Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/Rp-VRuSmF3B7eNqdq3mtdFSaakQ.roa
File: Rp-VRuSmF3B7eNqdq3mtdFSaakQ.roa (raw, json)
Hash identifier: +Hjc2aLsRXFi36mtu72eRRzVGUdTLxDYBCN6OlbJr0s=
Subject key identifier: 46:9F:95:46:E4:A6:17:70:7B:78:DA:9D:AB:79:AD:74:54:9A:6A:44
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 05A10F34
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/Rp-VRuSmF3B7eNqdq3mtdFSaakQ.roa
Signing time: Sat 01 Jan 2022 11:59:40 +0000
ROA not before: Sat 01 Jan 2022 11:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43443
IP address blocks: 91.132.4.0/23 maxlen: 23
91.132.5.0/24 maxlen: 24
89.45.200.0/23 maxlen: 23
89.45.203.0/24 maxlen: 24
89.45.204.0/23 maxlen: 23
89.45.200.0/21 maxlen: 21
89.45.202.0/23 maxlen: 23
89.45.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94441268 (0x5a10f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jan 1 11:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=469f9546e4a617707b78da9dab79ad74549a6a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:39:10:2e:9a:72:93:c5:a0:97:3c:fd:8d:
e3:c9:95:3d:d9:3c:ba:0b:70:96:73:85:02:98:ec:
1a:f4:5c:20:ea:7a:81:19:4b:c8:3d:63:23:45:a9:
98:58:5e:97:de:5e:47:05:ff:a0:e5:08:ef:e7:49:
4c:97:1f:05:a0:a1:ca:33:04:24:d9:38:c6:69:14:
b5:63:b4:15:df:69:9d:ec:29:b1:39:72:e9:ab:82:
57:2e:97:c6:bf:40:5a:23:9b:ca:11:8f:6a:d2:f0:
48:4a:11:e9:5d:3c:c9:ef:d6:b6:aa:5e:30:ad:21:
82:89:2a:b7:ea:ee:10:5a:81:bf:2d:ba:58:8d:1f:
d6:99:f6:f4:30:3f:33:7b:7c:17:a1:0f:17:ee:87:
1a:ef:30:38:08:3d:59:bb:c2:82:d7:8c:67:5b:96:
8c:83:e6:2c:64:09:c0:86:d6:73:30:7b:20:41:f9:
a2:eb:0b:7e:3c:39:0a:94:ed:2e:b6:4b:b5:87:83:
7b:59:08:a6:f1:3b:25:54:ee:a7:68:b8:15:14:cb:
a2:39:42:cf:43:91:55:f6:e6:71:0c:9d:f2:8f:46:
ef:84:de:b2:cf:2c:b0:c4:52:bd:38:f5:c6:82:ff:
e5:cd:3d:d3:5c:91:46:76:34:f5:38:64:16:83:24:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9F:95:46:E4:A6:17:70:7B:78:DA:9D:AB:79:AD:74:54:9A:6A:44
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/Rp-VRuSmF3B7eNqdq3mtdFSaakQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.200.0/21
91.132.4.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:72:d8:21:ea:cf:c5:b3:4f:f7:cb:66:e3:d2:b7:44:89:43:
1a:c5:bb:39:d4:b8:45:39:ee:ea:04:68:92:cd:13:aa:96:c2:
9b:9c:b5:11:64:35:2f:d4:90:3a:36:29:a8:77:1d:2b:61:aa:
f9:f6:e8:bd:79:fd:b1:ca:20:8c:80:fc:c6:2f:71:32:a4:a5:
66:0f:8c:df:89:0e:5d:15:40:84:d5:39:4b:29:20:89:5a:b8:
7d:fa:25:d8:71:bd:12:4b:fd:3a:24:b5:d2:fe:f6:77:c7:dd:
e6:9a:5b:48:a4:23:cd:1a:e5:f5:70:f1:db:33:cb:3e:17:2e:
1f:ab:f2:17:ba:1e:7e:0e:94:63:3f:98:20:c3:24:60:37:3b:
0b:9b:8e:03:1e:a0:a5:d7:b5:d3:36:a3:67:1c:3b:ac:f2:9f:
a0:3c:1c:c8:f1:7a:eb:da:d1:50:8c:44:3b:a9:64:24:fc:14:
91:3f:69:f7:45:3a:8a:2e:9a:00:57:d3:d8:b7:49:68:63:fd:
f6:4b:d0:cf:b6:7a:c6:5a:08:ae:30:fc:23:42:ad:5d:72:66:
30:d5:f9:e2:30:03:de:bf:f9:84:95:eb:d9:14:21:e6:b7:77:
03:ac:00:52:9f:fc:93:4e:39:d3:93:bd:de:9b:86:a2:f1:f6:
40:79:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:28 2024 by rpki-client on console-ams.rpki-client.org