Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Me6ZR0GX2XSeacHtAz2rOTlJldU.roa
File: Me6ZR0GX2XSeacHtAz2rOTlJldU.roa (raw, json)
Hash identifier: pE/61EGx/6yrYRTXo4zvHaLfwhscJgAdwjM+t3rVZ8s=
Subject key identifier: 31:EE:99:47:41:97:D9:74:9E:69:C1:ED:03:3D:AB:39:39:49:95:D5
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BAAA9AA
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Me6ZR0GX2XSeacHtAz2rOTlJldU.roa
Signing time: Sat 01 Jan 2022 05:03:48 +0000
ROA not before: Sat 01 Jan 2022 05:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211143
IP address blocks: 178.213.180.0/22 maxlen: 22
91.245.184.0/21 maxlen: 21
109.207.131.0/24 maxlen: 24
77.36.58.0/23 maxlen: 23
77.36.66.0/23 maxlen: 23
93.120.34.0/23 maxlen: 23
93.120.36.0/22 maxlen: 22
93.120.40.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464169386 (0x1baaa9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31ee99474197d9749e69c1ed033dab39394995d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:a5:3e:c2:fc:0e:97:1f:84:ab:6e:96:e4:
9d:cf:66:5e:69:6d:6a:ce:08:2e:e8:6d:55:f0:31:
12:08:d2:be:44:de:43:1c:b8:7f:db:31:16:b2:c7:
db:b2:97:4d:12:0d:33:47:8e:df:03:36:23:d4:d0:
7d:8b:75:f2:f4:79:52:1e:fc:04:49:b6:5f:fd:fd:
10:54:80:bd:86:f2:62:a9:ea:bf:83:7d:3d:ee:59:
19:d4:85:41:d7:0b:2a:46:77:c6:cc:bb:c1:f5:c7:
3a:67:4f:73:e4:9a:ea:df:de:44:57:24:e7:ce:9b:
f4:03:24:87:56:76:79:c5:d8:ae:e4:d3:91:a3:fb:
1e:b0:76:be:55:73:65:59:ed:2f:f6:63:91:57:c4:
9f:6a:ea:4e:b3:d0:ca:c9:30:b7:32:d8:9b:48:42:
70:e1:b4:54:83:cd:fc:90:2c:30:64:db:3b:d7:1f:
1d:5f:ee:8c:c4:ab:e1:71:84:0f:f8:d2:82:d0:7f:
7e:7a:b3:dc:39:f5:1c:bb:bc:8e:6f:17:61:4f:d0:
07:59:9b:47:78:d5:68:36:2a:91:0d:7d:98:62:84:
9a:27:7d:3e:c2:32:f8:4a:38:85:f5:a2:05:5f:18:
33:98:d9:ef:cd:d5:c8:a8:33:26:e8:66:0a:f4:05:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EE:99:47:41:97:D9:74:9E:69:C1:ED:03:3D:AB:39:39:49:95:D5
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Me6ZR0GX2XSeacHtAz2rOTlJldU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.58.0/23
77.36.66.0/23
91.245.184.0/21
93.120.34.0-93.120.41.255
109.207.131.0/24
178.213.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:1a:83:ee:e8:d1:5c:2c:90:8d:f3:b3:01:cc:7d:6c:70:45:
fa:3c:b6:48:dc:f9:fd:0b:12:40:74:20:ef:d2:1b:4c:65:91:
73:32:86:2b:b9:78:cb:29:1b:ab:cc:9e:c3:25:c8:ec:57:fc:
3d:f1:1c:11:01:af:65:3c:9f:5a:2c:fa:3f:88:33:96:81:3a:
c2:3b:c3:8f:93:b4:84:db:0d:3e:94:a7:e3:4e:a6:f5:28:8f:
4e:06:a8:e7:30:79:4a:6d:62:2e:eb:0c:24:be:97:8d:f3:3a:
93:83:00:02:0c:69:3b:ae:10:bc:22:d1:72:b8:e1:0e:68:35:
5f:be:12:73:5b:2f:aa:80:b7:73:45:8a:eb:3a:47:3f:92:36:
ff:12:94:49:8d:1e:b3:e3:4b:b7:ff:63:60:64:aa:1e:2f:63:
b8:86:09:fa:60:02:43:f0:3d:a9:e4:3a:d7:d1:96:55:82:bc:
c6:ea:6f:2a:26:b4:60:2f:12:a9:b5:ad:c4:a9:45:e0:a5:14:
21:b0:6d:37:61:5c:fe:b1:ac:43:3d:30:ce:2b:b3:94:18:0d:
67:13:7b:4c:b0:42:19:c7:be:c1:f9:cc:1a:60:94:76:44:5c:
cf:bc:ea:e4:af:62:b9:7b:16:4b:46:3e:5e:9c:5d:cc:70:28:
96:8b:d6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org