Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/cvXjp2aPnBBqByPiRE2y_5edjiY.roa
File: cvXjp2aPnBBqByPiRE2y_5edjiY.roa (raw, json)
Hash identifier: YB2Zqi1yO/6rLMF5qMmetBAL/cFNF9oP5kBBao6PHNA=
Subject key identifier: 72:F5:E3:A7:66:8F:9C:10:6A:07:23:E2:44:4D:B2:FF:97:9D:8E:26
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 0183AEA7740B373ED2CCB99807F9602CE8C2
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/cvXjp2aPnBBqByPiRE2y_5edjiY.roa
Signing time: Thu 06 Oct 2022 18:55:53 +0000
ROA not before: Thu 06 Oct 2022 18:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210421
IP address blocks: 91.193.167.0/24 maxlen: 24
94.45.129.0/24 maxlen: 24
94.45.136.0/24 maxlen: 24
94.45.139.0/24 maxlen: 24
94.45.142.0/24 maxlen: 24
94.45.146.0/23 maxlen: 24
94.45.148.0/23 maxlen: 24
94.45.152.0/22 maxlen: 24
94.45.156.0/24 maxlen: 24
94.45.156.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:a7:74:0b:37:3e:d2:cc:b9:98:07:f9:60:2c:e8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Oct 6 18:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72f5e3a7668f9c106a0723e2444db2ff979d8e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:df:c5:4e:7b:20:ed:23:81:ab:05:51:2f:
be:47:22:e5:4e:a8:1c:f1:d1:c3:1f:88:04:42:15:
58:89:ac:fb:95:5c:e4:12:02:9e:e5:86:05:8a:24:
bf:9f:43:02:e4:d7:fb:10:96:09:c6:3d:eb:89:51:
30:4b:a3:89:7c:bb:f2:12:b2:6c:4e:8e:24:07:b9:
6e:26:07:e2:fc:49:a5:e1:a2:d5:4f:a0:cf:83:93:
d1:f2:5b:fd:47:d4:40:cd:aa:fa:5f:64:6b:1a:b5:
78:14:7e:1f:9b:4f:da:68:a4:8a:34:3d:d0:ef:20:
8d:d8:a4:0b:55:f6:d2:1f:7c:ce:f3:22:c0:26:bc:
c1:95:89:b9:f9:7f:c5:98:6f:74:e5:e2:3c:2c:9a:
0b:99:39:ef:8b:e9:d5:08:38:3f:e1:1f:3e:79:0d:
25:36:82:98:12:32:ee:4d:76:a6:8a:b2:bc:07:2a:
6e:da:90:2c:c9:ed:e6:0a:9c:6a:9e:c0:08:1a:c9:
70:a0:6b:45:f5:ab:5a:73:d3:be:53:8f:c4:0c:b1:
46:76:1f:a9:36:fb:d5:b1:45:67:12:f4:a7:eb:8a:
f1:6b:dd:ba:35:4d:e2:a1:14:8f:81:d6:1d:33:d3:
2b:f3:af:dd:47:65:71:1c:18:00:3d:85:de:05:08:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:E3:A7:66:8F:9C:10:6A:07:23:E2:44:4D:B2:FF:97:9D:8E:26
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/cvXjp2aPnBBqByPiRE2y_5edjiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.167.0/24
94.45.129.0/24
94.45.136.0/24
94.45.139.0/24
94.45.142.0/24
94.45.146.0-94.45.149.255
94.45.152.0-94.45.157.255
Signature Algorithm: sha256WithRSAEncryption
99:01:07:b7:94:84:29:43:ac:f8:fb:9e:9e:83:be:3a:0b:a1:
ff:95:94:8d:4c:58:7d:2c:fb:7f:71:21:6a:91:84:3f:55:45:
27:53:a6:79:4b:81:ce:9b:1e:1d:45:82:a0:e7:de:2e:66:8d:
fb:cf:6b:d5:ab:4e:15:bd:a0:19:e0:48:b7:db:9f:b2:62:c4:
23:72:9e:c9:b8:1e:0b:a9:0e:6b:46:f2:7f:c3:c9:f1:76:c1:
44:65:44:bb:1b:1e:81:55:ed:0a:9f:de:70:4b:b3:ae:c7:3d:
50:e9:45:27:e8:2e:67:ec:78:42:b0:69:30:47:ab:6c:02:3b:
20:9c:e2:c2:9d:d4:92:24:49:61:3e:60:a9:6a:9f:a5:0e:44:
38:e9:f9:c2:91:86:db:1a:e7:e3:bd:3c:15:11:0c:48:3d:02:
8d:88:63:96:40:72:f1:ff:d3:22:1b:f1:fd:48:b7:64:8d:e7:
38:01:b7:39:25:1c:42:6d:ef:3a:69:9e:94:a6:82:26:72:06:
5d:9f:1c:39:2a:19:bb:8b:62:bc:34:ed:93:a3:45:36:cd:e2:
e9:34:c8:f0:e4:b1:7a:40:8b:f4:d7:bd:aa:11:5d:2c:5a:e5:
7b:0b:fd:04:f7:cc:e7:eb:0c:0e:46:02:13:e4:46:65:52:e2:
95:1e:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org