Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/TrQL0knIxkTm3S15X4nS-HELmnw.roa
File: TrQL0knIxkTm3S15X4nS-HELmnw.roa (raw, json)
Hash identifier: rzMitFlvDFdu+byJnBw1R0e4zup7Pev0l3UpYOBk8X4=
Subject key identifier: 4E:B4:0B:D2:49:C8:C6:44:E6:DD:2D:79:5F:89:D2:F8:71:0B:9A:7C
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 9C534F
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/TrQL0knIxkTm3S15X4nS-HELmnw.roa
Signing time: Sat 01 Jan 2022 01:53:24 +0000
ROA not before: Sat 01 Jan 2022 01:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60999
IP address blocks: 185.90.169.0/24 maxlen: 24
185.90.168.0/24 maxlen: 24
185.90.171.0/24 maxlen: 24
185.90.168.0/22 maxlen: 22
185.90.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10244943 (0x9c534f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Jan 1 01:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eb40bd249c8c644e6dd2d795f89d2f8710b9a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:a2:40:ff:81:fb:be:7f:d6:90:7a:3d:2d:
53:44:52:7b:cd:06:f0:ee:33:f3:69:4a:07:42:6e:
09:ee:c1:67:a1:12:12:8b:a4:32:60:89:b3:88:2e:
66:45:5b:02:c7:ab:da:01:33:06:53:c0:59:f6:cd:
8f:b2:fc:c6:41:ea:b8:ea:a1:e6:eb:d8:99:e1:4a:
12:29:9f:52:61:93:23:7b:f2:50:04:e0:83:1e:95:
87:4a:3d:f0:a9:70:df:66:2f:0b:81:4d:dc:88:31:
07:e1:9e:de:1d:0f:e7:94:9b:ad:ab:36:44:1b:9c:
db:97:6c:0c:7c:b3:96:31:48:c8:b7:21:88:08:5f:
04:03:3c:87:cc:3a:f2:8f:90:ea:2b:36:d4:35:e6:
ce:a5:78:d1:60:5e:de:87:b6:a1:ab:de:d7:e5:67:
89:4f:16:89:de:6c:d8:f0:1d:0c:54:c1:a3:c7:16:
c7:ed:d7:54:c6:a7:17:b8:85:0b:98:10:71:e5:6b:
21:b9:b0:9a:87:cd:21:dc:5e:55:51:4c:b0:23:68:
25:96:17:5d:62:90:96:26:eb:9a:99:bb:78:64:b2:
2f:28:0a:28:57:5b:04:e4:c4:2a:ea:d0:8e:cc:84:
55:4c:b4:da:f9:1c:fe:a7:9d:b2:f0:71:b1:8b:27:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:0B:D2:49:C8:C6:44:E6:DD:2D:79:5F:89:D2:F8:71:0B:9A:7C
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/TrQL0knIxkTm3S15X4nS-HELmnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.168.0/22
Signature Algorithm: sha256WithRSAEncryption
70:4f:bd:8d:62:82:54:6c:af:45:46:1c:e3:85:b4:59:fb:9d:
dc:0f:13:38:90:7f:4e:9a:63:13:7a:52:62:70:09:c0:d0:f7:
1f:fe:75:cc:9f:c4:72:ad:67:fb:fb:d1:2c:fb:dd:07:b9:d1:
0b:8b:9f:a9:e3:0c:55:ad:15:89:b3:6c:fc:f2:14:89:ed:36:
81:0c:25:f7:59:36:5c:58:99:56:ff:4b:ad:b3:0a:1e:22:6e:
77:9c:25:18:7e:45:e3:54:0e:78:80:99:e5:18:9c:d1:44:c9:
3f:e6:26:ff:c9:87:e1:16:72:2c:44:2f:98:ba:1a:20:ce:8e:
5f:bc:49:a8:10:6f:f8:74:17:86:b6:cf:1f:b3:c8:0e:5d:22:
48:66:f0:af:6d:5f:e9:46:ea:36:f3:76:d0:2b:23:50:ec:2f:
4c:a6:86:c4:db:ea:30:d3:04:ba:f2:56:39:2f:dc:8d:73:ef:
f5:a4:88:a8:4f:52:94:a8:7a:53:df:6f:29:e6:ae:cb:be:51:
e5:da:87:b0:e8:05:c0:e6:90:5e:83:ed:eb:ab:1f:f0:7c:9c:
71:e2:af:b4:27:2c:85:d3:ef:ff:5b:06:5c:eb:14:3f:23:6f:
f3:40:25:26:48:42:ed:02:e4:59:f4:a6:83:01:e1:b6:30:d3:
09:5c:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:33 2024 by rpki-client on console-ams.rpki-client.org