Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2ygU-z4gMranMjQ88wDOteI1wfM.roa
File: 2ygU-z4gMranMjQ88wDOteI1wfM.roa (raw, json)
Hash identifier: j4VlVRTuxe+yQ6kYLOza6ELOMYUQRHe26d0KIsRz5Ls=
Subject key identifier: DB:28:14:FB:3E:20:32:B6:A7:32:34:3C:F3:00:CE:B5:E2:35:C1:F3
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0992C3A1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2ygU-z4gMranMjQ88wDOteI1wfM.roa
Signing time: Sat 01 Jan 2022 05:04:05 +0000
ROA not before: Sat 01 Jan 2022 05:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60508
IP address blocks: 176.227.153.0/24 maxlen: 24
178.156.25.0/24 maxlen: 24
89.45.242.0/24 maxlen: 24
84.236.183.0/24 maxlen: 24
88.148.102.0/24 maxlen: 24
84.236.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160613281 (0x992c3a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db2814fb3e2032b6a732343cf300ceb5e235c1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:b8:7f:c0:eb:60:d7:b2:40:0b:75:bb:fa:
5b:12:90:ca:98:0a:be:0f:a6:d9:39:44:64:02:b6:
d5:ab:a6:33:e4:bf:c4:b7:7b:fd:75:a4:b0:03:82:
70:18:21:0f:3e:07:c8:2e:32:f0:a6:64:34:81:ba:
9f:dd:31:fd:ff:5f:75:a0:30:cc:ce:ef:3a:34:83:
44:0c:a7:32:63:83:b4:e8:6a:62:0e:d2:a4:55:55:
fb:ff:ad:33:ce:a6:a3:ca:e9:f7:df:cd:a3:05:f1:
2b:41:de:16:3a:78:fe:e8:42:8e:27:22:be:75:31:
62:a1:d4:41:4a:3d:47:46:0d:e7:aa:74:f3:22:08:
e0:94:b0:99:50:f7:e4:0a:71:ec:64:0e:92:b8:60:
04:1c:84:d3:d9:00:0a:75:ac:65:f5:75:5f:a9:d3:
1b:a3:00:a7:4d:7c:d8:29:2b:f4:ae:c6:75:dc:2c:
23:e4:64:1f:fa:47:cc:6a:52:66:e3:b4:26:b1:56:
cb:38:a9:ad:41:82:fd:cb:44:09:5d:1f:ca:1a:ff:
f3:61:0f:31:37:b1:d8:bc:ba:f9:17:8b:64:91:e4:
a9:b3:82:5b:27:f0:19:67:e2:2a:57:56:02:b9:ff:
07:a9:02:bd:16:21:d1:ab:35:69:81:64:3c:55:6d:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:14:FB:3E:20:32:B6:A7:32:34:3C:F3:00:CE:B5:E2:35:C1:F3
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2ygU-z4gMranMjQ88wDOteI1wfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.183.0/24
84.236.207.0/24
88.148.102.0/24
89.45.242.0/24
176.227.153.0/24
178.156.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:93:a9:aa:57:80:83:73:d5:0f:fb:2a:08:62:8d:ed:ee:9a:
a7:13:2a:68:5e:d6:d4:b0:ac:7a:a0:85:58:37:0b:b8:59:72:
14:e6:60:ad:6d:97:b6:b9:4f:6e:d4:72:bb:3e:d1:97:55:e6:
e7:c4:57:33:19:d5:7c:29:2d:8a:68:18:81:1a:85:7b:95:90:
a7:ae:28:34:63:e7:69:03:a1:2d:41:5b:40:92:c9:ff:3c:5a:
bf:f5:ff:9a:b1:7c:98:6e:f6:4e:54:99:96:b5:f4:b9:44:3f:
2e:88:e1:4f:81:58:ab:e9:25:5d:11:b8:6a:93:b3:c6:e0:75:
b9:46:69:9f:ad:e1:01:94:6d:53:42:28:e9:41:65:55:17:81:
fa:2c:4d:5e:f4:a2:2e:71:0e:7b:59:e2:e6:42:7d:62:e9:6b:
91:5a:a2:93:7a:38:dc:66:0a:ac:18:3d:72:fa:95:ac:0b:13:
df:cb:f2:c0:63:98:de:fa:aa:d2:ad:be:b2:a0:cc:c1:a1:0e:
74:be:3b:2d:9e:b5:25:7a:85:66:32:97:39:1b:6f:6b:17:fd:
02:85:f8:bb:75:2a:1f:83:10:06:2c:71:0f:9e:d0:e2:27:45:
43:f9:43:2d:22:c6:42:81:65:69:f5:34:c2:ca:9e:51:6b:3b:
b2:76:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org