Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/M9AKX9HxT2wJkq0sxX_uSHcRXk0.roa
File: M9AKX9HxT2wJkq0sxX_uSHcRXk0.roa (raw, json)
Hash identifier: /vOYbPtfZTf2klw9sjJoboc2XamKVdv5qVRjAQduDmg=
Subject key identifier: 33:D0:0A:5F:D1:F1:4F:6C:09:92:AD:2C:C5:7F:EE:48:77:11:5E:4D
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01843181A2FFB389A54E63BD91D16542EDBC
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/M9AKX9HxT2wJkq0sxX_uSHcRXk0.roa
Signing time: Tue 01 Nov 2022 04:44:50 +0000
ROA not before: Tue 01 Nov 2022 04:44:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 188.191.98.0/24 maxlen: 24
188.191.96.0/24 maxlen: 24
188.191.97.0/24 maxlen: 24
188.191.102.0/24 maxlen: 24
188.191.103.0/24 maxlen: 24
188.191.100.0/24 maxlen: 24
188.191.101.0/24 maxlen: 24
188.191.109.0/24 maxlen: 24
188.191.110.0/24 maxlen: 24
91.225.226.0/24 maxlen: 24
91.225.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:31:81:a2:ff:b3:89:a5:4e:63:bd:91:d1:65:42:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Nov 1 04:44:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33d00a5fd1f14f6c0992ad2cc57fee4877115e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:dc:6e:70:81:0b:44:2c:73:32:ed:31:21:
89:e3:5d:b0:22:b3:2f:8c:9a:e2:18:f4:ad:53:6d:
fb:90:69:af:b8:0d:78:9e:6d:e3:cd:7a:41:9a:94:
bc:6c:d1:35:37:b5:64:40:8c:c9:c9:d0:0b:f6:55:
db:31:b3:4c:3f:58:52:76:a3:c9:83:07:56:78:bd:
9e:4d:39:58:41:10:2b:db:30:81:2f:22:d3:2c:6e:
59:d6:ff:0f:19:8a:c5:1e:bb:de:66:09:bc:05:df:
4b:a9:7f:c9:9a:49:dd:74:4c:01:48:bd:29:42:c1:
b0:48:3b:4c:de:4b:f7:7d:aa:8f:63:0e:85:83:1e:
fb:b1:86:79:c8:fc:b2:0d:38:ca:82:bc:c4:b6:cc:
6e:a3:61:a3:68:bb:d3:b6:fa:c3:cd:ac:ef:35:45:
15:d8:f8:e9:20:9c:09:c1:1f:0f:f4:45:32:0a:fb:
1d:c3:3a:62:e0:47:44:5a:62:d6:7e:f2:5a:c5:d7:
3c:73:b3:bf:09:44:ff:0b:be:82:8a:6d:2d:ee:0b:
af:7c:fc:45:b2:ad:dd:97:2c:6f:51:a4:5e:82:2c:
0a:26:2d:3b:f5:bf:e6:0d:52:9b:a1:4b:29:3f:5f:
14:9b:65:74:67:e5:2e:88:e9:8d:7b:5f:b5:85:5d:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:0A:5F:D1:F1:4F:6C:09:92:AD:2C:C5:7F:EE:48:77:11:5E:4D
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/M9AKX9HxT2wJkq0sxX_uSHcRXk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0-91.225.226.255
188.191.96.0-188.191.98.255
188.191.100.0/22
188.191.109.0-188.191.110.255
Signature Algorithm: sha256WithRSAEncryption
2b:58:49:7a:94:c3:fd:02:60:6e:a1:11:55:e1:78:bd:61:fa:
99:ae:40:80:ea:58:af:fb:1e:24:7a:a8:33:50:52:fa:eb:80:
3a:aa:4d:86:55:1a:d2:77:65:c6:c6:30:3d:ba:55:0d:d0:85:
d2:dc:24:34:e6:da:31:1e:9c:b9:a4:0b:25:bf:32:ea:6f:d2:
b3:bf:9f:64:4e:7c:52:f2:26:a9:e9:63:89:3e:f0:d1:44:f9:
d5:7b:22:36:7e:56:80:bc:65:4a:eb:f3:99:e8:cd:f0:4b:a2:
35:4b:ae:1b:64:78:c7:e8:af:6b:07:3c:59:dc:a6:e2:b3:5b:
36:0b:d1:b9:a4:94:3f:29:87:8c:79:93:15:bc:fd:57:bb:d6:
b9:d3:85:c9:08:61:7b:cb:af:cd:99:bd:6a:86:03:4a:c4:a7:
c2:9e:a4:e8:bb:bb:fb:2a:83:7a:67:cd:a7:6b:ea:6d:d7:2f:
23:1f:72:d8:f3:a6:7a:d0:d1:4b:23:28:e0:a6:40:cf:db:96:
d5:48:6b:4c:93:df:d6:ff:42:bf:69:54:f2:2d:31:61:64:02:
55:d0:42:e2:78:ce:5c:c9:8d:f3:db:32:1d:9c:85:dc:cb:dd:
d9:ed:34:50:8d:5c:d5:9b:cd:8d:f3:1a:cd:9f:8a:0d:6b:52:
9e:85:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org