Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/Xe44przmesfaKoFA_oD4h3_CTKA.roa
File: Xe44przmesfaKoFA_oD4h3_CTKA.roa (raw, json)
Hash identifier: Hilm+SRHGaVBb6/mxlCT72KIVPVUwDFOLW1yp6cWOj8=
Subject key identifier: 5D:EE:38:A6:BC:E6:7A:C7:DA:2A:81:40:FE:80:F8:87:7F:C2:4C:A0
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 033DAD24
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/Xe44przmesfaKoFA_oD4h3_CTKA.roa
Signing time: Sat 01 Jan 2022 15:56:20 +0000
ROA not before: Sat 01 Jan 2022 15:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43067
IP address blocks: 91.196.82.0/24 maxlen: 32
91.196.80.0/22 maxlen: 32
91.196.80.0/24 maxlen: 32
91.196.83.0/24 maxlen: 32
91.196.81.0/24 maxlen: 32
91.234.72.0/22 maxlen: 32
91.234.72.0/24 maxlen: 32
91.234.75.0/24 maxlen: 32
91.234.73.0/24 maxlen: 32
91.234.74.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54373668 (0x33dad24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Jan 1 15:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dee38a6bce67ac7da2a8140fe80f8877fc24ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:9c:a2:02:2a:27:9c:e2:de:84:b5:3f:d5:
dd:0f:a8:a4:f7:9c:90:ac:23:0c:8b:22:28:fe:95:
c8:2d:88:cb:6b:3a:f4:b4:ee:69:5d:55:99:49:09:
0b:5f:2f:f9:02:b1:23:75:30:f5:ec:25:90:b5:a1:
f5:1a:89:cd:53:9b:3a:9f:fa:3e:db:eb:50:71:2c:
29:8b:b7:ac:2e:fc:1f:cb:d2:96:98:0d:ea:8b:f6:
88:13:d2:a0:86:1e:32:08:60:33:53:85:02:7d:07:
32:78:9b:9c:88:91:ae:b8:79:14:23:57:0c:45:d8:
08:52:d3:26:a5:05:1d:ac:30:98:a7:a0:03:08:38:
86:07:6b:25:aa:dd:4f:05:f9:16:5e:51:45:90:ea:
8e:78:f9:34:2e:3e:f4:16:3d:de:95:c6:f3:d9:6d:
ab:84:74:01:b1:80:81:bb:da:f2:8c:a0:72:89:85:
3f:d6:49:67:0e:a1:70:d6:ef:5a:a0:a6:0c:8b:fd:
ba:be:44:4e:10:aa:ed:c8:f5:1d:1a:89:d0:0f:78:
b0:39:f1:f4:07:d7:eb:9a:b4:1f:98:09:ab:83:61:
f4:b4:a3:e9:50:7e:32:8c:92:37:2b:fb:7d:62:f4:
87:6b:41:aa:96:41:e5:a8:96:5e:86:b7:90:d9:07:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EE:38:A6:BC:E6:7A:C7:DA:2A:81:40:FE:80:F8:87:7F:C2:4C:A0
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/Xe44przmesfaKoFA_oD4h3_CTKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.80.0/22
91.234.72.0/22
Signature Algorithm: sha256WithRSAEncryption
74:dc:94:fd:6a:05:13:d9:e3:00:83:1c:62:d4:5c:d0:c3:83:
06:59:9c:f5:36:81:9c:6e:89:9b:3c:4b:8f:f8:6c:e0:25:f3:
07:85:66:30:57:a6:d6:55:8d:12:d3:83:f4:91:8a:10:b7:c5:
95:71:b6:af:e1:a2:86:4d:d3:27:ed:88:35:31:73:09:a1:38:
71:ff:49:32:42:b3:20:71:71:6f:9a:dc:37:71:23:d8:c4:9d:
f8:df:c1:25:82:f3:81:07:02:26:3a:98:27:bf:71:50:88:01:
f2:e5:bf:a5:2a:c2:c4:c8:d1:3e:9d:04:42:e7:a1:b6:f6:b8:
db:ba:b6:30:fc:28:21:ca:0a:8a:77:8e:21:27:3a:5c:db:13:
76:1c:1a:2a:29:58:68:03:b4:7a:0a:a5:b4:5b:0b:3b:79:5d:
18:ea:bd:09:13:80:4c:c5:b4:0d:08:6e:79:a3:df:4a:10:e9:
7e:f0:11:b2:d0:78:31:12:77:96:92:fc:de:3c:15:32:aa:bc:
37:de:7b:83:d9:b4:44:1e:f8:e3:44:ca:cd:c4:24:34:11:76:
22:83:93:67:38:ab:49:c2:0f:48:33:93:f8:01:eb:67:9b:99:
8f:b6:94:7a:43:2f:f9:eb:53:2a:8b:fd:34:12:6f:2d:ea:6b:
e9:a8:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org