Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/X__SifbcEMNkoOmFh1QR5QnzVx0.roa
File: X__SifbcEMNkoOmFh1QR5QnzVx0.roa (raw, json)
Hash identifier: d8gFxDZhypxjOlyEtrDG1I2+p/rvydrLm+p1w88HPUo=
Subject key identifier: 5F:FF:D2:89:F6:DC:10:C3:64:A0:E9:85:87:54:11:E5:09:F3:57:1D
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0182E3860CEAFE9FEDF9D3AB0B3D19043D15
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/X__SifbcEMNkoOmFh1QR5QnzVx0.roa
Signing time: Sun 28 Aug 2022 08:16:29 +0000
ROA not before: Sun 28 Aug 2022 08:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 81.22.136.0/22 maxlen: 22
109.72.122.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
109.72.124.0/22 maxlen: 22
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
93.185.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e3:86:0c:ea:fe:9f:ed:f9:d3:ab:0b:3d:19:04:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 28 08:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fffd289f6dc10c364a0e985875411e509f3571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:78:8b:36:e7:02:17:3f:b0:cb:11:7e:6c:
d6:87:d4:67:d9:84:31:5b:cc:90:e0:07:b8:1f:d8:
32:40:84:82:75:7d:80:2c:6b:6f:f7:7b:9e:c9:c3:
da:99:c0:49:86:10:a5:23:9a:86:c8:63:99:ce:3b:
3a:ed:2a:da:48:3b:0f:aa:eb:b9:44:9b:89:e1:bc:
d8:eb:11:a4:49:3a:94:12:13:d6:21:2d:57:82:10:
49:7e:86:ec:1b:e6:aa:94:64:b1:d8:3e:97:08:c8:
c7:d9:46:3f:c4:70:49:bf:08:1c:ae:b2:06:ea:c5:
2a:28:5e:e2:66:0f:b4:d8:ac:5a:ac:00:01:2f:c2:
44:96:41:a3:38:9b:71:99:4b:6b:dc:cd:53:f5:11:
97:ef:87:03:14:81:ba:d2:a8:66:8c:6e:c1:8e:88:
90:c2:f8:f3:05:0e:f9:69:cd:1b:73:6e:66:b6:f1:
ad:72:75:33:2c:fd:00:94:d0:c2:ae:7e:94:b4:ed:
17:2d:29:be:6a:d2:d4:92:0f:24:3f:fc:3b:15:60:
c6:19:7a:23:48:23:36:9d:94:9d:13:36:1d:99:58:
52:aa:a6:ed:18:86:d2:38:49:03:46:30:34:74:2e:
da:db:ef:64:17:da:54:69:ed:2a:aa:a9:53:d1:63:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:D2:89:F6:DC:10:C3:64:A0:E9:85:87:54:11:E5:09:F3:57:1D
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/X__SifbcEMNkoOmFh1QR5QnzVx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/22
89.185.0.0/22
93.185.214.0/24
109.72.122.0-109.72.127.255
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
70:f5:b8:64:8a:a5:4e:16:8a:7b:b3:4c:75:b4:16:d3:36:e3:
c6:0d:8c:8d:51:f2:af:20:ef:06:d9:fb:c3:79:9c:c7:60:87:
bd:51:e6:5d:5e:8a:77:5a:d3:2f:1a:2c:07:a9:81:90:f3:7d:
82:f7:86:6c:60:91:65:ac:d4:3a:f9:51:09:55:69:0d:39:1f:
ad:23:20:1c:5f:26:dd:f2:e2:b3:c3:f3:f2:b9:7d:21:dd:04:
78:e4:3e:41:77:87:3d:40:4a:2f:a5:cc:1b:c5:5d:76:3e:66:
7e:3d:d8:a1:59:bc:1f:47:96:da:34:2f:99:15:be:16:ca:3c:
31:af:8c:77:5f:25:cd:12:84:ef:bf:14:e4:36:96:87:a7:20:
c8:a8:b3:ae:67:fa:a0:b8:aa:6e:7d:f1:ee:d4:ce:b3:b6:5b:
db:24:e7:ad:5f:e2:83:67:db:f6:40:8d:8e:04:7f:6f:fe:8d:
4a:c3:65:a8:c8:ee:02:c5:8e:84:77:5d:20:91:18:0b:7d:fb:
5a:1a:0a:90:c5:e4:87:8c:17:59:19:3c:7a:2d:01:08:03:f8:
28:b9:22:a4:79:9f:66:28:af:f9:02:7e:1e:64:ab:81:57:7e:
65:e7:41:e3:c1:58:ec:53:ca:e9:8f:26:f6:ee:6b:1e:1b:a1:
60:35:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org