Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/ab9AzmXiT_vE3Cx-YRWGYmRCeVg.roa
File: ab9AzmXiT_vE3Cx-YRWGYmRCeVg.roa (raw, json)
Hash identifier: re3cfw3lXHT4Efw3CBv8+3sVbNNTE4AM1U0BwyvSgtg=
Subject key identifier: 69:BF:40:CE:65:E2:4F:FB:C4:DC:2C:7E:61:15:86:62:64:42:79:58
Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial: 01836553688F4E4A9FEF6BFA39CEC53C35A6
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/ab9AzmXiT_vE3Cx-YRWGYmRCeVg.roa
Signing time: Thu 22 Sep 2022 13:11:48 +0000
ROA not before: Thu 22 Sep 2022 13:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201975
IP address blocks: 193.148.20.0/22 maxlen: 24
45.86.176.0/22 maxlen: 24
185.54.180.0/22 maxlen: 24
93.90.64.0/22 maxlen: 24
157.97.112.0/21 maxlen: 24
2a02:4660::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:53:68:8f:4e:4a:9f:ef:6b:fa:39:ce:c5:3c:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
Validity
Not Before: Sep 22 13:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69bf40ce65e24ffbc4dc2c7e6115866264427958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:71:19:8b:a6:1a:85:5e:09:2b:89:9a:4b:
dd:52:ad:73:3c:1a:96:10:36:83:d6:6c:fc:55:74:
e4:64:de:22:7b:27:69:b5:08:93:3f:c5:6e:01:34:
b7:eb:6e:4c:e3:dc:1b:f6:bb:8b:9b:7c:24:bc:68:
56:c2:44:33:98:57:ca:71:f7:7a:4d:13:77:ad:65:
48:37:b3:a3:3f:5e:b0:56:f5:87:35:f5:72:69:25:
ab:e7:29:c0:ea:10:10:22:21:d1:8a:04:66:a2:cc:
95:bd:49:29:24:4a:50:a3:81:a2:0b:bc:1c:05:2b:
55:c6:d1:9e:01:60:a6:a0:bc:c2:b2:26:5e:46:f8:
b2:15:f5:14:f7:c5:e2:a3:95:71:f1:59:bd:a5:4e:
49:3e:ed:d2:2e:02:cc:a5:20:95:39:c4:d8:a0:81:
f8:80:f8:0f:14:48:61:fd:10:e3:ab:78:5e:c0:77:
de:15:ef:68:20:a5:4b:72:b7:62:82:f3:68:48:aa:
42:6f:b6:0f:59:d8:e2:c2:94:84:cd:dd:ae:f2:e6:
15:cf:30:ba:ef:21:55:3c:ab:54:08:87:cb:15:10:
90:84:7d:70:6e:aa:7a:f1:78:af:a4:43:8f:73:74:
ae:f3:f0:87:b7:31:e4:04:d5:a3:72:dd:75:37:d4:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BF:40:CE:65:E2:4F:FB:C4:DC:2C:7E:61:15:86:62:64:42:79:58
X509v3 Authority Key Identifier:
keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/ab9AzmXiT_vE3Cx-YRWGYmRCeVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.176.0/22
93.90.64.0/22
157.97.112.0/21
185.54.180.0/22
193.148.20.0/22
IPv6:
2a02:4660::/32
Signature Algorithm: sha256WithRSAEncryption
91:d2:39:d9:79:13:48:3c:ba:fe:1a:2d:b5:1f:0d:c7:b6:5b:
eb:39:dd:46:16:b6:57:ca:23:f0:10:17:c4:92:9e:f1:19:31:
da:9d:69:18:8b:79:58:8d:b1:c4:04:61:c0:1b:d9:d5:ab:73:
a1:be:10:b0:77:4e:eb:62:f1:5b:a7:df:77:7d:5c:cd:57:e6:
06:e2:38:2b:2f:db:df:db:7e:d3:53:c9:e3:6c:eb:c3:6c:7d:
6c:fc:c8:4d:93:36:5e:93:14:6c:62:a7:95:92:34:e9:b3:22:
33:fd:b4:1c:fe:dc:41:45:b0:20:c9:2a:36:5c:f7:ea:51:44:
a2:21:92:11:0c:32:24:8c:96:65:9d:b5:d9:fc:a9:b4:8d:24:
0d:7f:0d:d9:78:9a:ae:c4:62:be:ac:e2:04:0f:a5:01:c9:74:
b0:8e:d8:c3:f9:3b:39:8a:b3:8e:63:e1:80:60:dd:b0:61:b9:
df:d1:7e:2c:40:00:10:d7:e2:a7:ec:d6:62:31:94:c4:17:fa:
8e:86:0d:01:be:e1:74:e3:b2:b8:55:6a:56:a3:8c:16:e8:ab:
0a:50:87:59:27:16:88:72:c7:e0:d6:66:01:8b:a5:05:7f:a5:
e5:df:41:36:a1:6a:44:3c:0c:80:14:7d:b1:eb:83:b6:75:24:
7e:56:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org