Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/P4JNj53UjwSeDAsEwKM4yt7ET7s.roa
File: P4JNj53UjwSeDAsEwKM4yt7ET7s.roa (raw, json)
Hash identifier: 82QYfuNDacBd+6zHRIZPQ3t89k/JhsZjvgcAj42EXOE=
Subject key identifier: 3F:82:4D:8F:9D:D4:8F:04:9E:0C:0B:04:C0:A3:38:CA:DE:C4:4F:BB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 08DAAA26
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/P4JNj53UjwSeDAsEwKM4yt7ET7s.roa
Signing time: Sat 01 Jan 2022 07:01:25 +0000
ROA not before: Sat 01 Jan 2022 07:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142578
IP address blocks: 85.92.113.0/24 maxlen: 24
45.134.146.0/23 maxlen: 24
45.93.18.0/23 maxlen: 24
193.107.219.0/24 maxlen: 24
193.107.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148548134 (0x8daaa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 1 07:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f824d8f9dd48f049e0c0b04c0a338cadec44fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:9a:d6:2e:fe:f4:a2:3a:64:c7:d3:31:5b:
2e:87:27:39:f7:95:5a:f4:07:50:f3:e9:51:99:23:
66:4c:bb:a7:8c:8c:e2:00:6c:a0:29:75:3a:7f:54:
0d:1e:56:fa:3f:c0:3b:a7:ca:49:b9:31:77:ce:c7:
7d:e2:77:c5:9d:d3:b2:4e:49:62:25:c8:d1:a5:bd:
98:9e:ff:e2:e7:8d:ce:75:8b:6b:c6:69:7a:13:91:
e3:e7:9a:e4:7d:b1:d5:2b:66:0c:0b:26:8c:3b:c6:
48:b9:1a:d9:b5:82:60:5e:05:a8:37:7b:6f:ea:4e:
fc:12:50:00:50:36:3d:bb:41:3d:b9:e6:ab:de:55:
a3:c6:c7:0c:08:fd:48:f7:92:71:bf:3f:17:c5:af:
e7:3f:f4:3f:a8:0d:42:67:9a:b3:1d:ce:84:2b:20:
e4:00:e7:b9:e8:a1:dc:52:5e:9b:61:83:3e:a0:26:
b1:3d:cd:b9:55:28:25:3f:e8:94:4b:c3:13:e5:2d:
a0:d9:48:12:b5:ba:d7:a2:bd:f8:c3:14:d8:74:23:
7a:29:7d:34:77:58:f0:c8:aa:ba:1e:57:ab:78:e5:
a7:8b:fe:40:f9:e5:12:a2:41:33:fa:43:29:83:f6:
8a:60:25:59:19:d8:f4:dc:16:7a:72:33:96:18:d2:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:82:4D:8F:9D:D4:8F:04:9E:0C:0B:04:C0:A3:38:CA:DE:C4:4F:BB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/P4JNj53UjwSeDAsEwKM4yt7ET7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.18.0/23
45.134.146.0/23
85.92.113.0/24
193.107.217.0/24
193.107.219.0/24
Signature Algorithm: sha256WithRSAEncryption
79:86:4b:e9:07:8b:73:5f:21:99:4e:79:98:a9:04:8f:70:07:
46:72:29:7a:5f:8e:bd:fc:fd:d8:b0:fb:4d:87:87:4e:ee:b0:
a1:f3:a9:51:41:d0:13:31:fd:88:b6:6e:86:47:d3:af:f4:3b:
91:40:f5:d7:c1:9b:be:3c:8a:d5:b2:35:f5:66:47:34:ab:42:
31:cc:a0:c7:9d:3f:3b:ff:89:1e:67:e1:9a:69:0c:79:93:93:
59:8a:e4:1c:cd:8a:0d:48:67:fb:3a:c9:f6:d3:1a:ee:f0:e6:
05:fc:80:e9:db:8d:37:df:79:04:19:36:14:10:a4:56:54:20:
02:e8:2a:a3:27:ab:4d:78:89:ef:b2:4a:e7:10:64:00:9f:fd:
ca:0f:69:a1:8e:d2:60:6f:45:ee:86:b7:fc:7d:b2:3a:38:c0:
28:c3:2a:28:c1:b0:37:5b:a4:cd:75:96:99:5f:d8:f9:96:b3:
6f:a2:e0:0a:3f:42:1f:8a:b7:7e:72:81:9c:93:fe:9a:4b:65:
73:b0:dd:8c:bd:72:71:43:b2:8e:89:57:52:ee:d6:44:a4:c0:
94:e8:9f:af:12:30:7c:ef:ec:9e:80:6e:04:1e:ec:22:c8:07:
33:5e:f5:0c:b0:a7:42:eb:3a:c4:74:e2:52:75:64:06:28:98:
a8:37:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org