df:03:70:6b:ce:56:ac:a4:32:f2:
8d:11:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:49 2023 by rpki-client on console-ams.rpki-client.org