Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9xLTM5yvTHp0wd03YOQzxq52Z9w.roa
File: 9xLTM5yvTHp0wd03YOQzxq52Z9w.roa (raw, json)
Hash identifier: MgB1JHxyfdgokv/G2MgzCftxHyA1vKXPhrh89X2rCNU=
Subject key identifier: F7:12:D3:33:9C:AF:4C:7A:74:C1:DD:37:60:E4:33:C6:AE:76:67:DC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018545AF1B08DAF700F52A0314A2159C20CF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9xLTM5yvTHp0wd03YOQzxq52Z9w.roa
Signing time: Sat 24 Dec 2022 19:49:41 +0000
ROA not before: Sat 24 Dec 2022 19:49:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 91.216.185.0/24 maxlen: 24
86.107.168.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:45:af:1b:08:da:f7:00:f5:2a:03:14:a2:15:9c:20:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 24 19:49:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f712d3339caf4c7a74c1dd3760e433c6ae7667dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0c:34:bc:30:a3:50:76:cb:b5:16:6b:e4:53:
7d:e9:b4:42:6b:ce:a8:13:92:b3:fd:c9:0e:f0:92:
48:e6:b0:aa:05:7a:94:ea:3d:f9:13:03:85:2b:d1:
7b:a5:e6:bf:e2:6a:c5:24:4f:7a:03:81:a9:36:ce:
76:6b:4e:24:46:87:49:0f:76:b7:a0:2a:1f:4a:08:
f7:7c:3b:9a:5f:c4:90:87:81:67:52:92:ce:fb:8f:
0b:4c:e0:77:6f:ab:39:5b:bd:9c:d2:5e:8e:a4:0e:
1a:69:80:c0:70:ae:75:fc:70:c1:e5:ec:c4:85:9e:
49:df:a5:ff:80:bd:b2:a2:ec:ff:6b:9e:f8:1c:34:
7b:ba:1d:69:52:5d:86:29:6f:09:1c:66:53:cb:5a:
f7:c5:37:bf:9e:f2:3a:a1:5f:35:7c:43:3c:05:d1:
f6:24:9d:07:e2:d6:95:d8:07:0e:93:5c:a5:9e:dc:
b1:d4:5b:cf:b5:09:8f:5d:fa:44:35:b6:a3:47:0f:
23:70:4d:87:57:c4:dd:24:97:58:ae:3c:f9:b4:3a:
36:f7:51:58:71:79:a3:97:a7:7a:7d:1d:47:c6:6e:
70:f1:1a:dd:6d:7b:1d:61:ae:30:51:f2:00:38:64:
84:5a:d6:95:33:af:1f:24:50:bb:69:05:b6:b7:f7:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:12:D3:33:9C:AF:4C:7A:74:C1:DD:37:60:E4:33:C6:AE:76:67:DC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9xLTM5yvTHp0wd03YOQzxq52Z9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.168.0/24
91.216.185.0/24
93.114.244.0/24
195.88.89.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c3:da:67:e1:85:0d:51:ca:29:59:e0:c8:65:4c:b1:f8:f9:
09:56:5e:48:0f:03:69:c0:93:0f:54:88:cd:f4:ce:33:29:64:
d7:60:18:f7:86:27:be:87:ba:4e:97:a7:c6:f0:b0:15:ac:95:
b4:9a:77:47:90:c4:ea:57:41:76:28:c8:da:84:0a:5c:a8:32:
2b:f4:2a:3e:1e:c8:3a:39:f5:10:07:60:87:f3:57:bb:bf:a1:
6c:9d:21:9f:3a:96:c6:51:7b:b0:84:6c:22:0d:d0:c8:bc:aa:
65:64:35:33:b4:24:b4:69:94:54:25:f9:4b:03:d6:b5:03:5b:
92:d2:f1:f1:77:eb:c6:4f:84:26:e8:1d:c6:e8:ea:ca:8f:fc:
be:1f:40:e1:1a:1d:c5:37:d2:7b:05:54:e9:57:5e:98:73:fb:
ee:b3:43:77:70:ff:04:c1:8c:9a:fa:06:e6:aa:3d:ec:98:53:
82:d3:53:bb:b0:26:b9:ab:72:06:f0:ef:bd:38:39:21:08:bc:
4f:4e:bf:5a:79:98:46:72:33:93:ab:95:f2:17:5f:16:b9:27:
bc:05:e0:e2:c0:85:56:27:8b:b7:18:2e:aa:4e:78:81:3b:a3:
58:3e:81:f6:24:fa:da:a8:f6:82:b1:12:18:0b:ee:0b:cd:fb:
4a:ed:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org