Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/xWxPVJB-kVggHs-ajQZABFrdKdg.roa
File: xWxPVJB-kVggHs-ajQZABFrdKdg.roa (raw, json)
Hash identifier: EviNyqI4pwcpPFbH55osQEmjqEssvixCItEYiQxk4TU=
Subject key identifier: C5:6C:4F:54:90:7E:91:58:20:1E:CF:9A:8D:06:40:04:5A:DD:29:D8
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 04BDC82E
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/xWxPVJB-kVggHs-ajQZABFrdKdg.roa
Signing time: Sat 01 Jan 2022 12:04:33 +0000
ROA not before: Sat 01 Jan 2022 12:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202914
IP address blocks: 141.98.12.0/24 maxlen: 24
141.98.13.0/24 maxlen: 24
141.98.14.0/23 maxlen: 24
185.121.172.0/23 maxlen: 24
185.150.196.0/22 maxlen: 24
91.210.56.0/22 maxlen: 24
2a0d:3e80::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79546414 (0x4bdc82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jan 1 12:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c56c4f54907e9158201ecf9a8d0640045add29d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:c7:46:ec:50:3d:58:3d:db:f9:e8:f9:e1:
77:8f:a8:be:b0:7e:fb:54:f2:e1:bd:49:eb:0b:2d:
4a:38:9e:cc:9a:38:f8:26:f5:10:f8:41:d4:36:24:
13:c6:e2:6f:06:7b:81:c1:29:53:a4:43:28:88:00:
4c:88:ba:13:70:45:31:1c:35:9b:b4:8a:93:a2:5d:
ff:14:e5:f5:35:bc:c3:01:f1:f0:fd:49:b3:f6:2a:
59:e1:a5:69:7e:67:ea:af:0e:ba:02:45:fe:5c:00:
c9:ea:ed:9f:7b:e8:44:c9:7e:08:12:dc:42:e7:48:
40:96:45:b4:40:6d:22:16:a2:00:91:64:4c:9c:58:
10:57:9d:b1:ea:c0:a6:17:3c:60:36:f5:03:65:2c:
77:1a:cd:d8:b2:c6:eb:03:34:1b:f4:67:af:35:52:
01:42:d4:f7:27:5a:1b:d3:3a:7f:38:9a:b1:7d:aa:
a3:bc:0c:9d:e3:a5:7f:7e:bb:63:31:9e:d6:e3:88:
a9:31:f3:e9:46:fc:e8:9d:f0:d3:54:e1:bb:48:79:
66:19:81:0e:36:0b:1e:7d:05:76:1c:51:d1:3f:37:
a3:fc:ec:76:78:bb:24:7b:ef:1f:2d:5c:f8:07:0f:
27:a9:aa:c3:50:b0:90:52:32:bd:e6:6b:f7:1d:ec:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6C:4F:54:90:7E:91:58:20:1E:CF:9A:8D:06:40:04:5A:DD:29:D8
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/xWxPVJB-kVggHs-ajQZABFrdKdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.56.0/22
141.98.12.0/22
185.121.172.0/23
185.150.196.0/22
IPv6:
2a0d:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
cd:20:cd:a7:85:1d:72:3c:c1:bf:07:3f:81:93:24:8c:e6:75:
af:9f:98:e2:8c:2b:fc:ab:73:5b:3f:99:63:8d:6b:9b:36:4f:
c1:ed:dd:07:8c:d9:5c:e9:b8:f2:56:ee:32:86:28:c1:b4:2e:
c5:a7:b5:a8:b0:48:e7:b6:63:96:54:87:6c:4a:c7:21:3d:40:
0f:7b:38:75:d8:b9:e0:9e:d8:b0:76:53:ee:b4:4b:e1:c1:16:
aa:80:47:1e:ee:a6:78:97:d8:12:a6:fc:12:04:90:70:6c:2b:
26:12:fe:61:f4:6d:da:07:9b:3f:b1:83:9c:83:d1:63:1c:83:
4a:fd:9e:ad:59:03:57:63:a4:ea:e2:2b:15:a3:c1:0c:54:68:
e3:2f:ad:e9:bd:68:8a:8d:45:cb:4a:4e:73:2d:08:b6:ab:de:
59:81:29:07:21:d8:d4:7a:22:b0:f3:f2:fc:b9:35:66:06:6e:
1e:27:b2:35:99:19:2f:3a:1f:f2:7f:19:c6:c0:d1:7f:90:e1:
1b:ad:a1:98:07:72:60:1e:10:28:50:b5:cc:54:29:05:7a:e1:
bb:a3:15:77:b1:57:23:29:c1:ba:27:53:e5:b0:12:a9:b1:05:
32:2e:cc:ea:b0:d2:1a:8d:bf:44:05:14:d7:e0:09:dc:68:9d:
b8:e8:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:59 2023 by rpki-client on console-fra.rpki-client.org