Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/ImHXvRfr4iuhLc3j3n8s6wBMAQ4.roa
File: ImHXvRfr4iuhLc3j3n8s6wBMAQ4.roa (raw, json)
Hash identifier: nCCuSObNlWFgI4PmQz+IrGRXAT8rJb3YmMTiQ/uT8Lc=
Subject key identifier: 22:61:D7:BD:17:EB:E2:2B:A1:2D:CD:E3:DE:7F:2C:EB:00:4C:01:0E
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 11F07761
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/ImHXvRfr4iuhLc3j3n8s6wBMAQ4.roa
Signing time: Thu 13 Jan 2022 17:48:54 +0000
ROA not before: Thu 13 Jan 2022 17:48:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19624
IP address blocks: 31.14.40.0/23 maxlen: 23
89.39.149.0/24 maxlen: 24
185.105.4.0/23 maxlen: 23
185.105.6.0/24 maxlen: 24
2a01:4ce0:61::/48 maxlen: 48
2a01:4ce0:161::/48 maxlen: 48
2a01:4ce0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300971873 (0x11f07761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Jan 13 17:48:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2261d7bd17ebe22ba12dcde3de7f2ceb004c010e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:a1:12:a2:d3:c2:02:d9:9f:b1:dd:3e:0d:
ae:4e:76:2b:37:da:c9:91:ad:46:03:85:18:b0:12:
fe:22:18:f2:56:61:06:81:81:58:ac:ec:26:0b:bd:
2a:c1:c3:5e:3f:db:00:28:1c:4b:44:0a:cc:75:e1:
ec:cf:34:b2:52:fa:2d:be:d2:5c:9f:91:d5:1e:12:
cd:86:77:e0:cd:1b:31:ba:13:58:63:69:e7:87:a6:
94:f6:bc:80:5d:40:00:9c:11:82:0a:62:30:59:5a:
39:1c:4e:e5:29:2d:1a:2b:90:05:64:6c:5b:7f:58:
3c:c8:bb:86:c0:b1:21:1a:54:9f:92:a1:75:0c:56:
62:5c:c1:b6:07:bd:54:a5:f7:46:cd:5b:4a:6b:2b:
be:87:1d:f2:4e:12:f8:80:9c:22:22:e0:07:41:5f:
10:62:57:2e:19:7b:60:7b:3e:49:ce:2c:bf:10:7b:
1c:e5:b7:89:b8:d6:69:e0:01:dc:31:19:e8:8d:dc:
38:ac:ae:ce:1c:03:0e:60:3f:18:78:8b:57:7e:10:
41:d8:16:a6:95:75:fb:84:fc:a7:22:c6:4e:45:66:
cb:49:7f:7f:31:9b:d9:7f:a2:db:76:0b:73:b4:80:
7f:eb:6a:eb:80:3c:3f:ef:29:29:05:22:7d:4b:b0:
49:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:D7:BD:17:EB:E2:2B:A1:2D:CD:E3:DE:7F:2C:EB:00:4C:01:0E
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/ImHXvRfr4iuhLc3j3n8s6wBMAQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.40.0/23
89.39.149.0/24
185.105.4.0-185.105.6.255
IPv6:
2a01:4ce0::/32
Signature Algorithm: sha256WithRSAEncryption
55:04:77:d2:44:d8:fa:e3:a7:23:aa:b1:bb:db:dc:f5:aa:e3:
a1:28:6b:4d:14:d9:1a:06:2b:7e:e2:5d:fb:61:1d:f1:73:fa:
32:63:9a:0b:88:95:fa:cf:42:66:45:ae:6a:53:a6:b5:b4:b6:
ee:69:e4:0b:4c:ff:b6:81:f8:66:c9:b4:96:c9:b7:55:96:e9:
85:22:1a:0c:82:54:d1:c0:ec:aa:08:9b:4c:0c:03:97:db:9a:
75:98:21:a2:18:f9:da:ab:84:68:9d:6d:4f:3c:c5:18:2f:cb:
df:fd:dd:9d:a3:9d:c3:34:26:8f:12:49:09:ae:1d:41:40:eb:
c1:87:48:a3:b9:c2:c9:2c:e6:42:af:13:44:3b:63:5b:c6:2d:
03:da:d8:26:ac:4f:4d:85:48:6f:b6:13:81:cf:e4:9f:70:e7:
a1:15:b8:59:6f:48:66:e4:ab:03:12:8b:c7:74:d6:49:d8:4e:
56:39:4d:65:2b:21:72:48:d9:2a:30:ca:9c:b5:25:0e:d6:b2:
48:e1:5d:ea:b4:1d:ac:ef:2c:12:64:73:4b:00:7f:dc:d5:a8:
28:d6:5f:62:0d:40:18:01:3f:8f:d8:42:ab:e5:9a:95:f6:10:
31:96:7b:01:d4:d7:3d:e2:3a:71:ad:21:b1:9f:42:39:ad:b5:
b2:d6:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org