Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/aoby0a2C3mJbybhyop4aFYmdyJI.roa
File: aoby0a2C3mJbybhyop4aFYmdyJI.roa (raw, json)
Hash identifier: Ig5Q7EdAs6ulVmP7yYeZM0Qq1Hm2SEmOp/rCKxto8Eo=
Subject key identifier: 6A:86:F2:D1:AD:82:DE:62:5B:C9:B8:72:A2:9E:1A:15:89:9D:C8:92
Certificate issuer: /CN=2901f5019a970ba5be0c754d20f78671818f4a2e
Certificate serial: 0D35D966
Authority key identifier: 29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/aoby0a2C3mJbybhyop4aFYmdyJI.roa
Signing time: Sat 01 Jan 2022 05:53:52 +0000
ROA not before: Sat 01 Jan 2022 05:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51698
IP address blocks: 91.227.152.0/24 maxlen: 24
91.227.152.0/23 maxlen: 23
91.227.153.0/24 maxlen: 24
178.159.254.0/23 maxlen: 23
178.159.254.0/24 maxlen: 24
178.159.255.0/24 maxlen: 24
185.65.138.0/23 maxlen: 24
178.159.248.0/21 maxlen: 21
178.159.250.0/23 maxlen: 23
178.159.250.0/24 maxlen: 24
178.159.251.0/24 maxlen: 24
178.159.252.0/24 maxlen: 24
178.159.252.0/23 maxlen: 23
178.159.253.0/24 maxlen: 24
178.159.248.0/23 maxlen: 23
185.47.154.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221632870 (0xd35d966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901f5019a970ba5be0c754d20f78671818f4a2e
Validity
Not Before: Jan 1 05:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a86f2d1ad82de625bc9b872a29e1a15899dc892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:3d:7d:1f:f9:97:06:03:08:b0:3c:ba:fb:
5c:ad:74:8a:43:50:67:e0:66:4c:29:97:40:41:60:
c7:16:54:81:44:7e:9f:e2:8a:28:c7:b4:23:a0:73:
97:3a:87:22:17:e7:0f:87:a5:aa:ec:9a:6e:19:4e:
17:ca:ff:1e:9b:65:8e:60:ce:8f:06:f0:9a:a3:e5:
70:60:34:ae:cb:67:83:ef:35:16:67:3a:9a:e8:d9:
c4:06:ef:0f:38:72:12:cb:aa:a3:5a:12:84:20:4e:
0c:82:2a:1a:bd:7f:ea:82:c6:df:e6:09:a9:98:62:
6c:3c:68:8d:73:6a:d6:dc:ae:ed:30:70:6f:1d:95:
96:73:26:9b:04:13:20:cf:19:cc:cd:30:9f:c2:42:
2a:f1:59:40:05:0d:a2:f7:ed:1f:bb:d6:16:05:8f:
13:10:c1:42:30:52:68:46:6e:a7:80:c7:bc:9a:ff:
04:d2:59:c3:2d:32:72:5f:52:10:4a:fa:45:e9:f6:
80:fb:66:08:b8:48:2e:4a:a0:a6:2a:f4:88:65:7d:
cb:84:47:d0:a1:ab:7f:73:8f:43:ae:72:7a:fb:3f:
e2:b8:8a:3f:71:89:d0:d2:c9:17:fe:95:59:a2:cf:
f5:e1:4e:a9:8e:01:c2:f2:86:97:ab:ff:7f:7f:88:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:86:F2:D1:AD:82:DE:62:5B:C9:B8:72:A2:9E:1A:15:89:9D:C8:92
X509v3 Authority Key Identifier:
keyid:29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/aoby0a2C3mJbybhyop4aFYmdyJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.152.0/23
178.159.248.0/21
185.47.154.0/23
185.65.138.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:2c:96:9b:2a:46:17:c9:0c:c9:ff:dd:2c:e5:2b:7e:f7:2b:
e2:19:1f:03:40:73:bb:ba:23:0a:a9:ca:50:fd:08:69:e6:43:
c9:d2:96:41:8f:86:49:7b:0a:c8:76:a4:db:77:ab:96:28:a9:
25:53:cf:c9:76:6f:26:e0:4e:1c:80:d0:3f:6c:48:27:6d:7e:
0b:24:21:17:ee:e2:02:67:67:35:a7:92:32:ca:08:a7:da:46:
53:16:0f:65:d3:e3:e3:86:01:6e:88:a3:8b:e0:3c:5a:b8:e4:
09:4d:9e:bb:2d:c8:d3:96:59:a1:d8:9e:b7:89:c5:63:77:bc:
c9:c3:37:fc:61:3d:fb:21:67:8b:ca:cb:47:d3:dd:ac:bd:39:
7c:48:d1:a8:ea:83:0d:eb:8e:7b:40:5f:49:84:4c:f0:2e:1d:
7d:fd:87:70:1e:29:e8:03:62:2e:5c:10:eb:43:24:08:8f:4b:
d7:33:93:b2:b3:d3:5e:3b:10:40:25:7a:76:5e:58:a4:5e:7e:
ea:9e:ee:71:aa:d8:c0:00:de:31:00:68:a5:ae:32:bd:2d:87:
5a:fa:ff:23:b8:61:d9:71:18:6a:96:24:22:9a:b9:b3:f3:01:
6e:46:54:49:28:83:3f:0d:ed:b2:6f:43:bc:fd:65:cf:08:0c:
98:22:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org