Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/55QYTLfD74bTTZDCKCzELmHSFS4.roa
File: 55QYTLfD74bTTZDCKCzELmHSFS4.roa (raw, json)
Hash identifier: kIuUHJfegf/AUyTgagt3CbQiAqidPdsVoC1utFm5xz0=
Subject key identifier: E7:94:18:4C:B7:C3:EF:86:D3:4D:90:C2:28:2C:C4:2E:61:D2:15:2E
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 104DF2C6
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/55QYTLfD74bTTZDCKCzELmHSFS4.roa
Signing time: Sat 01 Jan 2022 15:55:01 +0000
ROA not before: Sat 01 Jan 2022 15:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 131.188.0.0/16 maxlen: 16
192.44.82.0/23 maxlen: 23
192.44.84.0/22 maxlen: 22
192.44.81.0/24 maxlen: 24
192.44.88.0/23 maxlen: 23
192.44.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273543878 (0x104df2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Jan 1 15:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e794184cb7c3ef86d34d90c2282cc42e61d2152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:3d:86:7d:bc:2d:ad:ef:76:39:58:8a:75:
2b:2a:6a:77:66:d4:c5:06:6f:cf:82:9c:42:19:1e:
0f:5c:78:6e:b1:12:6a:0b:ac:7c:e9:3a:3f:58:73:
23:64:c3:1f:60:bf:50:56:61:ea:6a:73:93:78:01:
27:7a:62:37:59:dc:fc:12:ad:8d:7c:58:68:40:87:
50:2f:89:67:c8:8b:92:06:7f:8f:08:c2:af:1b:bc:
a7:7b:82:fc:e4:a9:80:26:9a:3f:58:39:08:37:ab:
92:6b:09:e3:48:a2:7d:b4:7f:22:10:65:5f:ff:1d:
c6:d7:01:ef:a6:54:7e:ae:dc:ce:f0:ba:51:d5:83:
01:c1:ad:0c:bc:66:de:58:84:1a:95:0b:6d:10:36:
a2:de:41:f1:b1:f3:24:48:40:15:02:fd:59:d4:1d:
63:0b:09:7e:96:47:38:32:2c:d8:65:ff:84:48:bc:
2a:98:7d:c5:7c:72:64:aa:70:f1:1b:24:fa:2d:18:
16:12:32:3e:ce:06:45:21:c6:f2:fb:e8:df:49:6e:
f6:c2:3a:8c:24:ab:62:75:4e:31:5b:83:96:c5:a3:
65:40:65:40:4b:37:8f:a6:ec:05:77:03:ef:61:a6:
a8:f0:9a:21:6f:5e:81:aa:55:a7:08:61:27:15:c6:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:94:18:4C:B7:C3:EF:86:D3:4D:90:C2:28:2C:C4:2E:61:D2:15:2E
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/55QYTLfD74bTTZDCKCzELmHSFS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.188.0.0/16
192.44.81.0-192.44.90.255
Signature Algorithm: sha256WithRSAEncryption
4d:0a:e2:51:8e:4a:98:c4:ec:1d:7a:bd:92:97:e4:47:1b:b1:
24:cc:e5:04:d1:20:a6:85:4d:e7:af:7a:e3:3e:96:d9:e7:e7:
2a:85:8e:b2:5b:33:c1:dd:e4:3e:5b:41:81:ac:79:83:38:83:
82:7f:58:27:ab:6d:9c:be:f0:58:ab:c2:51:81:aa:1b:65:26:
d2:1f:ad:a6:19:2b:56:8e:e0:0a:c8:8b:93:8d:fe:65:86:3c:
4b:94:38:a3:dd:52:13:96:dd:ce:ae:e9:b2:ed:88:f2:ad:28:
82:73:f9:86:d6:ef:40:11:ec:b8:ab:2b:4c:24:d3:32:8e:79:
ac:dd:6e:82:b8:7b:f6:65:3c:a8:37:80:de:1b:a1:77:4b:90:
62:17:a6:aa:48:e7:80:7c:d1:79:2c:22:13:77:b0:87:dd:d1:
46:f5:0e:5c:c9:7f:dd:1b:24:24:0d:44:3f:ab:90:33:68:cc:
5a:43:2c:64:08:28:af:19:ff:c6:24:a2:04:fc:57:02:d9:ee:
69:bd:8f:0b:bf:3f:ca:48:7d:8f:63:ba:66:e2:fe:f1:af:29:
a4:80:93:c9:59:4d:08:d9:86:c4:a3:b9:00:45:d9:63:ca:cf:
0b:a8:ed:1e:87:ac:5e:a6:b8:4b:d5:a1:b0:74:01:63:fc:8e:
5e:af:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:18 2024 by rpki-client on console-ams.rpki-client.org