Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/t19NYorT9WV4Bkzs7HZ5-72Ax98.roa
File: t19NYorT9WV4Bkzs7HZ5-72Ax98.roa (raw, json)
Hash identifier: pa4IAch9nEfnXH2DigTj/jsTMuiQXqmfEWN1I006M88=
Subject key identifier: B7:5F:4D:62:8A:D3:F5:65:78:06:4C:EC:EC:76:79:FB:BD:80:C7:DF
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0C3A54D4
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/t19NYorT9WV4Bkzs7HZ5-72Ax98.roa
Signing time: Wed 25 May 2022 06:14:14 +0000
ROA not before: Wed 25 May 2022 06:14:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 185.254.28.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205149396 (0xc3a54d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 25 06:14:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b75f4d628ad3f56578064cecec7679fbbd80c7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5a:72:2c:bc:67:c5:58:94:91:77:7a:5e:12:
b1:51:f1:b8:81:c3:c2:75:69:64:86:0a:4c:3d:c3:
2f:a7:aa:34:57:35:ac:4f:bb:5e:bd:37:29:d9:ae:
3c:7a:a0:47:8f:55:d9:5b:e5:06:61:56:95:2e:26:
8d:3a:56:a9:cf:65:40:28:bb:98:4e:07:37:00:d8:
23:e4:f8:4c:91:e0:82:6b:6a:29:89:aa:b6:80:0e:
a0:34:ea:4a:97:26:a7:d3:cb:8c:95:bc:d3:92:d2:
78:47:a0:54:d7:f3:80:92:44:8a:76:0e:47:f3:c0:
2e:18:cf:3c:40:57:ab:61:c9:59:f6:36:9d:33:23:
48:e6:63:48:40:d0:29:00:9d:d4:97:f8:f5:8c:9c:
92:07:34:d2:03:3d:f6:bb:83:d3:70:10:81:f7:a8:
ba:f5:39:36:30:8b:99:c2:a5:28:13:33:38:70:c9:
25:39:45:14:42:c5:3a:0b:7f:0d:48:dd:68:86:80:
59:fc:9f:22:14:54:50:f9:0c:8a:73:63:b9:cc:39:
80:db:50:aa:81:fc:f4:50:9b:fa:ae:e6:3d:e5:74:
ec:35:fb:37:50:2d:a3:76:7b:fb:cf:c6:04:e1:b7:
f6:de:ef:80:7e:09:5b:c2:c3:6e:41:52:f6:a6:50:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:4D:62:8A:D3:F5:65:78:06:4C:EC:EC:76:79:FB:BD:80:C7:DF
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/t19NYorT9WV4Bkzs7HZ5-72Ax98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0-109.236.50.255
185.254.28.0/24
193.160.141.0/24
193.160.143.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ee:18:19:ff:a3:3a:57:6e:13:a9:ef:d6:92:b5:bb:70:5a:
4b:c8:d4:de:9a:67:ef:6e:61:4c:f8:0c:5d:05:69:fd:a0:de:
2b:57:e9:5d:ea:86:a3:16:0f:aa:30:d0:05:f4:97:4e:f2:16:
ac:ca:37:83:7b:e2:1f:de:a2:81:07:c3:02:05:7c:ad:f1:37:
89:77:f9:d0:d5:55:37:2e:e2:7a:db:ec:5e:9d:80:6a:7d:06:
3c:17:08:a0:cd:bc:66:dc:ee:27:89:91:e6:46:e9:b9:06:cf:
14:5c:d4:3b:0c:f5:72:15:19:12:4c:03:a2:5f:0d:2b:2d:14:
65:44:52:6e:28:6f:5e:5e:19:cc:00:ac:b2:48:9d:53:49:20:
6b:f7:39:9e:e0:1f:2e:7d:9b:f8:04:99:48:1e:df:dc:3a:c8:
81:d2:fe:d0:91:66:c2:c7:3f:50:66:68:d2:ec:c6:0b:a2:b4:
7a:96:ec:89:6a:06:d4:68:74:bc:b9:cd:c0:f3:2c:cc:f8:23:
66:68:1b:88:82:56:2f:98:67:70:0b:1f:a2:3d:76:80:be:76:
84:fd:fe:6f:0e:38:61:e0:9f:ec:bd:43:37:8d:76:0d:9e:e5:
57:b7:c7:2d:3b:b7:d2:f8:30:a6:17:11:27:21:58:49:c3:f7:
f1:6d:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org