Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/6USBHtZwt2CUaXf4Cz4sarvABQk.roa
File: 6USBHtZwt2CUaXf4Cz4sarvABQk.roa (raw, json)
Hash identifier: 86NclSB2WL7HgNnW5N9mAD+ozrQPhx2CFLdXI6ai0NE=
Subject key identifier: E9:44:81:1E:D6:70:B7:60:94:69:77:F8:0B:3E:2C:6A:BB:C0:05:09
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 040E5015
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/6USBHtZwt2CUaXf4Cz4sarvABQk.roa
Signing time: Sat 01 Jan 2022 15:55:34 +0000
ROA not before: Sat 01 Jan 2022 15:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44400
IP address blocks: 45.140.28.0/22 maxlen: 22
89.40.110.0/23 maxlen: 23
89.37.42.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68046869 (0x40e5015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Jan 1 15:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e944811ed670b760946977f80b3e2c6abbc00509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:35:0b:e0:ec:ae:8e:a2:b5:52:45:91:60:
b4:3b:bd:3c:93:a1:d4:a5:c6:0e:dc:de:0c:51:38:
cd:d5:72:cc:88:b7:58:30:bb:5b:e3:23:b1:84:0e:
0b:72:fc:64:6a:02:4b:fc:14:f3:0f:5c:14:f3:bf:
a7:99:93:7e:83:e8:df:cf:be:13:67:be:11:1f:80:
8a:70:51:cf:2d:ca:8f:e2:3e:6c:77:dc:f7:0b:85:
ca:e3:c9:47:68:35:f5:f0:b4:8c:25:5d:59:e6:2a:
82:3f:a7:ba:f8:85:c3:e4:04:d3:3e:98:99:f4:af:
eb:57:7f:f4:d1:85:97:b2:56:97:55:4f:5e:b0:49:
8b:04:47:1c:e4:af:d1:65:cc:53:ba:1a:e0:33:bc:
f0:b1:15:ce:0f:84:3b:82:7f:2a:a3:a6:55:62:e6:
1e:83:7b:1e:e3:44:b2:c1:0f:cc:3f:f5:b9:9f:3e:
b6:09:97:9a:2a:71:d4:7a:83:21:83:12:33:73:6c:
b7:f3:2f:ba:e2:b0:80:42:f0:f6:e2:a8:20:c0:d0:
05:c3:24:b7:82:39:b4:68:a4:3c:87:81:75:9e:11:
34:2e:1a:0d:8b:c8:73:dc:14:d7:fc:dc:c2:fa:85:
15:5b:ac:31:68:1f:b2:2d:6f:f5:48:73:fe:5a:93:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:44:81:1E:D6:70:B7:60:94:69:77:F8:0B:3E:2C:6A:BB:C0:05:09
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/6USBHtZwt2CUaXf4Cz4sarvABQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
89.37.42.0/23
89.40.110.0/23
Signature Algorithm: sha256WithRSAEncryption
72:ec:e2:b8:19:97:a6:db:4e:ad:2b:95:5f:f3:bc:83:ef:3f:
86:a1:72:5a:f7:6b:50:73:d1:50:32:82:b2:d6:e0:3d:3c:7c:
87:69:a0:dd:ee:11:e1:33:fa:71:95:86:9d:24:f5:e8:72:5b:
e8:aa:42:37:37:85:43:ef:6d:81:10:0e:c2:d8:62:fa:02:f5:
26:c0:b9:4d:5f:b9:f8:fa:0f:cc:3a:3a:d7:14:65:e4:52:b0:
a0:0f:ba:e3:eb:6d:28:dc:78:96:b1:a0:97:85:bc:e8:2e:ed:
f4:36:a4:d1:43:89:93:c2:6c:6c:87:95:78:87:c3:01:a9:56:
63:bc:41:ac:08:b5:9d:3d:66:32:a1:f8:0b:32:f6:9b:1a:bf:
69:3c:22:49:dd:67:d8:7b:0c:35:c5:4e:ec:98:3f:48:e0:f5:
4c:3c:42:bf:2f:55:99:75:e9:d9:86:29:3f:e1:47:0f:8d:f1:
2f:ac:aa:72:97:7e:d1:72:93:78:0d:d3:ab:3b:27:30:18:8f:
f6:94:a3:27:9b:cf:18:86:65:5b:47:38:c3:ee:7d:c1:ef:b2:
76:c0:fb:10:de:b7:6a:6b:25:de:b6:3e:38:d8:9d:86:76:2c:
4e:7f:e3:51:73:20:44:89:76:6b:de:e0:a1:2e:26:f9:4d:97:
9c:d8:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-fra.rpki-client.org