Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/1-T6NtSLM-Bk-wwYtn5FAjbqWn7c.roa
File: 1-T6NtSLM-Bk-wwYtn5FAjbqWn7c.roa (raw, json)
Hash identifier: 4IulsKQpK0Nv/BTo0eK1xzmglzjbV+knUnpOxL5YIlA=
Subject key identifier: F9:3E:8D:B5:22:CC:F8:19:3E:C3:06:2D:9F:91:40:8D:BA:96:9F:B7
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 4E7C2F
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/1-T6NtSLM-Bk-wwYtn5FAjbqWn7c.roa
Signing time: Tue 03 May 2022 06:19:16 +0000
ROA not before: Tue 03 May 2022 06:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61275
IP address blocks: 188.93.184.0/21 maxlen: 21
185.24.188.0/22 maxlen: 22
85.93.224.0/19 maxlen: 19
178.248.96.0/21 maxlen: 21
91.135.48.0/21 maxlen: 21
91.135.58.0/24 maxlen: 24
91.135.56.0/23 maxlen: 23
77.223.164.0/22 maxlen: 22
77.223.161.0/24 maxlen: 24
77.223.162.0/23 maxlen: 23
185.3.0.0/22 maxlen: 22
77.223.172.0/22 maxlen: 22
91.135.60.0/22 maxlen: 22
77.223.168.0/22 maxlen: 22
91.135.59.0/24 maxlen: 24
77.223.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5143599 (0x4e7c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: May 3 06:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f93e8db522ccf8193ec3062d9f91408dba969fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:4d:b0:02:29:38:bb:cb:36:db:17:3e:44:
d1:4a:81:c2:d1:49:b1:7e:a8:53:d5:7e:11:38:53:
14:23:30:a9:9d:e3:01:29:b6:8a:fb:d5:cd:a3:4e:
1f:7d:bb:1e:ea:cf:9c:55:e8:87:ba:59:ba:23:5c:
fa:cc:dd:7e:78:d6:4e:d3:f9:bc:23:4a:ff:bb:38:
d0:8e:2f:dd:a2:c9:be:84:6d:45:3a:f1:9d:39:43:
6b:10:43:61:91:6a:16:5d:f8:74:ef:34:68:35:52:
50:b7:0b:b1:ee:e2:1e:eb:01:86:ed:06:d6:e5:a7:
a8:b9:24:f7:ec:56:c0:c1:de:57:d5:49:e9:5b:6c:
48:a5:89:57:36:53:2d:3e:28:ed:56:55:0c:2e:e6:
da:06:ba:c5:4d:cd:d2:85:44:cc:34:e0:1d:4b:bc:
60:51:bf:08:75:39:d1:5e:b6:4a:39:a1:72:25:d0:
b0:8d:45:4d:80:9e:bf:1f:15:52:c4:09:1c:5b:e8:
cb:ec:76:d5:54:b2:f3:0b:dc:29:c1:11:af:4a:e0:
dd:b0:58:6f:32:59:98:24:da:0d:84:db:9d:83:16:
90:87:dc:7b:c9:9b:49:ed:d2:d2:be:a8:5c:5f:a7:
e2:e8:0c:11:3a:81:dc:03:2e:42:5e:76:8e:f9:28:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:8D:B5:22:CC:F8:19:3E:C3:06:2D:9F:91:40:8D:BA:96:9F:B7
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/1-T6NtSLM-Bk-wwYtn5FAjbqWn7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.161.0-77.223.191.255
85.93.224.0/19
91.135.48.0/20
178.248.96.0/21
185.3.0.0/22
185.24.188.0/22
188.93.184.0/21
Signature Algorithm: sha256WithRSAEncryption
83:50:f3:0b:97:0d:6c:6e:10:bd:f2:6a:d3:c6:77:76:75:f2:
ea:24:78:eb:d0:c6:5b:3c:63:66:a4:3c:e1:5d:6a:f6:62:a3:
2c:0c:30:13:35:52:5e:23:b1:d1:cc:ef:84:4a:e0:ad:69:1b:
34:65:5e:0c:6c:d4:94:cb:c2:bc:9b:8f:0e:0d:43:a0:8c:68:
cb:03:8a:e7:84:dc:f4:63:4d:ee:73:e7:14:b9:40:5a:f6:a5:
7d:0d:ae:a9:37:ec:36:ca:22:a5:a5:0e:68:ec:25:bc:37:8a:
49:73:4f:05:7a:f1:07:06:e4:06:12:4c:79:b1:da:58:ef:eb:
1c:d1:9b:7a:d2:a5:61:ab:8b:c6:da:b3:85:7d:a5:1c:19:2a:
23:7f:2f:9f:99:8c:a2:24:00:cd:ad:ae:88:ee:00:2c:a3:16:
aa:65:ed:99:fc:7a:18:1d:43:d4:3e:6b:4f:8b:69:d1:72:2f:
ac:e4:52:63:25:62:fb:45:62:66:34:ec:6b:fb:83:59:0e:83:
87:67:1d:8b:ba:a3:1d:68:37:ef:c5:57:c3:de:47:30:43:26:
4c:59:7a:c6:1f:77:ac:8b:74:b7:69:da:80:0a:f5:76:e2:56:
bc:d1:58:8e:26:a4:52:a2:d3:d2:9b:6d:19:54:fd:85:c0:82:
9d:83:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org