Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rRqRHo9VMIgWyOH-G3aHFzDCc1Q.roa
File: rRqRHo9VMIgWyOH-G3aHFzDCc1Q.roa (raw, json)
Hash identifier: G/cQNilSjvkuHe7UbKOTLEm36vHZ0ca7XUjgOLT6iXY=
Subject key identifier: AD:1A:91:1E:8F:55:30:88:16:C8:E1:FE:1B:76:87:17:30:C2:73:54
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018511A08EAA5149F8CBE455C09BDD3A0D1E
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rRqRHo9VMIgWyOH-G3aHFzDCc1Q.roa
Signing time: Wed 14 Dec 2022 17:13:33 +0000
ROA not before: Wed 14 Dec 2022 17:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 109.72.122.0/24 maxlen: 24
109.72.120.0/23 maxlen: 23
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
93.185.214.0/24 maxlen: 24
81.22.128.0/21 maxlen: 24
81.22.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:a0:8e:aa:51:49:f8:cb:e4:55:c0:9b:dd:3a:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 14 17:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad1a911e8f55308816c8e1fe1b76871730c27354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:77:56:54:8a:57:8a:d6:c6:84:a0:93:40:
5a:55:ef:01:4b:5f:61:51:85:90:b3:7d:9d:18:e2:
c9:ca:55:57:d3:3c:15:a1:03:47:db:a9:36:ef:60:
6b:3d:16:1e:dd:ea:6f:68:09:6a:bb:19:98:45:db:
8c:00:26:d6:bf:09:13:44:be:63:05:4d:f3:d7:a7:
3a:86:fe:ed:c4:17:c8:17:d6:1a:e0:a1:9f:5e:d7:
2d:f8:53:cc:23:83:0f:c4:a5:88:7e:73:a3:5b:1c:
82:73:a0:16:70:28:ac:2e:32:c4:11:80:33:7d:f6:
31:89:d9:cd:e5:e8:60:e2:f0:35:d0:97:9f:3e:13:
c5:3c:cb:88:06:fe:80:46:64:2b:d2:2c:58:2b:3e:
d6:60:56:5d:a9:d7:c3:e7:5b:65:ff:2f:f9:9a:9c:
b6:f7:f9:5e:80:91:dd:25:c3:01:5a:84:4d:ad:e5:
e8:1a:af:fb:a9:84:1a:be:68:2f:e2:39:4b:75:6c:
6d:da:59:3b:ec:3a:d8:89:5e:e3:b5:13:0b:c8:2c:
24:d4:72:16:4b:56:b0:00:62:fe:98:59:bf:04:f4:
46:c5:80:b4:2c:8f:08:13:6a:ba:f6:32:0c:fd:bc:
0b:6c:94:86:4b:26:7a:96:79:3a:90:e7:cb:ed:b8:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1A:91:1E:8F:55:30:88:16:C8:E1:FE:1B:76:87:17:30:C2:73:54
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/rRqRHo9VMIgWyOH-G3aHFzDCc1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/21
89.185.0.0/22
93.185.214.0/24
109.72.120.0-109.72.122.255
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
07:22:4d:7f:f3:34:5f:4a:c9:43:b5:1c:7c:b4:84:7b:1c:a1:
bc:96:45:38:91:9b:5b:43:70:f1:4b:43:bc:25:aa:d6:15:67:
3a:ad:f9:08:55:ac:1f:d7:79:34:9c:da:9b:e3:a4:61:dc:d3:
4c:c7:2a:5e:bf:5e:6c:07:6d:6d:ef:ec:dd:a8:2d:ac:12:7f:
19:18:1b:e5:9f:d9:48:17:27:18:a3:3f:64:89:7d:95:3b:0a:
8a:e2:ba:69:67:68:cf:96:87:61:ac:74:3c:ae:97:d3:45:33:
fe:4d:f7:f3:99:d8:5b:2f:d3:28:59:88:09:61:80:82:52:48:
92:ac:47:fd:ad:d8:5e:00:67:e3:46:d2:72:d4:1e:b1:75:d3:
ac:de:5b:e6:8d:52:7b:c2:5e:60:12:4b:76:fd:38:b3:93:ab:
91:c8:12:74:5d:bc:92:1d:9c:90:93:fb:cc:5d:32:1e:83:65:
9c:fa:76:6b:2b:46:91:7b:7b:34:d5:51:3a:95:48:51:02:71:
fc:31:4c:fa:c4:2f:ea:23:92:97:88:ba:16:86:ef:44:1c:4b:
d3:ba:03:9f:ae:ab:02:c1:d4:31:ac:b6:75:62:68:59:1e:60:
22:3f:19:af:82:2e:d4:c7:f0:c6:a6:63:b1:69:22:e8:44:1d:
9e:90:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org