Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/sqHY9PyOKbhdb8BnnNPxB0xUa-0.roa
File: sqHY9PyOKbhdb8BnnNPxB0xUa-0.roa (raw, json)
Hash identifier: eEnq/LNtKzJXLp21yj+laze+6MvMUF3Nq/oOiJ8QEF4=
Subject key identifier: B2:A1:D8:F4:FC:8E:29:B8:5D:6F:C0:67:9C:D3:F1:07:4C:54:6B:ED
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 099FBEE8
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/sqHY9PyOKbhdb8BnnNPxB0xUa-0.roa
Signing time: Mon 20 Jun 2022 23:30:44 +0000
ROA not before: Mon 20 Jun 2022 23:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393262
IP address blocks: 91.231.3.0/24 maxlen: 24
91.92.32.0/24 maxlen: 24
91.92.37.0/24 maxlen: 24
91.92.36.0/24 maxlen: 24
89.44.34.0/24 maxlen: 24
95.214.78.0/24 maxlen: 24
45.10.131.0/24 maxlen: 24
95.214.77.0/24 maxlen: 24
95.214.76.0/24 maxlen: 24
77.81.141.0/24 maxlen: 24
194.147.64.0/23 maxlen: 23
95.214.79.0/24 maxlen: 24
78.159.151.0/24 maxlen: 24
212.11.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161464040 (0x99fbee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Jun 20 23:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2a1d8f4fc8e29b85d6fc0679cd3f1074c546bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:29:f0:04:a6:7d:ca:7e:d2:44:e0:d7:13:
b7:3a:9a:c5:ec:85:55:be:e1:b6:1e:58:fd:30:48:
24:8c:96:89:69:91:92:65:a4:7b:e9:33:32:1b:5e:
09:4c:c0:d7:b1:63:5e:c5:8b:12:63:2d:3e:f6:9c:
bc:3c:75:02:1b:af:c6:cf:26:35:4f:31:bf:b5:5e:
01:d0:a4:19:65:73:9b:f4:0c:16:8c:bf:2b:d8:61:
b7:18:ef:ed:c4:24:5c:a4:40:7d:be:7d:d9:b9:8c:
d5:86:3b:99:e3:26:38:b3:44:71:e9:c1:2b:3f:55:
6c:9a:20:f2:85:e0:24:69:f3:08:2c:50:b6:87:87:
1f:47:e0:95:cf:1f:42:b1:22:85:b1:72:7d:8b:02:
bd:72:bc:b1:bd:0b:76:02:5a:84:29:5c:6b:57:18:
5b:c7:0f:30:a9:cb:9f:75:4c:cf:34:77:08:28:9a:
00:97:41:17:37:76:b9:f5:11:73:72:d3:b1:f6:5d:
74:dd:94:2e:8a:17:9d:28:be:8b:bf:a6:95:66:95:
c0:b4:15:b6:ba:ba:35:b4:30:b3:28:8e:d7:66:72:
4b:2b:4f:fd:f5:12:8c:e3:05:f0:5d:e5:c2:c2:d3:
b0:04:a5:29:a5:48:c0:13:70:b3:12:72:73:e5:dd:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:D8:F4:FC:8E:29:B8:5D:6F:C0:67:9C:D3:F1:07:4C:54:6B:ED
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/sqHY9PyOKbhdb8BnnNPxB0xUa-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.131.0/24
77.81.141.0/24
78.159.151.0/24
89.44.34.0/24
91.92.32.0/24
91.92.36.0/23
91.231.3.0/24
95.214.76.0/22
194.147.64.0/23
212.11.95.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ff:f6:b4:be:38:c1:bd:94:85:4d:c1:e2:84:01:c8:0f:31:
7a:d1:f6:d0:69:53:a2:40:56:27:71:8f:54:f4:7e:9b:d5:b0:
44:89:91:48:5f:38:bb:cc:0d:7a:c5:de:44:52:26:eb:df:86:
df:0d:f2:4e:43:1b:75:81:5e:c3:60:3e:42:79:f3:c8:c3:44:
5c:6c:24:9e:9e:13:fa:46:43:e0:eb:4d:0f:68:fd:1e:b0:f4:
51:71:83:8f:68:ae:4b:fd:b5:bc:ef:73:7c:79:c0:fc:8f:bb:
b3:2e:44:d3:6f:75:c8:d6:e7:b4:07:e0:90:8f:9f:35:05:d1:
bf:04:02:bf:f8:bc:5c:34:af:fd:30:5a:56:2f:80:60:c9:36:
65:16:0c:99:8b:fe:26:0f:f5:40:40:0e:88:98:a7:01:c3:66:
3b:9f:73:d1:06:47:d5:e1:50:81:7c:4b:da:eb:03:8f:ac:1b:
98:17:ac:71:55:2a:25:46:3f:d4:c9:ca:c7:53:e2:9f:f0:55:
95:d0:87:bb:c9:02:83:37:0d:90:22:34:be:41:fe:c6:c7:53:
b9:e4:84:c9:d1:15:20:2a:31:ad:86:d1:7e:c1:79:48:ea:72:
0e:ba:fa:9b:cb:83:97:69:e7:a3:12:2b:80:f0:ec:bf:49:23:
d6:93:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org