Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/kiEdKOeftxkh8cDcPSUaaSzIWKA.roa
File: kiEdKOeftxkh8cDcPSUaaSzIWKA.roa (raw, json)
Hash identifier: FsTGffDPRat/cyDO50m5nGYXwrB1rrgoLM4L2rdfEoM=
Subject key identifier: 92:21:1D:28:E7:9F:B7:19:21:F1:C0:DC:3D:25:1A:69:2C:C8:58:A0
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0257AD50
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/kiEdKOeftxkh8cDcPSUaaSzIWKA.roa
Signing time: Wed 09 Feb 2022 11:36:47 +0000
ROA not before: Wed 09 Feb 2022 11:36:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49318
IP address blocks: 188.93.176.0/21 maxlen: 21
46.28.250.0/24 maxlen: 24
46.28.249.0/24 maxlen: 24
46.28.252.0/24 maxlen: 24
46.28.251.0/24 maxlen: 24
46.28.253.0/24 maxlen: 24
46.28.248.0/24 maxlen: 24
46.28.254.0/24 maxlen: 24
46.28.255.0/24 maxlen: 24
194.110.124.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
194.110.130.0/23 maxlen: 23
194.110.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39300432 (0x257ad50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Feb 9 11:36:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92211d28e79fb71921f1c0dc3d251a692cc858a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:7a:0c:93:ce:f6:0c:3f:6f:53:28:ae:42:
f2:6c:a4:0c:f3:e6:43:6e:f5:99:e3:33:a6:27:75:
d4:58:a5:0e:1a:ac:61:c9:24:46:aa:8d:5e:79:bd:
cb:10:a8:35:4a:07:71:32:9e:40:67:b7:7f:4d:6c:
c2:19:7b:66:73:15:0b:43:6e:8d:17:cb:3e:06:7b:
98:25:50:17:1b:d7:8b:a8:24:0b:99:7a:82:71:45:
49:23:de:d1:37:12:c4:eb:24:64:8b:f5:16:7a:d6:
41:da:9c:34:c6:41:fc:83:c1:35:90:5b:04:7b:31:
7a:ef:c0:f7:03:f8:06:e0:4d:7d:31:30:d2:5b:17:
99:7d:6d:93:15:e7:18:ba:59:ed:9e:3c:25:94:01:
bf:9b:05:63:c7:6b:16:73:db:fb:ad:51:f5:2e:0f:
10:cf:2a:ca:3d:5b:04:9a:08:84:2d:9f:02:8b:dc:
59:91:07:b0:d9:41:2a:d7:75:32:86:f7:2d:72:0d:
1c:9a:a7:5c:b7:2d:be:97:a1:76:09:f7:b0:92:16:
59:61:c8:62:6a:41:da:0e:fc:35:98:d6:82:46:da:
3d:30:9a:fd:25:01:c9:35:c8:13:23:09:0a:94:62:
7a:17:60:20:2a:ce:33:90:d6:83:1a:56:00:17:4e:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:1D:28:E7:9F:B7:19:21:F1:C0:DC:3D:25:1A:69:2C:C8:58:A0
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/kiEdKOeftxkh8cDcPSUaaSzIWKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.248.0/21
188.93.176.0/21
194.110.124.0/24
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:7f:ca:57:63:e1:f2:38:23:c8:e5:6b:71:30:af:c8:93:ba:
11:d4:3e:3d:58:1c:e2:aa:f1:23:d4:cc:10:ec:11:0c:6e:43:
88:20:52:0e:2b:51:58:f3:22:24:75:76:b1:9c:98:fb:12:6d:
63:75:43:84:86:ad:cf:5a:0b:3b:68:93:e6:09:ab:83:ef:a8:
2a:d9:98:1d:83:3f:be:d6:77:f0:d1:e4:79:bf:33:b2:92:8f:
08:61:67:11:bc:ed:52:ce:db:cf:30:15:30:25:56:ca:61:8e:
72:d6:47:3f:48:34:b8:ad:31:7e:c9:0d:91:18:dc:85:8a:6e:
13:ba:8c:3e:75:12:c8:8a:ac:46:d5:a5:64:ac:bd:5d:49:2e:
a2:29:36:33:de:80:f2:07:ce:93:97:58:4e:dd:28:1b:a6:e6:
4b:22:e5:7f:f1:1e:75:0a:37:1e:55:ad:ec:9a:e6:a1:d5:31:
28:e0:57:b6:f1:98:da:ad:59:f0:8b:47:75:b2:45:87:c9:d0:
51:ac:8c:a0:15:8f:17:f1:e4:27:eb:6f:c1:47:b2:05:d7:3d:
22:43:83:b4:de:80:cc:58:5a:df:f9:82:92:fd:ec:06:59:52:
ef:94:c4:09:08:8a:2a:24:db:38:1d:77:05:be:4c:0d:1f:51:
a1:dd:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org