Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/xM6jM32JQVvF0R2VxpUUDwIgaLs.roa
File: xM6jM32JQVvF0R2VxpUUDwIgaLs.roa (raw, json)
Hash identifier: SKJe0ONsVqpFdob7E+XEwU6X01/5oHd+StU59z0iMHw=
Subject key identifier: C4:CE:A3:33:7D:89:41:5B:C5:D1:1D:95:C6:95:14:0F:02:20:68:BB
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 03DDA8A3
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/xM6jM32JQVvF0R2VxpUUDwIgaLs.roa
Signing time: Sat 01 Jan 2022 08:59:18 +0000
ROA not before: Sat 01 Jan 2022 08:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59456
IP address blocks: 195.244.14.0/23 maxlen: 23
195.244.18.0/24 maxlen: 24
91.239.15.0/24 maxlen: 24
91.239.24.0/24 maxlen: 24
91.239.37.0/24 maxlen: 24
91.238.217.0/24 maxlen: 24
45.152.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64858275 (0x3dda8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 1 08:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4cea3337d89415bc5d11d95c695140f022068bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:c6:13:e9:67:02:89:53:e2:42:10:8d:05:
3a:b3:8b:8a:e7:18:e9:83:19:46:e0:aa:a5:96:69:
20:29:78:a9:c8:2b:4e:73:ad:08:b8:72:e6:e3:d6:
78:02:0c:82:fa:84:14:4e:ec:a6:c1:d6:7b:bd:38:
83:9b:cc:68:58:cb:d4:01:9c:a3:ba:31:85:98:ca:
34:ab:65:e2:58:f6:7a:72:06:1f:6b:bb:11:65:79:
e0:f6:f7:cf:b5:90:1f:8a:17:d6:23:b1:02:4b:3d:
72:f1:cf:20:b5:90:70:14:98:54:94:16:d4:70:17:
63:7d:f6:bc:d2:93:e8:45:d9:6f:36:9d:dd:ad:f9:
e8:68:da:ac:5e:eb:2b:54:b6:92:1f:92:ce:c3:d8:
20:c6:ee:31:8f:27:a9:fc:b0:e3:79:86:1d:17:4f:
2b:14:25:31:da:34:0b:e3:42:75:ab:dd:7a:df:8d:
83:82:c8:72:7e:0a:5c:ed:36:41:62:b2:f0:f4:19:
ed:11:9e:d4:c5:75:65:9f:3d:29:91:c4:df:7d:8f:
bc:a0:2e:3c:6a:e2:be:90:c1:57:ea:15:17:b5:02:
8d:b0:5a:a8:58:0f:af:8f:c4:e5:63:d7:2f:74:30:
8b:a8:d5:c7:f1:45:77:0c:a2:ac:85:44:d9:f3:e1:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:A3:33:7D:89:41:5B:C5:D1:1D:95:C6:95:14:0F:02:20:68:BB
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/xM6jM32JQVvF0R2VxpUUDwIgaLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.40.0/22
91.238.217.0/24
91.239.15.0/24
91.239.24.0/24
91.239.37.0/24
195.244.14.0/23
195.244.18.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c6:d2:37:f4:54:e5:b1:5a:69:b7:f6:c4:4f:b5:bc:05:08:
c5:48:33:18:ca:06:57:fa:2e:d9:9a:6c:c2:c6:0e:62:ae:11:
8d:7d:5e:57:64:38:c4:36:c5:0a:39:b1:ad:d1:6c:f0:44:f5:
ed:27:96:8e:e3:92:5c:5c:d0:32:cd:b5:91:0c:77:18:26:3d:
6a:28:59:10:ca:0b:79:cf:84:57:b9:1e:81:c2:45:1a:44:68:
4b:eb:f6:54:9d:cb:fa:57:e4:61:51:32:38:16:2e:2c:46:b0:
45:ce:02:2f:39:6f:a7:c3:49:dc:8c:7a:b4:11:82:87:6d:0d:
36:1f:dc:84:37:0a:e3:24:22:0a:09:f9:dd:dd:53:ed:26:75:
d7:a5:ee:51:20:b6:f0:78:23:b6:f1:d0:5e:b9:0c:6b:7f:74:
e7:1c:b5:10:cf:ee:ea:c9:99:da:b1:89:46:63:0c:0d:f6:79:
22:7a:cf:6d:27:17:14:22:af:c4:17:d7:b9:a7:ea:07:cc:77:
7c:cd:dc:b9:d3:36:cb:51:09:c7:dc:e3:b9:1c:84:c0:4a:76:
d8:6b:19:a3:9c:e8:7f:91:32:38:b6:8e:ec:6a:f6:e5:b1:6c:
f7:7d:f3:9b:9f:b7:a8:93:4f:5d:35:6e:f4:14:47:1a:d0:18:
43:0d:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:29 2023 by rpki-client on console-fra.rpki-client.org