Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/cnRtNRyFX1jm4Ab_4QkawFfKyCw.roa
File: cnRtNRyFX1jm4Ab_4QkawFfKyCw.roa (raw, json)
Hash identifier: XncBH47i8dk5crgqbaG/Vn4C75W+M26huds+e3F33GQ=
Subject key identifier: 72:74:6D:35:1C:85:5F:58:E6:E0:06:FF:E1:09:1A:C0:57:CA:C8:2C
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 01833C13D50D218C9898DC51AD7B4658F73B
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/cnRtNRyFX1jm4Ab_4QkawFfKyCw.roa
Signing time: Wed 14 Sep 2022 12:57:56 +0000
ROA not before: Wed 14 Sep 2022 12:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58096
IP address blocks: 185.216.192.0/23 maxlen: 32
193.160.204.0/23 maxlen: 32
94.141.124.0/22 maxlen: 24
91.220.69.0/24 maxlen: 24
193.105.114.0/24 maxlen: 32
185.154.72.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:13:d5:0d:21:8c:98:98:dc:51:ad:7b:46:58:f7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Sep 14 12:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72746d351c855f58e6e006ffe1091ac057cac82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:f1:3b:5a:0a:26:b7:29:18:cd:bb:b4:89:
93:d6:e8:5f:c9:b7:fb:2c:31:aa:f9:69:02:e5:a6:
aa:b2:32:2a:1b:49:4a:be:fc:7d:01:d8:e5:ed:0d:
ee:99:9c:76:d9:8e:ec:cc:90:51:d5:44:9a:6e:b8:
f1:f7:ca:49:90:ab:32:12:38:ac:76:9f:01:f4:d7:
77:5b:74:10:50:34:34:12:db:e7:1c:54:eb:60:dd:
ea:60:cf:90:01:78:1c:50:79:32:ad:e0:31:21:8c:
9c:1c:35:e5:fc:44:e1:7a:1d:2f:0e:7d:df:d4:da:
ef:66:81:37:8f:d0:44:d3:40:66:51:66:5d:37:fc:
c8:8a:d4:a2:71:ce:20:4e:3f:bf:ff:80:ba:35:c2:
79:df:b3:e7:d7:35:88:eb:e0:39:ae:e3:59:ed:ed:
1c:1c:fd:32:e1:1f:42:0a:87:2b:4e:0c:e5:7e:d5:
41:38:fe:bc:81:d1:55:2a:39:f2:88:50:b6:f7:3f:
c7:3b:94:16:fd:20:8a:d4:eb:f3:8c:1f:87:e7:1e:
41:dc:75:b8:02:f0:50:c7:21:be:b4:56:4e:95:10:
7f:f8:77:93:ea:c1:08:6f:54:58:78:d5:df:ce:08:
1c:88:01:ac:d1:11:da:ed:36:b0:14:5e:b4:3b:49:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:74:6D:35:1C:85:5F:58:E6:E0:06:FF:E1:09:1A:C0:57:CA:C8:2C
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/cnRtNRyFX1jm4Ab_4QkawFfKyCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.69.0/24
94.141.124.0/22
185.154.72.0/22
185.216.192.0/23
193.105.114.0/24
193.160.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:2e:34:55:25:19:77:b2:20:23:ba:33:42:41:ca:39:26:66:
5a:62:09:76:ae:a0:35:b7:3d:9d:45:44:12:d7:2b:38:42:7b:
74:88:97:c4:bc:3f:2a:cd:53:b1:5b:5f:51:e7:12:d3:4e:c1:
74:4a:55:e0:61:a2:fb:aa:31:41:c8:58:2c:68:95:9c:6e:24:
7b:bf:a6:62:e7:88:08:6e:49:6e:d5:44:85:56:6a:69:b8:54:
e1:6e:df:53:4a:e8:bf:56:ee:18:27:ab:6b:a5:8d:fd:78:3b:
a1:16:6a:a5:9d:2f:2d:0e:26:17:65:a2:6c:4c:03:f0:fe:1b:
43:23:95:e1:32:36:73:58:1c:45:b5:26:6d:dd:3e:7a:11:a2:
53:6b:23:f3:34:bf:e5:1e:86:95:38:43:2f:18:bf:92:f1:01:
05:04:2b:71:0f:b7:9d:25:92:d9:1b:a9:d6:da:06:32:01:a9:
51:e8:18:6f:d5:31:54:83:74:f7:d2:88:50:ce:fa:dd:48:17:
fa:97:0c:ac:b5:63:53:05:31:4d:16:37:89:bf:47:79:0c:e0:
d3:0e:10:03:13:85:0b:bd:90:b2:1a:5d:d4:97:73:82:eb:58:
a0:51:7e:a4:b3:9f:4e:57:b7:19:da:2a:e8:4c:43:be:dc:77:
c2:79:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:25 2024 by rpki-client on console-fra.rpki-client.org