Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-OyyXWA5_plSwAjJrk8LbPofbgM.roa
File: 1-OyyXWA5_plSwAjJrk8LbPofbgM.roa (raw, json)
Hash identifier: iQTRXJagePL/8VBXDap8qFvVrl1Cw02xghP8iwfDoL8=
Subject key identifier: F8:EC:B2:5D:60:39:FE:99:52:C0:08:C9:AE:4F:0B:6C:FA:1F:6E:03
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0B2B1D8A
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-OyyXWA5_plSwAjJrk8LbPofbgM.roa
Signing time: Thu 03 Feb 2022 12:46:54 +0000
ROA not before: Thu 03 Feb 2022 12:46:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47952
IP address blocks: 185.185.235.0/24 maxlen: 24
91.106.219.0/24 maxlen: 24
91.106.218.0/24 maxlen: 24
91.106.217.0/24 maxlen: 24
91.106.216.0/24 maxlen: 24
193.35.206.0/24 maxlen: 24
193.35.205.0/24 maxlen: 24
193.35.204.0/24 maxlen: 24
193.35.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187374986 (0xb2b1d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 3 12:46:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8ecb25d6039fe9952c008c9ae4f0b6cfa1f6e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:c3:6a:0a:0f:22:7a:72:32:d5:e0:8f:2f:
83:b5:8b:c7:45:e9:4a:61:f1:46:c0:25:4a:4d:41:
f0:60:fc:9a:4e:a6:0d:92:4f:06:06:f7:6b:a0:bd:
6f:29:ca:a6:c0:14:e8:c6:da:70:42:a0:7c:29:66:
25:c0:fc:63:16:59:3a:24:f4:b5:92:a9:7d:1a:13:
b4:54:6c:79:94:fb:90:49:18:95:ba:7c:53:b9:83:
ac:2d:eb:78:2e:d1:b0:b8:cb:85:dd:c1:4f:82:94:
76:55:d6:11:08:b5:f7:8c:60:45:6b:25:3a:22:c5:
73:46:25:4e:25:e0:e5:f9:84:a5:af:dd:59:c0:24:
72:44:55:fd:b3:69:94:10:f8:e3:c8:cd:4a:7a:05:
d0:7b:af:17:19:95:ca:70:dd:d6:d5:69:0b:31:6d:
e3:a4:32:8a:e0:9f:76:66:be:8a:41:ba:db:05:cd:
0e:a6:0f:2f:d0:86:49:a5:8b:0d:15:1a:c3:f5:5b:
8a:df:4a:1d:43:e2:89:f7:df:59:5a:7e:a0:a7:76:
29:36:63:ff:61:0b:6c:4e:9a:a3:f5:ee:fc:f6:f2:
3c:7d:87:00:e7:a9:ac:98:c5:40:70:ed:f9:10:f8:
ad:28:75:3b:43:4e:64:3a:be:b2:e6:d9:ad:06:97:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:B2:5D:60:39:FE:99:52:C0:08:C9:AE:4F:0B:6C:FA:1F:6E:03
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-OyyXWA5_plSwAjJrk8LbPofbgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.216.0/22
185.185.235.0/24
193.35.204.0/22
Signature Algorithm: sha256WithRSAEncryption
49:55:ac:72:d9:3c:14:65:2d:97:e3:86:58:2f:e3:35:8d:0a:
df:7a:f4:c8:76:f8:ab:ad:0b:91:7f:8d:fd:16:bf:f4:93:d2:
a9:70:cb:7b:b9:b3:5e:a2:57:d0:25:ba:95:0c:6c:b5:cd:cb:
76:00:62:0b:15:53:42:8c:ee:bb:0a:36:4f:4d:b0:61:d6:e3:
0e:cf:6a:88:7e:c7:00:27:16:77:c2:ab:06:0e:03:7e:02:a0:
31:ef:34:d5:27:a3:82:db:63:dd:78:4d:6f:e6:47:d5:21:37:
f7:f8:54:0a:bc:fd:c6:cc:bd:f0:b3:77:11:c1:15:d1:7d:5b:
d5:73:4d:95:ee:2f:a8:a3:14:1f:ee:a3:e0:dd:5c:84:25:3f:
10:5f:d6:c9:ee:f9:42:f7:d0:dd:dd:d4:47:a3:56:30:89:e4:
75:69:53:09:4b:ba:0e:aa:ae:74:3e:8b:d2:d9:8a:16:ad:24:
d1:01:d8:ab:7c:f5:d0:b7:e2:b6:cb:a0:f4:8f:9a:78:fe:f4:
e4:7b:82:f1:77:4e:8d:7f:dd:8a:f3:d6:65:ac:03:2a:d6:5c:
c1:80:d6:1c:61:6d:3e:5d:d5:a8:e6:e9:a6:b4:8c:92:86:b3:
f0:75:32:54:83:a8:08:5d:e8:90:ff:d1:ec:7f:cf:df:ff:04:
8d:b1:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org