Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/g91g52tW183x3B4lz-kMlRzPwts.roa
File: g91g52tW183x3B4lz-kMlRzPwts.roa (raw, json)
Hash identifier: Fn1OmF5eTTPav5EWaokLzezbLDvkCddqJzmxNh5ii8w=
Subject key identifier: 83:DD:60:E7:6B:56:D7:CD:F1:DC:1E:25:CF:E9:0C:95:1C:CF:C2:DB
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 01451164
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/g91g52tW183x3B4lz-kMlRzPwts.roa
Signing time: Sat 01 Jan 2022 14:57:59 +0000
ROA not before: Sat 01 Jan 2022 14:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203751
IP address blocks: 80.80.82.0/23 maxlen: 24
185.124.140.0/22 maxlen: 24
185.132.184.0/23 maxlen: 24
2a06:ab80::/29 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21303652 (0x1451164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jan 1 14:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83dd60e76b56d7cdf1dc1e25cfe90c951ccfc2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:05:87:b4:03:51:84:bf:4f:20:02:4d:5a:
b5:a4:c4:23:22:aa:85:b8:31:af:ac:ea:10:d4:72:
8e:0e:34:b5:77:01:91:dc:c1:bb:14:4c:cc:06:62:
04:fe:61:e4:c9:a6:58:83:84:af:10:37:35:24:be:
fe:3d:a3:15:57:4c:5f:86:2a:c3:cc:9e:b6:45:ae:
d3:bb:ee:f0:1f:a4:62:6e:7b:05:6f:02:06:33:17:
e4:27:d5:13:86:3a:42:2f:23:2d:4f:b4:d4:92:6a:
5b:61:e8:25:97:24:13:2f:4c:27:21:76:c1:18:e9:
8c:8f:15:7e:7e:e6:57:74:c6:cd:89:14:c5:f8:b9:
59:51:13:b1:2e:52:ea:f6:6e:5b:03:c6:0f:8c:e4:
a2:1d:d2:c5:2a:b1:5b:ed:cc:f6:58:4a:08:15:98:
44:0a:2c:a0:10:5c:db:9c:6b:b3:f2:d0:29:51:0c:
a2:ff:e2:34:e3:83:9c:16:11:db:b4:40:8d:8a:5b:
b6:75:08:16:dc:be:f1:81:fc:7d:c2:8d:13:bb:f1:
2c:ee:c5:7b:61:2a:67:ee:fb:32:88:85:1e:51:eb:
e4:b6:37:04:f6:8c:b9:28:30:9a:6b:96:0d:33:8b:
e9:0d:1f:eb:d1:ac:47:85:19:1d:fe:cb:00:18:36:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DD:60:E7:6B:56:D7:CD:F1:DC:1E:25:CF:E9:0C:95:1C:CF:C2:DB
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/g91g52tW183x3B4lz-kMlRzPwts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.82.0/23
185.124.140.0/22
185.132.184.0/23
IPv6:
2a06:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
32:23:bf:a6:69:c3:d2:69:d7:d5:c9:2e:1c:c1:e1:39:4b:7c:
59:1d:7a:05:4b:b2:97:2e:07:a3:70:ce:98:7f:52:6f:6c:ed:
e9:1d:c5:04:43:d2:20:3e:a0:84:0a:2b:ff:83:3a:38:e6:60:
16:1f:40:a4:2f:2f:b8:57:db:d8:cd:b7:b4:51:dc:7d:05:02:
59:28:d8:7d:09:aa:3f:d4:d7:8c:40:f9:ef:f9:c9:51:94:01:
bf:8e:8f:f3:8a:b2:84:c1:6b:22:4b:ad:a6:4e:84:89:0b:16:
0c:4c:7a:8f:86:da:c1:f4:0e:d5:4e:8a:c8:2d:ce:57:6f:b9:
f4:c2:23:a8:86:79:09:0d:41:82:36:40:08:f0:08:1e:97:06:
82:9a:ec:47:64:cf:0b:cc:a7:05:9e:e8:1e:34:65:a1:17:a1:
cd:a7:85:1c:05:54:ce:51:66:c6:eb:0a:15:a5:9e:f9:f0:63:
5e:15:88:ce:82:c3:53:12:60:49:18:15:ab:c6:85:79:d4:bf:
15:b5:20:7b:c0:f8:84:fd:ef:ec:8f:53:54:7d:a8:86:0d:10:
71:c8:79:a2:2b:df:e9:46:cb:cc:57:c6:2f:7e:d6:32:bb:a4:
15:9a:55:a3:ee:ec:aa:d9:4b:24:df:54:cb:07:09:31:6d:8e:
91:3a:4c:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:21 2024 by rpki-client on console-fra.rpki-client.org