Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/1-5lAJKnSXiWnYxKcds8mgkI97Hs.roa
File: 1-5lAJKnSXiWnYxKcds8mgkI97Hs.roa (raw, json)
Hash identifier: 5vxsg8LT5XgKpoAF9YUctyp5uMB4HtNn9C8aGJtVAC4=
Subject key identifier: FB:99:40:24:A9:D2:5E:25:A7:63:12:9C:76:CF:26:82:42:3D:EC:7B
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 1BAF6C21
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/1-5lAJKnSXiWnYxKcds8mgkI97Hs.roa
Signing time: Sat 01 Jan 2022 05:57:24 +0000
ROA not before: Sat 01 Jan 2022 05:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199236
IP address blocks: 194.113.24.0/24 maxlen: 24
185.4.123.0/24 maxlen: 24
185.4.120.0/24 maxlen: 24
185.4.121.0/24 maxlen: 24
185.4.122.0/24 maxlen: 24
195.54.172.0/24 maxlen: 24
195.54.173.0/24 maxlen: 24
91.211.240.0/24 maxlen: 24
91.211.241.0/24 maxlen: 24
91.211.242.0/24 maxlen: 24
91.211.243.0/24 maxlen: 24
2a02:7040::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464481313 (0x1baf6c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 1 05:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb994024a9d25e25a763129c76cf2682423dec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:3a:cb:d3:09:57:ce:55:bf:97:0d:82:16:
af:08:a1:b1:0d:44:8b:38:5d:35:d7:a7:d1:57:7f:
0d:9c:e9:14:d2:e4:23:eb:b2:f2:2d:27:8b:86:49:
0f:77:32:e8:64:3d:71:ef:63:fd:27:64:24:1a:80:
a0:48:e0:0f:ac:63:44:76:d4:c1:34:0c:5b:92:4f:
84:b7:28:d3:c8:e7:10:25:6c:51:0c:08:f9:8d:81:
e7:27:31:47:9e:49:3c:31:dc:b9:f8:24:93:96:97:
16:a0:66:9e:ea:c0:9e:d2:80:8d:46:5c:9a:f7:77:
5c:99:b0:fb:fc:94:e8:0d:72:22:1c:26:aa:7b:ef:
f2:19:23:52:63:87:96:0a:4f:da:7b:44:22:6b:3c:
87:d3:46:50:79:c0:9b:f5:65:91:38:7f:0b:9f:90:
dd:ff:90:d0:90:c8:0c:84:71:fb:f7:15:ce:27:31:
f0:87:7a:02:43:30:fa:33:fb:19:56:9f:93:15:6a:
8c:9f:5d:cb:c8:1a:d3:3a:a4:45:5b:89:71:4e:83:
77:ec:77:fa:8e:3a:82:68:a3:95:b8:ed:da:dd:fe:
15:4a:2f:f3:06:62:c1:87:46:6c:ee:f3:90:5c:c6:
61:6f:49:bc:b2:cc:fb:15:02:3e:0e:03:a4:42:4e:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:40:24:A9:D2:5E:25:A7:63:12:9C:76:CF:26:82:42:3D:EC:7B
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/1-5lAJKnSXiWnYxKcds8mgkI97Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.240.0/22
185.4.120.0/22
194.113.24.0/24
195.54.172.0/23
IPv6:
2a02:7040::/32
Signature Algorithm: sha256WithRSAEncryption
19:6a:06:25:21:15:1b:83:18:6b:54:2d:2d:39:c1:da:82:9d:
0c:91:71:1c:8a:02:7f:d8:8e:7f:6a:90:d8:80:42:37:e2:1d:
c3:45:e8:f6:64:ce:1d:ae:73:99:84:a5:32:9e:a9:b5:98:2a:
19:79:e9:3b:64:0b:8e:3b:7e:4e:12:c4:dd:26:f3:00:d0:40:
1b:a3:84:3f:ea:d1:18:28:b1:70:67:ef:3b:4d:73:0d:66:67:
29:84:68:71:03:cd:4c:29:ab:68:45:dc:fb:b8:13:94:1a:95:
54:1b:41:a3:ca:13:37:4f:a2:c4:a6:dc:1b:77:29:d2:e3:4d:
65:35:ba:a1:63:81:60:9b:5b:2e:3d:73:8c:a5:ee:40:54:55:
0d:82:61:33:5b:b0:2c:0e:0c:f2:4f:e0:cc:38:2f:72:87:e2:
5f:95:94:78:26:37:29:b4:3a:7e:1a:01:a8:f3:a3:5d:86:0b:
42:5f:d2:24:ac:47:47:86:50:ec:23:e0:90:c2:53:08:70:ba:
25:e9:92:bf:2e:03:f6:c2:e3:98:a9:42:24:49:f0:39:84:8c:
26:37:85:42:c1:f7:a6:f3:f0:d8:81:49:25:4e:ca:b6:ab:04:
89:fb:ac:4d:97:a9:b7:93:d8:dc:e0:24:23:67:c7:e0:0b:0a:
b9:1a:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:53 2024 by rpki-client on console-ams.rpki-client.org