Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/j4ijdKni76JGOhiQurhY6BlID7A.roa
File: j4ijdKni76JGOhiQurhY6BlID7A.roa (raw, json)
Hash identifier: ofW8YFre0FbLvq/RCVsYCManyf0PdJXlFH2YlHFQTjM=
Subject key identifier: 8F:88:A3:74:A9:E2:EF:A2:46:3A:18:90:BA:B8:58:E8:19:48:0F:B0
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: ABD340
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/j4ijdKni76JGOhiQurhY6BlID7A.roa
Signing time: Tue 15 Feb 2022 09:33:41 +0000
ROA not before: Tue 15 Feb 2022 09:33:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.239.236.0/23 maxlen: 24
95.214.172.0/22 maxlen: 24
45.150.174.0/24 maxlen: 24
45.139.196.0/22 maxlen: 24
95.214.180.0/22 maxlen: 24
185.115.207.0/24 maxlen: 24
193.239.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11260736 (0xabd340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Feb 15 09:33:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f88a374a9e2efa2463a1890bab858e819480fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:7e:92:11:5b:56:b4:2a:90:b7:67:8e:b4:
6a:d5:33:ce:77:3d:f2:c2:fb:03:4a:87:13:0d:1e:
dd:0b:41:d6:9c:10:a3:8f:a5:68:c1:0f:e0:bf:9d:
54:3c:8c:35:84:b6:df:39:a0:55:61:31:50:60:c2:
6f:6b:47:29:6b:30:1b:d7:e5:9d:9f:6c:d9:b1:af:
bc:22:f8:65:dd:91:6b:83:ce:0e:9a:af:96:34:38:
74:70:3e:ba:7c:6d:42:a8:c7:c3:d6:95:83:5f:5f:
80:02:8b:0c:3c:88:89:7c:08:b9:84:14:d8:c5:aa:
ad:bc:fa:3d:d4:f9:7c:d5:8d:21:ce:ac:70:e4:7e:
e1:b5:65:c5:d7:1a:af:26:a0:42:e2:3c:7a:86:93:
41:df:27:27:d1:fc:df:60:25:30:bc:d7:ce:35:07:
e5:f4:74:b7:51:64:ec:27:3a:28:84:9b:57:00:44:
87:a1:31:57:70:f6:8b:b3:cc:68:bf:85:60:87:e6:
d8:66:58:1c:ee:b4:8e:4d:4a:46:78:cb:0a:54:46:
f6:86:74:b8:f5:c1:79:d6:0f:50:01:b7:12:b3:d9:
25:ab:6f:b4:14:b5:9c:a6:3f:59:8c:d2:d6:55:19:
64:d2:4a:56:21:10:6d:76:42:4d:9d:99:c8:dc:fc:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:88:A3:74:A9:E2:EF:A2:46:3A:18:90:BA:B8:58:E8:19:48:0F:B0
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/j4ijdKni76JGOhiQurhY6BlID7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.174.0/24
95.214.172.0/22
95.214.180.0/22
185.115.207.0/24
193.239.196.0/23
193.239.236.0/23
Signature Algorithm: sha256WithRSAEncryption
35:8c:24:54:a4:30:2d:eb:5d:ec:e8:c5:f8:56:83:92:91:39:
b2:2b:c6:3c:7c:92:98:ba:44:09:cf:a3:2f:57:d9:1d:aa:42:
0f:35:9c:33:7f:af:3a:d8:d8:e6:08:ca:73:44:5a:56:5f:ec:
3a:0d:ba:ce:e9:88:4f:15:96:13:d7:26:d8:50:0b:7c:52:49:
d9:13:ea:97:41:6e:84:f7:df:29:c9:b8:ae:39:b1:20:25:4d:
f0:93:be:b6:41:ec:e3:65:1d:17:d9:f8:cf:0a:87:99:99:66:
38:4a:ee:11:df:87:4a:5f:86:e3:c4:a3:e7:6c:47:95:73:d7:
a5:99:ec:57:81:ba:85:66:be:36:f3:ae:df:c1:51:16:bf:3e:
be:4e:3c:20:7a:89:70:f3:4d:83:75:75:fa:df:30:95:5f:8f:
97:0c:5a:bc:86:29:3d:57:53:3a:2c:4d:35:cc:58:8a:46:0c:
7c:38:50:e3:a2:f5:31:64:8f:7f:a4:91:b3:a1:3a:a4:d5:3f:
94:aa:b3:0c:49:21:58:44:27:1f:ee:a9:5c:83:03:35:a0:75:
cf:1e:3d:9e:5e:e3:48:a7:6b:c4:e8:c5:ef:3e:a0:97:76:0d:
fc:8f:fa:f8:ad:ee:b9:ad:0e:0a:f7:85:a1:18:b9:13:ad:78:
39:2c:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org