Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9QWhXIoh3xrjHKNG0g2hqdLFqKA.roa
File: 9QWhXIoh3xrjHKNG0g2hqdLFqKA.roa (raw, json)
Hash identifier: SppWuF9Y+/EoslJMuTVesOQJqqTarrn2uxmZmR9Loxc=
Subject key identifier: F5:05:A1:5C:8A:21:DF:1A:E3:1C:A3:46:D2:0D:A1:A9:D2:C5:A8:A0
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0292953B
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9QWhXIoh3xrjHKNG0g2hqdLFqKA.roa
Signing time: Sat 01 Jan 2022 11:59:28 +0000
ROA not before: Sat 01 Jan 2022 11:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204287
IP address blocks: 94.176.172.0/22 maxlen: 32
89.38.155.0/24 maxlen: 32
86.104.76.0/22 maxlen: 32
93.114.236.0/22 maxlen: 32
89.32.132.0/22 maxlen: 32
176.223.68.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43160891 (0x292953b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 11:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f505a15c8a21df1ae31ca346d20da1a9d2c5a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:57:f3:73:77:e2:d5:96:13:04:6a:37:02:
2c:d9:34:53:aa:35:02:06:7c:28:5f:47:86:da:32:
d4:d6:49:94:24:57:9b:7d:c1:e0:60:52:bf:90:5e:
77:e0:e9:84:03:51:38:55:ec:f9:8f:40:27:a2:b8:
64:19:1f:14:75:69:2a:9e:24:6b:22:98:7d:4c:dc:
3c:4c:01:00:f1:ce:4c:3f:79:ae:ce:74:d6:a1:6b:
74:ad:28:05:9e:95:29:a2:b2:0e:3a:c6:e7:99:5c:
46:65:3b:ed:60:d7:fd:90:10:98:ce:9c:90:68:8a:
da:93:7a:18:26:4c:eb:58:a1:f1:02:a6:2c:e4:3a:
c5:6d:1b:9f:ff:48:dd:23:af:fe:b5:71:83:2a:66:
f0:c1:71:a7:1c:4c:45:95:a4:ac:7e:e7:9f:c0:85:
c3:5a:4a:bc:c5:13:3c:0c:39:cf:a7:5e:20:7c:ce:
31:55:6d:23:ef:39:22:2c:ad:fc:cd:17:81:7e:03:
70:8f:40:41:2b:25:94:20:7e:da:b2:8a:ac:3e:93:
da:8f:9f:90:f5:17:ff:2a:9c:4d:17:87:1f:fc:e5:
5d:4f:e3:5c:7b:93:a9:e1:01:90:45:95:e4:0b:8d:
67:62:86:7e:2c:3e:1c:19:28:b7:be:b6:6c:0c:60:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:05:A1:5C:8A:21:DF:1A:E3:1C:A3:46:D2:0D:A1:A9:D2:C5:A8:A0
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/9QWhXIoh3xrjHKNG0g2hqdLFqKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.76.0/22
89.32.132.0/22
89.38.155.0/24
93.114.236.0/22
94.176.172.0/22
176.223.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:7f:e8:b1:4d:1c:46:95:1e:bd:29:53:db:d7:28:8d:49:8e:
a3:64:c7:37:19:63:8b:f3:c5:6b:9a:d1:34:48:53:fb:24:8e:
59:e4:bf:16:f2:b8:a3:1e:bf:5b:e7:aa:72:77:7b:6c:7b:df:
7e:f0:f6:47:bc:cf:e1:06:b0:bf:df:99:dc:f1:6a:82:79:03:
5e:f2:ad:11:40:e1:a4:26:19:bf:d5:87:a0:92:71:b2:ff:ff:
33:8e:9b:fb:9d:70:fb:91:c9:8a:0b:7b:95:57:01:e8:df:3c:
2e:78:7d:cf:2d:37:23:ff:9c:58:57:f8:d0:6e:ea:bb:93:0a:
46:cb:6b:45:01:e1:4a:ae:39:e9:32:12:26:5a:c1:df:60:85:
31:0f:78:e6:8b:66:35:93:4f:0f:d2:a5:e1:46:75:a7:cd:6d:
c1:b5:6d:1a:e3:df:52:01:1c:fe:f3:87:9c:e3:3f:8c:08:61:
f1:ef:13:90:51:60:51:8a:8e:fa:7f:d0:30:af:ec:b6:85:e2:
ef:8f:dc:ed:5e:49:ce:c2:36:58:3c:47:a2:8b:3f:d0:e9:a0:
ba:56:a1:e6:97:34:00:98:17:73:fa:97:8d:4e:e3:29:b6:65:
4d:3a:d7:8c:a9:e3:88:de:e9:e3:77:68:3f:e9:5f:11:34:d5:
af:a6:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:45 2024 by rpki-client on console-ams.rpki-client.org