Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EDyF3qDZQ7CzIEGYRiw4uiXH_3I.roa
File: EDyF3qDZQ7CzIEGYRiw4uiXH_3I.roa (raw, json)
Hash identifier: xZ1uHTtaNsPMRdXjU8ocrx87baA0G3R5GAdS1GS7oNg=
Subject key identifier: 10:3C:85:DE:A0:D9:43:B0:B3:20:41:98:46:2C:38:BA:25:C7:FF:72
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 137D46F6
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EDyF3qDZQ7CzIEGYRiw4uiXH_3I.roa
Signing time: Sat 01 Jan 2022 05:56:12 +0000
ROA not before: Sat 01 Jan 2022 05:56:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43094
IP address blocks: 91.242.84.0/23 maxlen: 23
91.242.104.0/21 maxlen: 21
91.242.108.0/22 maxlen: 22
91.242.112.0/20 maxlen: 24
194.114.144.0/24 maxlen: 25
91.242.74.0/23 maxlen: 23
91.242.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326977270 (0x137d46f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=103c85dea0d943b0b3204198462c38ba25c7ff72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:a1:a3:86:35:9a:2e:6c:ef:6b:3a:30:58:
a4:71:2f:65:bc:47:78:21:00:f8:40:fa:d2:d9:2d:
23:ca:c4:cc:63:31:19:6a:d2:10:bc:80:91:01:17:
28:22:3f:51:77:d0:03:9a:88:cc:cf:44:8b:15:62:
70:02:d0:06:0c:1d:42:73:2a:ed:64:cc:81:3f:80:
8e:75:20:f0:a9:01:70:1c:2c:5c:94:28:b0:64:6e:
98:5f:b5:f9:b6:31:3e:38:3f:cc:38:44:6e:31:b1:
2e:7e:cd:8b:a2:cb:c2:f6:b8:15:e3:a1:f4:a8:b9:
dd:89:0f:58:08:a6:11:0e:e1:2b:db:27:ee:5e:89:
b4:bd:cf:ec:9d:81:4e:f5:1c:03:66:66:0c:b3:1c:
ff:42:d6:3e:24:58:a4:a5:c4:58:7f:98:ad:9a:ee:
25:fa:c4:f6:87:da:78:01:cd:61:ef:a6:04:fd:2b:
2d:0f:01:5e:f2:cf:9f:9b:a9:d5:1a:bb:e9:1e:94:
8d:61:15:3a:37:a4:04:3c:2e:ae:a1:19:58:23:b3:
73:83:db:5b:fe:22:f8:33:ba:fd:cc:1e:d7:bc:0d:
fc:dd:f7:65:ce:d5:3d:3b:38:9d:d5:b8:b9:e7:d8:
9d:08:eb:de:b0:c2:c2:42:e0:a4:aa:3e:83:a9:a8:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:85:DE:A0:D9:43:B0:B3:20:41:98:46:2C:38:BA:25:C7:FF:72
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EDyF3qDZQ7CzIEGYRiw4uiXH_3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.74.0/23
91.242.78.0/23
91.242.84.0/23
91.242.104.0-91.242.127.255
194.114.144.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8e:64:58:3f:84:1e:c3:c6:e3:92:97:8b:08:b7:ab:c1:54:
db:0b:8f:8c:2a:80:5c:23:76:1c:29:9d:77:83:c0:bb:53:dd:
b6:52:b1:bb:c7:c5:d3:97:fa:11:5a:09:14:60:f2:45:20:91:
7e:a2:80:cf:07:bd:cb:59:3c:e0:db:e4:fb:88:de:2f:04:65:
e2:7d:0e:6c:89:a2:49:0f:2e:9b:93:d9:3b:3c:1d:dc:83:a4:
92:6e:c1:8c:5c:75:9d:e2:3d:e4:83:a0:e2:81:68:ca:b4:c6:
00:9b:b2:5f:04:8c:a4:b8:df:2b:06:f6:9b:84:f6:81:bf:b5:
3e:e4:38:c2:68:14:2b:06:d6:99:53:42:19:a2:76:ce:60:17:
4d:0a:93:f0:04:06:3c:e2:02:68:86:a8:14:bc:c2:3c:8a:1a:
91:b6:f0:1e:11:f7:0e:04:af:70:ac:37:1f:6b:6b:fc:fd:be:
c4:62:7d:1f:ab:7d:47:32:d4:35:f0:4d:1c:24:77:96:a0:c9:
e9:30:08:45:50:94:9f:5d:96:10:d4:7b:4b:9c:bd:e1:a7:80:
68:3c:18:c0:83:ed:0f:2e:18:cd:59:ae:e7:81:2b:88:ef:58:
56:2f:1c:6e:bb:6a:60:fd:38:53:c0:bb:96:97:f9:83:a5:4b:
7e:15:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org