Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/RMMSquc2FtW5tPujTSREQjRJmX8.roa
File: RMMSquc2FtW5tPujTSREQjRJmX8.roa (raw, json)
Hash identifier: idM8afHGzQ8wg2kWrwkmzcoY6VWYK/d3b68x+Je1w7A=
Subject key identifier: 44:C3:12:AA:E7:36:16:D5:B9:B4:FB:A3:4D:24:44:42:34:49:99:7F
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 186826E4
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/RMMSquc2FtW5tPujTSREQjRJmX8.roa
Signing time: Sat 01 Jan 2022 08:02:43 +0000
ROA not before: Sat 01 Jan 2022 08:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48344
IP address blocks: 91.207.17.0/24 maxlen: 24
91.207.16.0/23 maxlen: 24
91.207.16.0/24 maxlen: 24
195.210.27.0/24 maxlen: 24
195.210.26.0/23 maxlen: 23
195.210.26.0/24 maxlen: 24
91.228.170.0/23 maxlen: 24
91.228.171.0/24 maxlen: 24
2001:67c:140::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409478884 (0x186826e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Jan 1 08:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44c312aae73616d5b9b4fba34d2444423449997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:28:2a:f0:67:fa:53:8f:0c:77:aa:2b:e2:
67:e6:08:c7:66:97:23:c7:82:ea:77:4c:5f:92:77:
a2:a3:20:90:ae:16:14:ce:47:23:65:57:71:d5:d7:
2e:f6:52:69:4c:15:db:01:ce:0b:6b:bb:ec:20:bd:
ef:72:90:fb:c4:b0:bc:47:dd:74:ff:a5:dd:00:a9:
c5:0f:b3:be:eb:a1:3a:be:f8:3a:a6:ba:c4:91:f7:
98:e8:1c:79:94:27:3c:88:45:57:2e:b3:90:c9:c4:
8f:d8:54:db:ab:bf:5a:ed:a0:64:35:64:ef:92:15:
7c:3d:b2:18:0c:c4:c2:0f:f2:a4:df:98:31:9d:95:
7e:ea:74:ca:b2:af:ec:75:6f:b3:99:d8:08:6f:09:
d1:80:c0:be:1d:f4:d7:9f:60:f2:de:c8:f9:79:db:
3b:c9:89:43:d7:55:85:68:01:7a:8a:47:98:9c:f4:
4c:05:1c:7d:38:5d:70:3c:00:3e:52:38:31:ba:bc:
3b:1e:f7:d8:19:55:df:83:51:77:83:a7:a0:9e:77:
45:c3:1d:10:40:a3:0e:b7:66:bb:df:5b:ff:38:86:
86:38:92:ce:b8:8c:84:3e:c3:81:d6:89:70:3c:5f:
db:58:5c:b6:c4:ad:04:9b:48:34:08:90:86:08:f1:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:12:AA:E7:36:16:D5:B9:B4:FB:A3:4D:24:44:42:34:49:99:7F
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/RMMSquc2FtW5tPujTSREQjRJmX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.16.0/23
91.228.170.0/23
195.210.26.0/23
IPv6:
2001:67c:140::/48
Signature Algorithm: sha256WithRSAEncryption
18:ea:37:3d:87:a6:e4:0f:1b:9b:38:a7:2c:50:ad:95:30:59:
0d:48:5a:06:fb:51:37:b9:85:be:bc:8f:a4:92:c4:4d:ad:9e:
08:97:6a:ec:5c:69:2d:61:8b:92:0a:e6:c6:8c:b4:44:a5:4c:
02:70:97:e9:9a:db:21:f4:11:4b:3a:16:47:36:c9:89:ad:a9:
6d:e1:c5:ac:51:75:97:14:ae:ae:ba:f9:ed:79:c9:58:61:ba:
4a:7e:43:4f:da:b6:c5:d6:3d:2d:06:02:4b:5b:78:30:7c:22:
f7:4c:88:b0:96:c2:bb:62:dd:99:aa:0f:43:77:67:ef:d1:d1:
51:40:9b:c2:2e:a3:e4:86:2f:30:67:a2:a2:39:15:06:f3:84:
9c:a7:ca:55:20:85:d8:cb:4f:4e:93:12:77:5d:2c:c9:4a:77:
b4:5a:72:f6:69:1b:84:2a:cf:a9:57:32:36:29:18:24:8b:51:
6f:a1:77:33:7a:e3:ce:40:cc:75:be:5b:37:01:50:a6:59:3b:
06:43:4e:9c:5b:e0:81:a2:25:1b:84:df:64:bf:1a:1a:0d:e7:
e4:36:6b:e4:22:32:f5:aa:c9:c0:ce:20:70:16:49:b0:7d:e3:
49:40:52:75:c0:35:1b:03:2f:ab:63:88:9d:52:e9:a9:d5:8e:
4b:e2:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-fra.rpki-client.org