Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/d0Pkax7vm4n3Z1IDefRdux8ddOc.roa
File: d0Pkax7vm4n3Z1IDefRdux8ddOc.roa (raw, json)
Hash identifier: 3yKLwhpn6BPUy789WYfFQAYVZYyCWTZfXqXL2YoRfUU=
Subject key identifier: 77:43:E4:6B:1E:EF:9B:89:F7:67:52:03:79:F4:5D:BB:1F:1D:74:E7
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 445866CA
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/d0Pkax7vm4n3Z1IDefRdux8ddOc.roa
Signing time: Thu 30 Jun 2022 13:52:03 +0000
ROA not before: Thu 30 Jun 2022 13:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12668
IP address blocks: 90.157.68.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.17.116.0/23 maxlen: 23
94.31.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146644170 (0x445866ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 30 13:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7743e46b1eef9b89f767520379f45dbb1f1d74e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:be:f6:18:04:14:f3:59:c4:f6:ff:d0:4d:
fc:7e:61:b9:6a:32:dc:2e:65:e6:48:4d:fa:6b:14:
5a:d3:1c:06:8b:39:50:3d:3d:d9:df:52:5c:5d:9e:
cf:95:d6:3d:23:be:92:47:44:da:00:ed:62:64:cc:
f2:e8:2e:8d:25:da:9f:b6:45:fa:86:2c:fe:f6:76:
bd:56:c7:ee:2d:40:e6:87:79:b8:d9:e4:92:d4:36:
9a:f0:fb:5e:15:14:98:ec:fe:8c:cb:05:a2:66:e0:
63:bf:f5:fa:4d:79:c3:ef:11:c7:3a:f6:ec:af:a4:
31:6a:b2:2f:e5:4e:b1:c5:10:61:57:7e:79:81:12:
a9:e2:e5:1c:63:88:dc:ac:24:59:9d:e8:b8:62:2c:
b6:d7:54:61:25:b8:65:e5:25:55:16:7b:d1:5a:87:
49:fc:b6:ed:4c:13:d9:8e:2b:ef:4d:59:2d:60:bd:
ff:12:75:29:1a:ad:e6:62:87:f4:8a:d3:09:77:05:
43:80:3e:39:1e:52:64:57:07:a7:b2:87:0b:cd:b8:
2f:ea:a7:f5:bc:c5:bf:a9:b1:06:47:37:6f:4d:9c:
de:6d:bd:15:7a:7e:41:32:88:ad:27:dc:96:4d:fb:
31:6b:8c:cd:b7:d2:e3:47:f0:b9:f7:82:b8:39:62:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:E4:6B:1E:EF:9B:89:F7:67:52:03:79:F4:5D:BB:1F:1D:74:E7
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/d0Pkax7vm4n3Z1IDefRdux8ddOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.157.68.0/23
94.31.195.0/24
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:31:96:ab:ff:65:cd:71:53:28:18:a1:9d:ce:26:54:a4:9c:
9e:43:e1:14:0c:64:5e:b4:43:40:8b:9f:c2:69:b2:91:9b:b7:
a6:27:14:0f:94:7e:6c:02:d6:5d:94:89:57:94:fb:fd:5c:e8:
33:a0:cf:f5:f0:40:f9:b2:73:81:33:e6:0f:15:3a:04:c1:87:
5d:85:58:9b:61:55:01:a1:a8:98:0a:fe:b2:79:24:e3:c9:35:
c4:a9:03:85:3b:dd:1a:f4:60:ae:8f:ee:50:d2:84:3c:5f:41:
ed:74:8f:3a:85:6d:ab:1c:13:fa:5f:71:15:f3:50:69:1c:bb:
52:09:1f:2d:88:ec:2b:48:08:de:8a:29:5e:96:18:a4:1e:27:
f1:31:55:0d:7e:ac:ce:bc:e6:21:15:c3:a9:04:63:46:49:f4:
4d:ac:8d:24:ac:54:bd:97:93:9c:7d:d8:c8:a6:0e:e4:b6:1d:
e8:11:af:fa:2f:06:97:b9:1e:2e:51:08:9a:ce:e5:fc:73:85:
c2:0d:7f:47:f0:ba:16:00:8d:a5:74:a6:f8:5f:61:2c:01:a1:
52:c7:5e:00:7e:e2:fe:c5:4b:9f:9e:1f:33:c3:af:9a:aa:93:
2a:12:6e:16:4a:7b:c3:48:1e:9f:9a:e4:6b:8b:06:c0:b4:61:
b1:ed:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org