Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mOYKkSNrOkOqj5mgrsvE6y3ZU0k.roa
File: mOYKkSNrOkOqj5mgrsvE6y3ZU0k.roa (raw, json)
Hash identifier: t1w6yGu1eU//HDIKBBOUAh2LIDmG2o5AvBXjTJu6j2U=
Subject key identifier: 98:E6:0A:91:23:6B:3A:43:AA:8F:99:A0:AE:CB:C4:EB:2D:D9:53:49
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 42A4D618
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mOYKkSNrOkOqj5mgrsvE6y3ZU0k.roa
Signing time: Sat 01 Jan 2022 06:05:03 +0000
ROA not before: Sat 01 Jan 2022 06:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42548
IP address blocks: 83.239.112.0/20 maxlen: 20
178.34.224.0/19 maxlen: 19
85.172.176.0/20 maxlen: 20
85.173.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118098968 (0x42a4d618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e60a91236b3a43aa8f99a0aecbc4eb2dd95349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:32:e5:3b:b4:b8:10:5e:62:dd:50:a6:5f:
33:37:23:51:69:e3:a9:cd:af:fe:e3:88:de:82:82:
75:b0:6a:af:76:14:25:b6:b2:e5:81:29:56:e8:97:
f4:1f:bc:dd:46:39:a0:bd:ef:b0:0a:50:91:f2:6e:
56:31:d6:79:34:fc:aa:ea:52:14:99:23:f3:65:06:
86:f1:ce:43:d9:93:ee:02:7b:20:b7:58:80:4f:be:
2e:91:e8:d1:03:c5:58:3d:f7:42:67:e9:be:b3:bc:
bc:9a:19:d7:ac:1a:b3:ee:ca:eb:94:af:5a:d0:57:
05:0f:f1:b9:33:ea:70:5b:6a:6e:ce:f6:0a:7b:78:
6e:33:5d:ac:b9:be:dd:82:d7:69:94:85:83:a1:ba:
fc:82:a6:eb:91:5c:52:81:d1:45:0f:24:6f:90:41:
63:1f:ce:ed:47:6a:f9:0f:e3:e9:8e:f9:b2:af:df:
56:c4:88:d3:7c:c9:8d:f4:c4:6e:76:99:ad:d7:bd:
ed:c3:23:aa:6a:f9:de:25:f4:ac:17:54:e6:90:f2:
fa:52:e1:7b:aa:94:69:18:23:83:86:0e:be:e4:56:
85:eb:3e:1b:b3:80:81:36:a7:fa:f5:e9:b7:ca:71:
c6:82:ae:cf:b0:ae:97:b6:14:f7:a2:5b:52:00:47:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:0A:91:23:6B:3A:43:AA:8F:99:A0:AE:CB:C4:EB:2D:D9:53:49
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/mOYKkSNrOkOqj5mgrsvE6y3ZU0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.239.112.0/20
85.172.176.0/20
85.173.160.0/19
178.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:60:6d:0f:85:af:4e:b2:83:ee:03:d7:0a:a6:50:b6:bb:83:
a5:a2:d4:5e:35:7c:e0:82:5a:d4:18:aa:7b:86:8a:de:ff:47:
d1:19:27:26:0d:71:bc:a6:b9:9a:78:ad:b3:e6:5e:02:ef:42:
d8:2c:49:c1:70:2b:16:31:45:55:13:56:d9:27:bf:eb:ff:d0:
e3:4b:4c:d2:8b:35:4c:de:a8:d9:1a:40:94:56:f0:cf:ab:57:
50:33:3c:49:8b:c5:c3:26:74:0a:97:a7:0b:6d:7e:22:ef:13:
5d:89:3f:44:21:38:a1:6f:16:3f:32:c6:fd:77:46:d1:29:e1:
b4:d0:c0:da:ea:e3:7c:76:f6:52:2e:56:ee:2f:be:fd:0d:45:
ec:44:1f:37:57:70:c4:3d:9c:5c:e9:b1:f5:78:42:0b:f5:de:
5f:65:b1:0a:20:5c:1c:3b:aa:07:c2:b8:48:80:33:fb:31:7f:
00:11:68:c2:a2:9a:3d:5e:73:b9:05:94:9c:45:63:a3:b8:06:
81:96:fa:88:2e:a5:89:85:9d:53:39:55:1e:d2:bb:a1:79:bd:
51:84:9e:53:e0:8a:72:0b:42:77:74:33:8e:4d:9c:7b:20:1f:
38:db:e7:0f:e6:dc:f1:a8:7b:44:ae:d1:e7:ea:ab:f3:83:5c:
22:b6:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org