Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/CSqbU7yDumlNJGjpn7PHBLx10FM.roa
File: CSqbU7yDumlNJGjpn7PHBLx10FM.roa (raw, json)
Hash identifier: AUBCtdEgg6iGdelG/kjsv5Z0v57pYYERY2g+myIw4dY=
Subject key identifier: 09:2A:9B:53:BC:83:BA:69:4D:24:68:E9:9F:B3:C7:04:BC:75:D0:53
Certificate issuer: /CN=5e254ec3265851428fff33721a85c80b2f1e8fbc
Certificate serial: 39EAE9
Authority key identifier: 5E:25:4E:C3:26:58:51:42:8F:FF:33:72:1A:85:C8:0B:2F:1E:8F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiVOwyZYUUKP_zNyGoXICy8ej7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/CSqbU7yDumlNJGjpn7PHBLx10FM.roa
Signing time: Sat 01 Jan 2022 02:57:56 +0000
ROA not before: Sat 01 Jan 2022 02:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59577
IP address blocks: 91.201.232.0/22 maxlen: 24
195.72.144.0/24 maxlen: 24
195.72.145.0/24 maxlen: 24
195.72.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3795689 (0x39eae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e254ec3265851428fff33721a85c80b2f1e8fbc
Validity
Not Before: Jan 1 02:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=092a9b53bc83ba694d2468e99fb3c704bc75d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:67:37:ec:91:03:d9:f3:cd:82:2c:b1:bd:
d0:4f:9c:05:48:1c:23:f1:90:8a:ae:b7:f3:d3:d3:
d2:34:78:64:8c:94:73:10:7a:5b:83:02:ed:ce:16:
86:07:9a:ed:ec:be:66:0d:e7:4f:56:74:cc:a9:f4:
94:78:de:34:b5:9e:96:4f:4c:b5:4d:1e:52:54:1b:
57:03:be:d2:7a:3f:dc:4a:a4:68:1f:27:a5:a0:5a:
c9:b8:77:2c:3c:b7:e9:aa:37:00:49:62:4d:70:e1:
7e:b5:e1:ba:ca:0a:45:66:0b:7c:ef:7e:da:4f:8a:
43:68:80:a9:5b:99:af:5e:c7:2c:52:56:89:d9:c3:
27:48:8e:2d:ed:3e:e0:c1:0e:ad:c8:af:6f:7e:dc:
c6:d4:64:78:fa:6b:ae:01:b6:0f:8c:1c:76:e8:3c:
37:e6:4a:72:f6:a1:9e:74:d0:af:1f:52:66:3d:c9:
ca:76:2f:89:62:76:71:92:43:6f:8a:a9:47:e5:92:
6c:38:6c:65:cc:04:58:42:f5:60:5e:22:97:cf:56:
ff:97:2b:ba:ba:4f:62:4e:6a:d1:04:9d:f9:d5:08:
41:69:6e:72:91:b1:62:77:75:36:93:15:9b:34:54:
a8:86:e1:2b:09:d4:d8:76:94:09:c7:f9:36:0b:46:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:9B:53:BC:83:BA:69:4D:24:68:E9:9F:B3:C7:04:BC:75:D0:53
X509v3 Authority Key Identifier:
keyid:5E:25:4E:C3:26:58:51:42:8F:FF:33:72:1A:85:C8:0B:2F:1E:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiVOwyZYUUKP_zNyGoXICy8ej7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/CSqbU7yDumlNJGjpn7PHBLx10FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.232.0/22
195.72.144.0-195.72.146.255
Signature Algorithm: sha256WithRSAEncryption
80:e1:00:b9:25:fa:f5:12:c1:a2:1c:56:aa:e0:d9:dc:77:e7:
c6:bd:e3:7f:0c:c8:2e:7d:82:d7:49:e5:04:83:da:09:91:13:
a1:1b:24:d3:6a:6d:14:da:97:ae:f0:f8:e2:e0:d4:9a:f3:07:
c6:89:00:12:e3:2c:c5:03:52:d2:83:22:cd:5c:e8:b6:d1:21:
82:98:38:d8:5d:c2:ea:b2:2f:23:a1:43:71:8d:ec:66:5f:b1:
ab:da:04:30:06:69:03:83:b3:a8:d3:ad:78:04:64:dd:cd:ad:
7c:93:e2:c9:2c:23:fa:05:03:c7:1b:87:5c:61:8e:7f:71:7e:
33:4d:74:59:50:32:e3:58:6a:ee:94:37:82:ed:26:a2:99:58:
7f:9a:87:fe:01:f9:a1:4e:e7:49:06:70:f6:01:1e:f6:0d:34:
98:b6:7c:51:a6:ac:6a:d1:5b:ca:66:6a:cb:1c:a4:db:13:4e:
cd:be:2a:79:18:06:28:f6:65:25:42:e1:92:5a:55:90:b7:9f:
55:df:60:21:2d:65:fe:e7:9e:a4:df:7e:85:2f:18:e8:b7:65:
b0:ca:81:8a:9c:94:24:dd:66:a3:63:e4:2f:f0:44:10:a3:28:
1a:c7:1d:19:6e:a6:dc:38:a9:dc:32:3b:95:32:72:08:49:03:
32:cd:41:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org