Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/0Xw0CgfmSrODZ2ajm0XsIFwXtlo.roa
File: 0Xw0CgfmSrODZ2ajm0XsIFwXtlo.roa (raw, json)
Hash identifier: k3A0xhYY6wshhncHVw2WNClMgRfAxzew+mhglR9nfJY=
Subject key identifier: D1:7C:34:0A:07:E6:4A:B3:83:67:66:A3:9B:45:EC:20:5C:17:B6:5A
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01846C30B8B28E560692073DED938245C65F
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/0Xw0CgfmSrODZ2ajm0XsIFwXtlo.roa
Signing time: Sat 12 Nov 2022 14:14:03 +0000
ROA not before: Sat 12 Nov 2022 14:14:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47694
IP address blocks: 176.124.0.0/19 maxlen: 19
178.217.160.0/21 maxlen: 21
91.211.16.0/22 maxlen: 22
91.211.19.0/24 maxlen: 24
81.163.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6c:30:b8:b2:8e:56:06:92:07:3d:ed:93:82:45:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Nov 12 14:14:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d17c340a07e64ab3836766a39b45ec205c17b65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:ea:0a:22:ab:7f:db:58:d2:e6:87:cb:9b:
e5:2f:a0:60:2b:e7:24:05:ba:6e:ad:a9:2c:48:df:
6e:0d:85:ca:d3:f6:ac:03:fb:27:7b:b3:84:48:54:
b5:1c:ad:4c:08:4d:9b:8d:00:df:19:a8:fd:52:e6:
03:4d:55:b3:f0:ac:44:37:64:33:b0:08:cf:69:b4:
7f:14:4c:ef:b6:c9:68:24:6a:67:cb:85:cf:b0:99:
79:95:58:49:ea:d7:03:9e:3a:49:05:b5:dc:34:b9:
bc:e5:5f:9d:cd:7e:dc:16:95:91:51:5e:cb:74:bb:
70:8b:7d:45:2d:d9:e5:6b:fa:87:d2:74:07:a2:a8:
71:3e:f7:ed:f5:32:dc:87:ce:ec:60:68:41:c6:2f:
2f:00:1b:05:cb:11:50:02:ef:87:62:14:c7:63:a6:
6b:5e:24:77:84:75:c9:a2:ab:44:51:2f:f4:fa:88:
5f:39:1d:81:7d:c7:4c:6a:72:e6:75:19:4f:96:e4:
37:85:71:ff:40:a6:4b:63:b5:17:cc:d6:15:5b:95:
3a:8e:0d:ff:5b:ba:9c:24:54:b5:3f:cc:e9:39:c1:
1e:aa:13:55:ba:a1:94:7a:d5:d8:7e:20:bb:93:52:
2b:49:7f:ee:73:1c:e8:56:00:b5:b3:23:83:ab:4e:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:34:0A:07:E6:4A:B3:83:67:66:A3:9B:45:EC:20:5C:17:B6:5A
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/0Xw0CgfmSrODZ2ajm0XsIFwXtlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.128.0/19
91.211.16.0/22
176.124.0.0/19
178.217.160.0/21
Signature Algorithm: sha256WithRSAEncryption
52:37:ef:51:75:e0:0c:a0:6a:8d:db:ce:a8:af:e4:2d:cd:ce:
f8:07:32:5d:18:8c:40:2b:58:a2:61:fc:b9:fe:92:ce:4f:57:
52:8b:b9:ef:67:dd:47:7a:9a:a6:db:d1:e9:40:59:51:1d:7f:
2a:f3:49:69:84:ef:c1:db:db:5c:4c:e0:e5:1f:6b:a3:0f:e2:
f8:2c:7b:fe:f8:23:50:f9:b6:b7:73:30:e7:ed:58:30:86:9c:
8a:a5:eb:45:ea:4f:04:72:8e:e6:f6:18:2f:24:44:36:f6:7a:
c1:6a:40:cc:76:5d:f8:67:07:30:e0:a3:2f:9c:2e:d1:9d:48:
ef:f2:c7:b9:11:df:55:87:46:44:b9:a8:85:94:5c:b1:9d:77:
d7:d0:5d:4d:96:b0:b6:5a:d6:05:1b:1d:83:27:ca:ee:43:d0:
97:6d:c8:77:b2:06:dd:3d:2e:e3:a7:72:08:12:cc:12:29:14:
1c:01:fe:c6:b4:43:72:a5:e9:1f:39:7d:82:64:a3:3a:a9:77:
a3:24:3e:c6:d8:93:fb:d3:d9:9a:32:5d:9e:41:83:10:ef:df:
96:6c:c9:7b:5a:3f:fc:53:73:57:65:aa:6d:40:15:6e:68:3e:
25:f9:b5:00:32:b8:82:17:67:58:1a:62:0a:96:47:68:02:9d:
77:d8:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:41 2024 by rpki-client on console-ams.rpki-client.org