Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/T3grLv_9up4Iq4itpdRvZHUPRNg.roa
File: T3grLv_9up4Iq4itpdRvZHUPRNg.roa (raw, json)
Hash identifier: oEp7I/lGtRG4rAPTYWHGlgtZZeGBzxzDefXd7C37SCI=
Subject key identifier: 4F:78:2B:2E:FF:FD:BA:9E:08:AB:88:AD:A5:D4:6F:64:75:0F:44:D8
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 04D7C3CF
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/T3grLv_9up4Iq4itpdRvZHUPRNg.roa
Signing time: Tue 07 Jun 2022 03:16:20 +0000
ROA not before: Tue 07 Jun 2022 03:16:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43758
IP address blocks: 91.225.28.0/22 maxlen: 22
91.198.146.0/24 maxlen: 24
91.213.206.0/24 maxlen: 24
91.224.38.0/23 maxlen: 23
185.180.208.0/22 maxlen: 24
2001:67c:2e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81249231 (0x4d7c3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jun 7 03:16:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f782b2efffdba9e08ab88ada5d46f64750f44d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:fd:4f:01:75:66:c4:ff:ad:11:cf:de:aa:
e6:15:ba:e6:60:e4:e0:05:cd:33:6a:7b:ba:bd:3d:
43:40:e7:4f:df:bc:fb:5c:45:ce:9d:80:b7:62:d2:
ff:92:11:fe:97:6b:55:38:e5:50:77:91:ca:12:5f:
4b:ff:bc:49:5e:45:ba:53:91:78:e6:ae:cf:6b:1e:
94:e6:ca:11:de:e2:31:ce:3b:ae:77:cb:7d:20:6c:
86:b0:d8:b9:b0:a6:eb:32:16:42:4c:9a:9d:eb:70:
6c:d8:01:af:12:8d:c0:99:6d:d6:07:64:11:a6:ec:
db:00:0e:b4:70:37:b9:87:3c:31:90:53:7e:7e:d2:
2a:38:08:3b:1e:7f:0b:7b:48:de:41:9e:81:61:8e:
15:ee:83:c2:8c:3d:02:bf:ce:75:f1:72:59:84:70:
1d:81:57:5c:2b:b1:30:ce:f0:5b:90:a0:cb:34:40:
8a:e7:bb:25:44:d7:70:4e:45:78:70:48:16:ef:9c:
d7:0e:ce:d4:4d:74:d5:e2:eb:a4:ac:57:b4:c5:0c:
4d:0f:70:67:4a:fd:ab:87:6c:72:6b:de:64:50:41:
b7:63:41:11:df:49:2f:e4:df:11:b0:77:a1:d3:fd:
bd:33:df:47:a8:19:80:8c:07:34:9e:98:e3:2c:22:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:2B:2E:FF:FD:BA:9E:08:AB:88:AD:A5:D4:6F:64:75:0F:44:D8
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/T3grLv_9up4Iq4itpdRvZHUPRNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.146.0/24
91.213.206.0/24
91.224.38.0/23
91.225.28.0/22
185.180.208.0/22
IPv6:
2001:67c:2e0::/48
Signature Algorithm: sha256WithRSAEncryption
29:71:19:0d:8a:cb:7d:54:95:92:33:2b:4b:05:bd:b3:0a:e6:
60:74:4e:0c:47:9b:1a:6d:32:63:13:d6:4f:61:29:9e:fe:21:
35:bc:b1:62:1d:39:76:7c:0a:03:40:07:34:53:e4:ef:3f:e6:
66:f1:52:41:f2:83:70:e2:c6:4c:ec:69:c2:83:33:1d:bf:86:
ac:0c:6b:6e:a4:95:9f:ff:3d:94:0b:81:b1:6e:8f:6b:c6:01:
99:74:df:e8:3e:67:b3:56:d6:45:e1:c0:62:a6:c1:af:4b:e6:
87:72:ed:fb:3a:e4:fc:fa:ad:93:7a:11:25:36:f9:b3:52:1c:
f8:3a:c6:61:39:56:57:13:f9:52:33:3c:ff:dc:ae:7c:17:75:
29:5e:1c:cd:5d:19:7b:41:ea:ab:45:7a:52:0f:03:61:d5:8e:
e3:44:a9:25:bb:cd:83:b6:c5:5a:0a:9a:39:37:f1:ab:d1:5a:
8e:d5:47:26:83:fc:2d:23:c4:9f:36:aa:c0:3d:79:e4:44:d9:
92:9a:2c:d9:83:c3:4c:75:d2:7e:57:51:81:bc:03:a2:e5:19:
36:98:6b:37:d5:c1:df:b3:93:fc:37:2b:9e:5d:af:a3:12:a3:
77:1e:33:1b:59:95:e6:04:2c:ad:2e:bf:c3:48:3c:a8:7d:f2:
83:2c:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org