Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/TOwcuX1uYCis51TR8CS2qPm38OE.roa
File: TOwcuX1uYCis51TR8CS2qPm38OE.roa (raw, json)
Hash identifier: sTZAqapuaX6Tx7NFVe8bnNgt8a5MadRmkPvq0KQT/cE=
Subject key identifier: 4C:EC:1C:B9:7D:6E:60:28:AC:E7:54:D1:F0:24:B6:A8:F9:B7:F0:E1
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0184B468166621F2FDBF810BCACFFECC9262
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/TOwcuX1uYCis51TR8CS2qPm38OE.roa
Signing time: Sat 26 Nov 2022 14:47:11 +0000
ROA not before: Sat 26 Nov 2022 14:47:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 188.191.98.0/24 maxlen: 24
91.225.227.0/24 maxlen: 24
188.191.96.0/24 maxlen: 24
188.191.97.0/24 maxlen: 24
188.191.102.0/24 maxlen: 24
188.191.103.0/24 maxlen: 24
188.191.99.0/24 maxlen: 24
188.191.100.0/24 maxlen: 24
188.191.101.0/24 maxlen: 24
188.191.109.0/24 maxlen: 24
188.191.110.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
188.191.108.0/24 maxlen: 24
91.225.226.0/24 maxlen: 24
91.225.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b4:68:16:66:21:f2:fd:bf:81:0b:ca:cf:fe:cc:92:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Nov 26 14:47:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cec1cb97d6e6028ace754d1f024b6a8f9b7f0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:22:20:4a:30:2f:7f:b5:01:93:a5:79:84:
90:78:a1:f4:53:36:ff:7e:fb:4c:6a:69:ca:7d:5d:
62:b5:7b:4a:ae:00:20:75:6a:f6:ec:cc:6e:10:c5:
d5:d1:3d:da:2b:fd:b2:f3:2d:28:e4:88:4e:10:58:
c6:a7:54:bc:e0:38:75:97:6e:50:73:d1:44:14:97:
08:f7:93:ac:89:a7:a5:3e:2e:05:4a:f4:50:6e:f6:
65:3b:0a:8a:15:4c:57:87:8f:ba:b4:90:4e:b1:85:
19:44:b6:64:d1:a2:07:f7:db:d8:90:22:41:c3:b9:
c8:dc:06:d5:a5:fb:82:f9:91:fa:1b:2a:ed:07:86:
82:e2:c7:0f:93:f2:81:31:69:45:b6:9b:06:ff:0e:
5f:99:55:ba:ca:a3:5f:5f:0d:81:91:e7:cc:d9:19:
1d:f1:00:83:4e:b0:3d:73:2c:7a:27:29:aa:39:40:
08:f6:88:33:b4:d8:55:09:fc:54:b7:8e:d1:e8:32:
82:9a:e8:f8:59:15:96:ab:e4:4c:b2:d6:9d:c4:96:
e3:c3:16:f5:46:5a:a5:a2:3f:a5:90:ed:cd:00:8f:
eb:63:a7:b5:01:f8:65:80:63:83:e2:3f:eb:9f:8a:
57:1c:49:8a:ff:8b:da:be:75:36:74:ec:e9:2c:92:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:1C:B9:7D:6E:60:28:AC:E7:54:D1:F0:24:B6:A8:F9:B7:F0:E1
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/TOwcuX1uYCis51TR8CS2qPm38OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0-91.225.227.255
188.191.96.0/21
188.191.106.0/24
188.191.108.0-188.191.110.255
Signature Algorithm: sha256WithRSAEncryption
31:84:e5:40:07:46:50:fd:4c:9b:98:1a:7c:c6:71:24:9c:12:
8e:e6:02:aa:65:a4:62:13:77:3b:24:d3:76:ad:2d:ba:4b:ab:
7a:1d:6f:e2:df:f1:e2:e1:7a:98:2a:b0:68:8f:a9:28:4d:36:
75:14:2d:05:97:15:c5:a2:81:39:32:cc:aa:2a:8c:6c:07:20:
38:51:3c:cc:fe:e9:79:1d:12:84:2a:8f:54:34:36:9e:87:18:
91:c1:86:a3:fc:22:0c:e1:11:af:f6:23:f6:2b:f4:c9:19:d0:
29:38:f1:8e:d7:e1:9c:88:cb:bc:95:95:84:bb:f2:0b:46:aa:
d4:b2:3d:1b:02:cc:38:5e:64:b6:04:47:3c:42:24:1d:b3:f9:
3c:52:0c:49:20:9a:b9:04:cb:6f:ee:74:ee:68:a8:88:62:22:
b2:4c:61:9d:f0:a3:bd:c4:04:a8:58:08:ed:94:25:ce:94:6a:
7e:92:72:c7:39:3d:6a:04:f6:d9:0c:3d:d1:df:fe:e4:5d:52:
68:ab:c0:4a:df:1c:91:55:7f:f4:bc:2d:64:d5:cf:89:e8:3e:
0b:9c:61:77:00:16:58:5e:22:1e:99:0c:34:46:3f:88:18:30:
a1:5c:75:bd:48:a9:9e:28:75:8c:8d:0f:d4:33:89:f7:75:a9:
db:fa:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org