Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/I0M2P-wdMZWgsHSPEn2iIVtjcbY.roa
File: I0M2P-wdMZWgsHSPEn2iIVtjcbY.roa (raw, json)
Hash identifier: ATc8NPJBr7Iqc61NW+eJJ7il7JdyvcKTKtlBZxotVc0=
Subject key identifier: 23:43:36:3F:EC:1D:31:95:A0:B0:74:8F:12:7D:A2:21:5B:63:71:B6
Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Certificate serial: 0181F8532ECD3013E611D96CAE7D67455AF3
Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/I0M2P-wdMZWgsHSPEn2iIVtjcbY.roa
Signing time: Wed 13 Jul 2022 16:10:09 +0000
ROA not before: Wed 13 Jul 2022 16:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207878
IP address blocks: 160.20.229.0/24 maxlen: 24
95.215.172.0/24 maxlen: 24
176.110.101.0/24 maxlen: 24
160.238.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f8:53:2e:cd:30:13:e6:11:d9:6c:ae:7d:67:45:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Validity
Not Before: Jul 13 16:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2343363fec1d3195a0b0748f127da2215b6371b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:a2:12:e7:0a:9c:b1:06:6b:4f:3c:7a:eb:
73:e1:4b:66:b7:0b:87:2c:69:ab:96:54:8e:8e:d2:
d8:eb:da:18:68:43:5d:49:b3:cc:37:ad:c0:e2:15:
1a:6d:10:e2:60:82:27:b4:9c:71:da:06:90:91:c4:
ce:1b:35:4b:38:0c:01:de:e6:d7:3b:af:98:7a:fc:
ff:cb:a9:f9:00:1a:c9:87:ca:5c:dc:10:93:ed:44:
d1:a1:62:fc:03:dd:0e:e8:b5:cb:f7:3f:75:94:61:
82:ec:32:39:ff:aa:89:ae:fd:3b:df:56:88:91:a7:
d9:89:2e:c5:93:93:bb:3c:c1:9e:cc:5a:42:7c:54:
ac:a9:a8:2d:03:62:d4:84:33:71:8a:f3:d4:15:f0:
1f:15:c1:bf:cc:50:f0:1b:df:c0:3f:ed:26:6b:3c:
e2:d5:be:3d:b9:0d:22:9a:3a:d9:e8:e5:67:30:56:
9a:2d:db:d3:37:fa:ab:8a:8e:9a:44:74:d6:f4:c3:
42:97:f1:6b:4f:9d:45:f8:a7:f5:fd:5b:9a:b9:fc:
33:8f:cc:a0:7c:03:f3:ea:76:17:59:a8:60:8d:25:
ba:8c:3c:7c:29:e3:26:88:d3:64:60:84:70:9e:4f:
9d:35:bb:5d:4b:0d:e9:ef:1b:36:f7:ab:8f:11:46:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:43:36:3F:EC:1D:31:95:A0:B0:74:8F:12:7D:A2:21:5B:63:71:B6
X509v3 Authority Key Identifier:
keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/I0M2P-wdMZWgsHSPEn2iIVtjcbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.172.0/24
160.20.229.0/24
160.238.21.0/24
176.110.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:19:d6:25:f3:85:0b:c7:ac:fe:41:e9:21:1b:9f:0d:2c:36:
51:45:26:83:19:4a:91:d6:b4:ef:0a:08:16:1c:53:7e:f1:b2:
d1:50:d8:9c:48:5e:a5:f1:e3:26:2b:92:60:75:63:8e:3b:10:
f7:67:a4:f0:2d:43:e4:84:17:44:75:4d:70:49:3f:06:fb:45:
8f:85:61:8d:ec:bc:41:d3:a8:12:f4:13:c3:48:19:8e:d6:0b:
17:ec:9a:86:ed:85:d7:d4:57:73:79:d7:a7:27:80:85:de:24:
c9:5c:46:54:06:8c:a4:fb:aa:d8:61:b9:3e:c1:4c:d7:90:a5:
df:d2:eb:58:0d:47:ee:43:df:f9:1b:3c:52:0e:fb:53:75:50:
d8:ca:40:40:6a:f1:47:c0:ed:28:a9:e1:90:f0:22:39:45:ef:
aa:bf:82:aa:91:47:be:39:92:7e:46:a1:c3:b3:fb:9e:eb:3e:
cc:80:88:e8:81:a7:a9:88:1d:34:2e:1c:8b:7b:18:b0:5e:df:
e4:01:96:f6:4e:cb:6b:df:a5:d0:7c:eb:1c:bd:67:80:50:2e:
d1:ba:59:44:e2:e1:35:f7:2d:af:a1:9e:86:e1:b4:1c:4b:2b:
c2:d3:d7:e4:18:47:96:09:da:57:aa:6a:23:cf:04:c4:60:ca:
11:fc:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net