Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/4Q3nKqs5S2vAcBWaW0-U-kxawgc.roa
File: 4Q3nKqs5S2vAcBWaW0-U-kxawgc.roa (raw, json)
Hash identifier: 5oOkryddLvw3xWbr9RfEcSkLiAHLIhzx5UkDwbHClgg=
Subject key identifier: E1:0D:E7:2A:AB:39:4B:6B:C0:70:15:9A:5B:4F:94:FA:4C:5A:C2:07
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 05967D3B
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/4Q3nKqs5S2vAcBWaW0-U-kxawgc.roa
Signing time: Sat 01 Jan 2022 04:57:36 +0000
ROA not before: Sat 01 Jan 2022 04:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47267
IP address blocks: 91.199.17.0/24 maxlen: 24
185.182.160.0/22 maxlen: 22
185.182.160.0/24 maxlen: 24
185.182.161.0/24 maxlen: 24
185.182.162.0/24 maxlen: 24
185.182.163.0/24 maxlen: 24
2a0f:eb80:1::/48 maxlen: 48
2001:67c:69c::/48 maxlen: 48
2a0f:eb80:a::/48 maxlen: 48
2a0f:eb80::/32 maxlen: 32
2a0f:eb80::/48 maxlen: 48
2a0f:eb80:f::/48 maxlen: 48
2a0f:eb80::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93748539 (0x5967d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Jan 1 04:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e10de72aab394b6bc070159a5b4f94fa4c5ac207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:26:3c:80:59:07:a1:35:f5:39:4a:25:d4:
8f:06:d9:6f:ce:83:ff:61:31:86:a9:84:00:ab:3d:
6b:f6:e3:2a:9e:9a:f3:b6:89:9d:6f:68:92:47:cc:
ec:5e:1b:6f:61:34:66:95:fb:13:9e:d1:20:ab:99:
e2:c1:04:54:1e:6b:0c:02:ee:ca:8d:92:e0:48:1e:
1a:cd:be:ba:08:bc:1e:3b:17:3e:fc:36:19:43:d6:
96:e5:da:75:f9:7f:91:8e:0b:08:ea:2b:45:f2:c4:
d3:51:c3:9d:6c:48:10:02:be:f8:31:94:29:6d:e1:
43:c3:46:74:41:2f:02:38:12:e6:82:ae:1e:73:1c:
d3:42:64:d4:e9:3e:19:3c:b0:29:eb:10:4f:91:d3:
0e:9c:a2:01:b3:bf:c4:c4:5b:04:af:d6:b1:27:94:
ef:b9:e5:29:1d:9c:d4:1a:39:9b:b2:53:2f:99:82:
3f:d6:2b:c2:20:7d:c5:35:4c:47:6f:e2:fa:c3:5f:
5e:ed:49:78:35:fd:85:93:13:2d:5a:bd:4f:f8:07:
93:f5:17:c5:44:f0:40:5c:0f:22:60:e8:ed:a2:56:
59:5a:dc:bd:b8:49:d1:5f:1a:73:4b:f6:4c:b8:89:
36:9a:d5:23:f2:90:f3:5e:56:8d:fd:ba:53:ce:0b:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0D:E7:2A:AB:39:4B:6B:C0:70:15:9A:5B:4F:94:FA:4C:5A:C2:07
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/4Q3nKqs5S2vAcBWaW0-U-kxawgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.17.0/24
185.182.160.0/22
IPv6:
2001:67c:69c::/48
2a0f:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
86:f5:f8:f5:f8:95:54:32:80:a5:63:ac:95:bf:a7:2a:d3:09:
a4:aa:ed:a4:06:a1:b2:83:70:a1:08:bb:78:fc:ec:19:38:72:
d1:a2:c1:c2:e9:fb:1e:76:98:30:3e:44:ed:33:0d:66:cc:69:
c8:cb:23:cd:1c:82:85:e5:d8:0c:15:e7:f7:7a:fe:3e:35:d3:
04:88:a3:7c:18:0f:c3:0f:d5:f4:fb:49:45:0b:e7:32:45:67:
85:ea:14:47:28:e5:28:39:0e:ba:0f:d7:ea:d0:40:d0:d8:5f:
5b:1c:3a:ca:36:1f:b1:e3:3c:fd:5e:21:a0:38:9f:e5:36:20:
8b:da:69:80:7c:9f:3d:aa:65:3c:46:a1:8a:fa:b8:e7:37:b4:
50:90:f0:7b:24:53:c1:3a:2e:9f:90:04:87:c8:2c:6f:c8:e3:
95:b4:01:db:ba:3c:ec:6e:88:c2:34:a2:41:2e:78:0c:92:64:
36:03:fb:b6:f1:f2:1d:82:3d:ce:8f:cb:32:ef:26:9d:75:e4:
d2:04:d3:13:fb:90:04:74:68:da:2e:05:de:a3:ca:d7:46:ac:
d2:00:03:ac:05:1c:fb:f6:97:4c:3d:51:b2:fc:13:9a:1a:f9:
51:cb:8d:d7:1e:8b:ec:1f:83:99:bb:de:5e:98:05:d4:94:04:
96:e1:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org