Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gni9wSmAKw6tKFOtVUTR4Pgc0xk.roa
File: gni9wSmAKw6tKFOtVUTR4Pgc0xk.roa (raw, json)
Hash identifier: 7Tq0bvR6qx0kjuhnzI32vRsrjGtSm4QYPg/7Ha9SlE4=
Subject key identifier: 82:78:BD:C1:29:80:2B:0E:AD:28:53:AD:55:44:D1:E0:F8:1C:D3:19
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018243AD900A46B8912AC7BF4E46EB75F963
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gni9wSmAKw6tKFOtVUTR4Pgc0xk.roa
Signing time: Thu 28 Jul 2022 07:20:23 +0000
ROA not before: Thu 28 Jul 2022 07:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51557
IP address blocks: 91.93.151.0/24 maxlen: 24
91.93.146.0/24 maxlen: 24
91.93.149.0/24 maxlen: 24
91.93.152.0/24 maxlen: 24
84.51.21.0/24 maxlen: 24
84.51.25.0/24 maxlen: 24
84.51.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:ad:90:0a:46:b8:91:2a:c7:bf:4e:46:eb:75:f9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jul 28 07:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8278bdc129802b0ead2853ad5544d1e0f81cd319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:9e:8c:7e:29:4d:74:26:4b:08:51:93:80:
60:dd:2d:72:bb:8e:79:fc:be:cc:7a:c5:63:ed:f9:
76:e8:d8:ce:fa:9f:a5:5c:61:3a:81:ac:f9:0d:ea:
12:ab:5b:80:74:93:74:f1:bb:ad:20:1a:41:cd:07:
bb:90:16:38:4e:51:81:16:16:e9:4c:88:70:f2:5d:
04:ab:d3:79:5b:6c:6c:c4:ed:6c:68:ef:21:40:31:
a0:de:c7:a6:24:24:c7:10:ab:b5:de:6f:93:22:e8:
c8:d4:80:90:d7:96:30:be:87:d1:8e:c1:ce:5d:90:
04:d1:e2:5e:9f:26:67:99:ee:0a:37:27:40:16:78:
c7:f6:e3:8e:bd:5f:e8:ad:1a:1c:88:0f:0a:35:60:
1a:e4:b6:61:15:fa:fb:0b:6f:2b:a1:3a:81:45:57:
8b:7b:3c:2e:e4:9e:ca:d8:f7:5d:ab:10:d1:dd:6c:
42:b0:f4:d1:98:02:85:f6:bd:7a:49:3e:4b:17:4f:
a7:41:dc:b3:c1:cc:d6:fb:eb:8f:fb:d2:75:8e:2e:
e5:d8:f1:ea:f3:35:e5:8e:c5:3b:13:f3:11:30:74:
28:6b:6c:31:e7:21:8c:7e:52:a2:66:3a:5c:29:bd:
47:d2:cf:ce:01:30:1c:98:f2:a9:40:8f:b2:f7:08:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:BD:C1:29:80:2B:0E:AD:28:53:AD:55:44:D1:E0:F8:1C:D3:19
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/gni9wSmAKw6tKFOtVUTR4Pgc0xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.51.21.0/24
84.51.25.0/24
84.51.38.0/24
91.93.146.0/24
91.93.149.0/24
91.93.151.0-91.93.152.255
Signature Algorithm: sha256WithRSAEncryption
04:b1:36:1c:52:50:63:38:ba:c4:be:8b:3e:98:6a:40:80:7d:
7e:7a:cb:86:58:df:99:4b:3e:18:d4:53:b7:02:5c:10:04:fd:
de:16:13:28:25:1b:b9:36:c6:16:55:d0:0f:97:87:4a:77:96:
69:ed:72:97:74:72:27:bc:50:3f:a5:ec:f0:53:72:04:1d:a6:
ac:52:7c:6d:0c:7d:b5:f1:00:71:29:22:ab:db:64:49:61:d4:
9d:08:88:76:15:01:1f:d0:b5:43:dc:95:47:23:0f:ed:31:db:
34:37:76:e5:2f:5b:17:81:86:56:f4:0f:61:36:10:70:be:d7:
ca:bf:14:69:3e:15:e1:e1:5d:6d:06:a2:8d:b6:36:a3:6f:7a:
7b:01:8c:1c:40:30:3e:12:c5:d6:fb:e4:c0:f6:7c:2a:43:f5:
fa:13:4e:ee:89:b9:eb:79:13:c2:de:55:50:a2:a7:42:cc:e2:
06:1c:84:49:ff:e8:88:9c:a6:9c:ae:01:0a:78:6e:fe:6b:60:
26:7f:b0:40:33:e0:26:34:4e:90:29:aa:96:a6:f8:d2:f8:6b:
9a:27:b0:3d:fe:4b:3f:b1:b4:36:24:a5:f0:7a:60:de:3b:1b:
e4:c6:d6:52:c0:6c:94:e6:40:52:20:e5:cb:24:68:32:31:d5:
7a:ec:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org