Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/R_oweKKg-Xt597LjcJvuxtfzj_Y.roa
File: R_oweKKg-Xt597LjcJvuxtfzj_Y.roa (raw, json)
Hash identifier: Ki3CL2qpXrXWAQk/gC15aO9t/5b7r3h6LjlkGEZcnAQ=
Subject key identifier: 47:FA:30:78:A2:A0:F9:7B:79:F7:B2:E3:70:9B:EE:C6:D7:F3:8F:F6
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 0183331E5743EB9DDB3CBE22B59C40B2A241
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/R_oweKKg-Xt597LjcJvuxtfzj_Y.roa
Signing time: Mon 12 Sep 2022 19:12:49 +0000
ROA not before: Mon 12 Sep 2022 19:12:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58096
IP address blocks: 193.160.204.0/23 maxlen: 32
94.141.124.0/22 maxlen: 24
91.220.69.0/24 maxlen: 24
193.105.114.0/24 maxlen: 32
185.154.72.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:33:1e:57:43:eb:9d:db:3c:be:22:b5:9c:40:b2:a2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Sep 12 19:12:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47fa3078a2a0f97b79f7b2e3709beec6d7f38ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:07:a5:e7:80:77:fe:af:2a:a4:6a:59:5f:
46:46:20:b5:be:15:0a:48:b4:35:0e:78:7d:a7:c7:
ac:84:5e:8a:28:cd:d5:58:b1:25:cb:38:0a:ba:8c:
bb:95:3e:27:26:e2:23:fe:fa:04:7d:70:8b:75:bb:
22:f4:12:97:71:aa:d6:0c:2e:f0:3f:79:60:68:7d:
ce:39:3c:10:24:73:69:79:68:56:9e:ae:7c:6d:fe:
b2:ce:d8:fe:a1:02:e1:68:8d:a6:81:9d:21:32:89:
cf:c1:5f:51:20:bc:d0:2d:eb:ef:7e:79:af:ce:ef:
b9:8f:6c:2c:4d:fe:a5:2c:3f:01:c0:fb:c3:c6:2b:
0a:cc:4b:4a:fe:b2:7e:fb:67:74:93:0b:6a:41:33:
ae:e0:5d:99:54:6e:b1:6c:29:cf:26:a8:2c:bc:c6:
39:75:88:ca:f1:46:08:0c:29:49:d3:f1:21:e0:49:
d6:d1:e8:14:49:e6:ce:11:d1:9a:29:1d:7f:dd:4d:
ef:3c:00:53:4f:90:f1:9d:4e:3d:96:3a:ca:e6:f0:
96:75:d0:53:98:b4:10:f8:fe:d3:f5:09:5b:94:f7:
fe:7a:54:a2:eb:92:92:d2:5c:3b:b5:c7:3b:2b:4c:
99:57:bc:47:13:24:d6:bf:19:06:06:dc:eb:22:1d:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:30:78:A2:A0:F9:7B:79:F7:B2:E3:70:9B:EE:C6:D7:F3:8F:F6
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/R_oweKKg-Xt597LjcJvuxtfzj_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.69.0/24
94.141.124.0/22
185.154.72.0/22
193.105.114.0/24
193.160.204.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:10:75:db:80:b5:bc:e4:7a:86:98:19:55:89:c0:47:dd:01:
9a:53:c3:b2:7d:a0:5e:96:b0:87:49:43:4b:8e:66:08:fe:6e:
ea:28:85:45:e2:ca:00:e1:47:57:02:d4:af:de:aa:45:6d:9c:
b0:bb:97:2c:3d:db:ac:35:67:92:ce:8e:8b:b1:c8:e3:a1:46:
16:75:21:f3:e6:b9:42:2d:57:be:c3:9d:73:d4:59:cc:a2:41:
50:d7:52:a7:e3:47:48:5e:ab:b0:00:cb:cd:a8:78:eb:53:3e:
72:35:71:49:58:f9:ec:a3:5e:86:21:d7:ec:3e:ee:ca:c6:53:
12:ae:96:5a:04:48:37:05:5b:79:dc:8f:99:b2:90:4f:52:8e:
6d:f9:62:83:e2:36:79:72:21:cf:34:4d:39:d9:43:21:07:fd:
5d:7e:4d:33:8d:bb:20:a2:50:2a:63:b8:42:4f:73:d9:71:5a:
64:12:39:d5:c9:35:81:0a:1b:c7:f8:21:dd:71:83:19:90:7f:
0a:00:8d:82:eb:eb:02:b2:b8:c8:2b:52:76:01:97:dc:a1:c2:
98:c2:52:58:1e:1a:21:7d:72:e5:1e:c6:c1:4f:83:12:1b:14:
37:3a:8b:08:2f:81:9d:59:54:38:eb:bc:68:ea:69:a7:81:77:
ed:42:be:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:25 2024 by rpki-client on console-fra.rpki-client.org