Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/siUmiihQjqvPoESp6wabHk_doPI.roa
File: siUmiihQjqvPoESp6wabHk_doPI.roa (raw, json)
Hash identifier: L0CjeE+0lGl7kWGjjMvCbKYq0RiebHw1Zj2+qhFPWlo=
Subject key identifier: B2:25:26:8A:28:50:8E:AB:CF:A0:44:A9:EB:06:9B:1E:4F:DD:A0:F2
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0224E7F8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/siUmiihQjqvPoESp6wabHk_doPI.roa
Signing time: Sat 22 Jan 2022 10:08:53 +0000
ROA not before: Sat 22 Jan 2022 10:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211297
IP address blocks: 217.67.64.0/20 maxlen: 24
91.200.212.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
85.255.176.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35973112 (0x224e7f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 22 10:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b225268a28508eabcfa044a9eb069b1e4fdda0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:30:51:76:a8:97:a9:3b:38:91:10:c7:4d:
45:82:50:15:85:54:2e:86:83:58:61:a2:65:a3:ca:
21:30:bb:28:8f:d2:8f:16:f5:96:dc:e2:64:69:1a:
aa:05:db:15:ed:53:22:07:ed:80:97:54:c3:ec:00:
af:e1:5f:09:f4:6e:e4:d8:59:1a:77:24:90:51:b2:
fa:22:96:6b:3a:7d:2d:0f:1e:6a:3f:4f:8c:de:89:
54:d5:c3:be:51:a0:dc:a4:1f:6a:06:ff:e7:04:6f:
44:d6:d7:ab:1f:d6:25:8e:a7:b3:de:cb:ac:b5:64:
4f:ed:f7:08:62:38:92:91:fb:98:7d:d1:ab:17:bc:
87:e8:61:d5:c4:be:90:94:29:82:db:36:3b:81:d3:
5d:94:da:01:25:c0:7f:90:c6:b5:84:be:4d:49:f8:
e9:ac:f5:16:12:0b:87:0d:0d:f8:e2:3e:0e:8e:41:
9a:7a:1e:37:6d:48:82:1e:c7:3c:4c:85:b5:f0:11:
c6:a3:a8:43:c3:5d:39:42:e8:bb:5a:4f:e6:6c:6d:
5c:cb:e4:5e:c0:d0:76:e8:e3:a8:c0:fb:ff:b9:47:
ed:58:2e:9b:c1:8c:4a:11:7b:f1:16:54:0c:3d:20:
0f:8b:8a:2f:97:bf:8f:50:f5:64:23:c8:70:30:3c:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:26:8A:28:50:8E:AB:CF:A0:44:A9:EB:06:9B:1E:4F:DD:A0:F2
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/siUmiihQjqvPoESp6wabHk_doPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.176.0/24
85.255.176.0/21
91.200.212.0/22
217.67.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:95:95:de:ca:45:54:c3:e4:28:72:57:8a:ba:99:79:ca:d9:
de:61:41:44:2c:8e:d9:f2:c0:a7:ea:4e:b8:66:f5:bd:49:9e:
95:5f:38:de:22:85:ba:da:ab:f9:2a:ff:90:8b:61:7f:c8:ce:
9f:0a:f5:61:91:d4:ba:80:80:f8:33:b1:25:15:e2:0f:bc:12:
f2:c4:d2:b9:06:7d:d7:68:cb:a2:34:b3:85:59:9a:d0:49:ec:
1c:91:52:6b:b9:50:39:cf:94:02:c1:9d:c5:0f:77:c7:d3:fc:
bb:82:8a:62:5a:4d:a0:ff:1a:48:54:b8:b7:9b:27:65:de:1f:
39:b2:3b:64:34:f3:8f:f6:80:b4:72:97:87:4c:b0:28:f5:79:
d5:24:a4:9e:4b:eb:71:5e:8e:8d:b5:5a:7c:7d:b0:4b:a6:54:
a3:10:a3:04:89:7c:1c:8f:c7:5c:47:e5:e8:85:c9:f2:6b:98:
d5:ed:96:5e:d8:49:c8:b9:fa:49:d0:63:45:5e:85:ab:27:f4:
11:74:f1:0e:74:27:76:5b:a8:e3:68:94:b0:65:73:16:cd:7f:
c8:44:48:5f:7a:c3:04:3f:2d:cb:8c:29:a4:61:43:9e:42:73:
ee:69:fb:4b:d3:b5:ed:3d:b7:f3:3c:2f:5f:13:e5:5b:5b:40:
1d:a9:9f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org