Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/_IshlnzC0-G1l4ZXzN6rUYd8WwQ.roa
File: _IshlnzC0-G1l4ZXzN6rUYd8WwQ.roa (raw, json)
Hash identifier: lCyqC1s7yh2BoxhDcVILhARkp7i988uB3vwPrttVTPU=
Subject key identifier: FC:8B:21:96:7C:C2:D3:E1:B5:97:86:57:CC:DE:AB:51:87:7C:5B:04
Certificate issuer: /CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Certificate serial: 05295D9B
Authority key identifier: 54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/_IshlnzC0-G1l4ZXzN6rUYd8WwQ.roa
Signing time: Sat 01 Jan 2022 06:01:37 +0000
ROA not before: Sat 01 Jan 2022 06:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39233
IP address blocks: 193.202.90.0/24 maxlen: 24
193.202.112.0/24 maxlen: 24
193.202.114.0/24 maxlen: 24
194.213.29.0/24 maxlen: 24
193.203.4.0/24 maxlen: 24
45.155.28.0/22 maxlen: 22
45.155.28.0/24 maxlen: 24
45.155.29.0/24 maxlen: 24
185.237.53.0/24 maxlen: 24
185.237.52.0/22 maxlen: 22
185.237.54.0/24 maxlen: 24
185.237.55.0/24 maxlen: 24
2a02:1600::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86597019 (0x5295d9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54aa31a9f74bb8552d714a0d185d13c7040644ee
Validity
Not Before: Jan 1 06:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc8b21967cc2d3e1b5978657ccdeab51877c5b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:f7:9d:d3:c9:2e:8d:46:29:83:e3:32:28:
53:1f:e9:1d:4e:91:3b:6f:eb:0a:67:1c:2e:2e:07:
8a:64:d6:46:8a:0c:b5:08:af:01:3f:cd:a9:a4:88:
9c:08:0d:47:48:14:dd:db:c3:3a:48:f4:9f:93:d0:
43:8a:7a:d0:9c:4a:9e:3d:be:fc:91:af:b7:01:dc:
8d:2f:c5:85:35:36:aa:be:cb:c4:58:48:d0:bd:88:
b1:0e:ec:81:44:66:7e:9d:42:61:52:28:fb:4d:43:
2b:2e:48:ec:f5:5b:f3:e8:9a:54:0a:8f:cc:87:48:
a8:36:13:bf:cf:95:fe:ed:d4:d2:99:47:5f:db:c8:
d0:5d:1a:4f:d2:9b:77:49:03:05:79:da:99:07:b6:
78:85:f6:15:75:c6:2d:5b:59:ac:3d:db:08:73:4d:
d4:a8:ed:83:27:b0:c9:03:a4:45:e8:93:f5:24:29:
7e:58:fc:e9:ea:2b:f3:2c:f4:14:50:10:61:a0:f7:
eb:7d:0d:89:7d:22:cd:48:28:1d:6b:24:be:7e:d2:
36:2e:28:b1:9f:a1:0a:1b:82:53:3d:bf:c6:10:0c:
32:c9:70:18:a7:9a:02:81:12:90:fe:c7:10:34:89:
a5:55:b3:1c:53:aa:f8:76:75:f2:1b:3a:ec:37:d1:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8B:21:96:7C:C2:D3:E1:B5:97:86:57:CC:DE:AB:51:87:7C:5B:04
X509v3 Authority Key Identifier:
keyid:54:AA:31:A9:F7:4B:B8:55:2D:71:4A:0D:18:5D:13:C7:04:06:44:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKoxqfdLuFUtcUoNGF0TxwQGRO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/_IshlnzC0-G1l4ZXzN6rUYd8WwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/3db08b-01a8-4016-b240-035078ad19ae/1/VKoxqfdLuFUtcUoNGF0TxwQGRO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.28.0/22
185.237.52.0/22
193.202.90.0/24
193.202.112.0/24
193.202.114.0/24
193.203.4.0/24
194.213.29.0/24
IPv6:
2a02:1600::/29
Signature Algorithm: sha256WithRSAEncryption
79:36:38:28:11:67:7d:42:d0:55:32:de:f9:4b:15:2c:1d:84:
e2:36:81:be:54:1a:b9:f9:36:6c:5a:57:95:11:bf:c1:d5:9d:
6c:fb:ca:26:59:8d:19:ba:8f:c2:c5:0a:d2:33:3f:ff:99:b0:
5a:7f:3f:1b:bf:81:1a:fd:5d:d3:61:a5:6c:0c:5e:16:40:be:
88:fe:ab:f1:77:0b:c1:05:7b:62:4d:d5:7c:63:51:e4:79:47:
a8:84:85:d5:50:04:ec:d7:3e:92:8b:3f:5c:30:a2:ec:69:4d:
6c:aa:16:17:f9:39:f4:63:19:89:02:00:e9:ba:39:2e:71:df:
5c:88:1c:a7:31:f4:63:18:c0:5c:ea:4f:5d:c3:f9:3c:7c:a6:
e1:98:54:6f:c1:df:97:64:0b:f7:32:d5:0b:54:ef:27:db:01:
83:0a:6e:ec:ea:c8:50:40:17:05:4e:09:17:0e:22:25:2b:ff:
ce:23:11:2d:4e:f2:64:8d:43:4a:d3:f6:6c:df:f8:2c:e4:ea:
a5:e8:37:93:53:a6:a4:e7:5e:80:cb:4a:40:10:b6:75:ff:cf:
8e:a5:fb:0c:c6:2d:f9:ce:36:51:42:dd:a2:52:5f:40:bc:69:
c6:50:11:74:71:e8:c2:5e:98:be:f9:e0:f4:1e:1a:fb:8d:95:
ce:f8:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:35 2024 by rpki-client on console-fra.rpki-client.org