Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7cwtdjsJCNxJ6lbmtBkSSo_LYlk.roa
File: 7cwtdjsJCNxJ6lbmtBkSSo_LYlk.roa (raw, json)
Hash identifier: UXd2dS6eFuLkuT374h8J3pvYOy49Cr03lMgghByr2pc=
Subject key identifier: ED:CC:2D:76:3B:09:08:DC:49:EA:56:E6:B4:19:12:4A:8F:CB:62:59
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14D2B740
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7cwtdjsJCNxJ6lbmtBkSSo_LYlk.roa
Signing time: Tue 26 Apr 2022 14:38:43 +0000
ROA not before: Tue 26 Apr 2022 14:38:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 5.182.28.0/22 maxlen: 22
194.50.200.0/23 maxlen: 23
195.138.96.0/19 maxlen: 24
194.50.206.0/23 maxlen: 23
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.108.0/22 maxlen: 22
91.242.120.0/21 maxlen: 21
185.173.244.0/22 maxlen: 24
45.88.124.0/22 maxlen: 22
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349353792 (0x14d2b740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 26 14:38:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edcc2d763b0908dc49ea56e6b419124a8fcb6259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:e8:36:69:7a:1d:32:7e:91:dc:af:ff:d1:
a2:78:4b:0a:c0:c3:ea:ce:0b:f6:67:5e:5b:e4:cf:
dc:9b:73:6e:e0:9c:3e:ac:5d:f1:36:b6:27:96:3d:
04:b3:af:81:45:63:7a:b8:98:b9:2a:ec:e6:45:7c:
12:7f:b0:9f:ba:1c:ba:1c:d2:3f:ed:4d:10:f9:ca:
59:2d:3c:85:b2:a2:5d:c8:46:13:4d:f0:52:99:fb:
59:01:ec:b9:a9:6c:05:7c:08:86:cf:3d:33:e7:45:
c8:67:d6:0d:e5:0c:53:13:a0:37:d4:38:3f:3d:b5:
09:49:4c:02:20:55:a5:0a:43:7c:11:35:45:b0:74:
05:d8:7b:19:6c:7e:aa:29:10:74:67:07:7e:8a:34:
da:d7:35:96:80:90:a5:af:6b:3a:35:6c:8f:0f:d9:
0b:11:5b:95:a0:8c:77:f9:7f:90:75:1a:c6:07:31:
58:74:11:34:4a:59:d8:c7:fe:e8:e0:c7:27:26:1e:
9f:cb:74:77:4e:63:bc:7f:f8:ce:3d:fb:1e:8a:e3:
9e:e6:b3:6b:2f:6f:37:5e:88:11:02:96:5f:d3:ef:
2a:cf:24:c6:56:d5:c0:e9:31:b0:df:7d:a0:70:b1:
bc:5d:2d:1f:f1:87:15:05:90:45:bf:80:d1:e7:da:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:2D:76:3B:09:08:DC:49:EA:56:E6:B4:19:12:4A:8F:CB:62:59
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7cwtdjsJCNxJ6lbmtBkSSo_LYlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.88.124.0/22
91.242.64.0/22
91.242.100.0/23
91.242.105.0/24
91.242.108.0/22
91.242.120.0/21
185.173.244.0/22
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
02:05:10:77:c0:7c:f0:e1:e2:0a:bb:02:be:ce:4a:df:47:0e:
91:32:85:5f:8a:c1:91:ca:a0:f6:4e:b9:bd:e5:7b:12:2d:57:
67:c7:63:45:01:64:15:5c:c0:71:ae:a6:87:04:50:41:a2:0d:
4d:e1:61:00:41:ec:7b:45:de:e3:25:f7:69:be:8c:13:b0:69:
c2:3a:be:18:ca:f5:54:7b:65:78:2a:11:f3:2a:39:0a:b1:24:
23:ef:95:65:b3:32:40:af:ca:af:e2:88:02:44:5b:22:25:4e:
5c:96:91:bb:2a:65:5e:60:52:d0:42:76:ff:b9:87:53:a7:66:
6d:07:a1:10:d9:40:72:b6:a7:f8:3d:a1:e2:13:8c:00:ae:7f:
5f:0a:3e:b6:6a:d8:07:df:c6:86:13:72:8d:6d:46:d2:35:62:
44:24:07:41:e5:85:79:0d:fb:f5:91:a7:ea:43:6b:ab:dc:b5:
c8:6d:c0:3f:f0:c6:1b:9f:c6:24:44:da:f0:2b:14:9a:48:b2:
41:52:2c:06:48:ef:b8:d4:36:8e:7f:3d:61:fc:7b:db:94:59:
26:6d:33:f5:c7:10:64:8b:8a:57:c3:42:1d:82:c9:c4:09:89:
02:60:67:f8:8b:58:f5:d9:8e:33:31:f8:87:d3:f1:cd:4c:b3:
35:b8:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org